cloud-init, as configured by subiquity, can reapply settings

Bug #1956539 reported by Dan Bungert
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
subiquity
Fix Released
Undecided
Unassigned

Bug Description

The user at https://github.com/canonical-web-and-design/ubuntu.com/issues/9515 reported that cloud-init applies the 'first boot' config more than once. This can potentially be a serious issue if the subiquity-provided cloud-init config contains low security credentials that are replaced ASAP - it would not be acceptable for cloud-init to then revert them.

Subiquity should configure the system in such a way that the setting is applied exactly once and then it is not possible for these settings to be applied again.

Tags: fr-1942
Dan Bungert (dbungert)
tags: added: fr-1942
Revision history for this message
Dan Bungert (dbungert) wrote :

A behavior change has been introduced in Ubuntu Kinetic and later where cloud-init is disabled after the first-boot configuration is complete. If need be we can consider what to do for earlier versions.

Changed in subiquity:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.