Skip to content

[develop] Fix an issue where users cannot SSH into LoginNodes with LoginNode-specific keys when different keys are specified for HeadNode and LoginNodes #2950

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

hehe7318
Copy link
Contributor

Description of changes

  • During Login Node bootstrap before mounting /home:
    • Create a local folder to store the key pair for LoginNodes:
      • /etc/ssh/login_nodes_authorized_keys.d (0755 root:root)
      • /etc/ssh/login_nodes_authorized_keys.d/$DEFAULT_USER/ (0700 $DEFAULT_USER:$DEFAULT_USER)
    • Copy the Login Node key to /etc/ssh/login_nodes_authorized_keys.d/$DEFAULT_USER/authorized_keys (0600 $DEFAULT_USER:$DEFAULT_USER).
    • Append in /etc/ssh/sshd_config:
    AuthorizedKeysFile /etc/ssh/login_nodes_authorized_keys.d/%u/authorized_keys .ssh/authorized_keys
    

Tests

  • I am on the manually testing

References

Checklist

  • Make sure you are pointing to the right branch.
  • If you're creating a patch for a branch other than develop add the branch name as prefix in the PR title (e.g. [release-3.6]).
  • Check all commits' messages are clear, describing what and why vs how.
  • Make sure to have added unit tests or integration tests to cover the new/modified code.
  • Check if documentation is impacted by this change.

Please review the guidelines for contributing and Pull Request Instructions.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

…ecific keys when different keys are specified for HeadNode and LoginNodes.
@hehe7318 hehe7318 requested review from a team as code owners May 19, 2025 19:49
@hehe7318 hehe7318 added the 3.x label May 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant