Cross-platform instance initialization
Go to file
Alessandro Pilotti b5a7fc38aa Resets service user password at each execution
In a cloud environment instance images are typically cloned.
This implies that the credentials used by the Cloudbase-Init service,
even if randomly generated, are identical across instances of the same
image, unless replaced during boot, e.g. by the post-sysprep specialize
actions. Since this cannot be controlled in cases in which sysprep or
similar mechanisms are not used (e.g. a Nova image snapshot), this patch
adds a mechanism to reset the Cloudbase-Init service password at each
execution. This avoids potential "pass the hash" type of attacks executed
from user-data across instances booted from the same image.

Change-Id: Ib778acc4c01f476c600e15aa77ed777523a77538
Closes-Bug: #1631567
Co-Authored-By: Adrian Vladu <avladu@cloudbasesolutions.com>
Co-Authored-By: Alexandru Coman <acoman@cloudbasesolutions.com>
2016-10-14 17:06:47 +03:00
cloudbaseinit Resets service user password at each execution 2016-10-14 17:06:47 +03:00
doc Merge "Remove extra (main) from the documentation" 2015-10-19 13:02:01 +00:00
etc/cloudbase-init Add support for generating cloudbase-init configuration sample 2016-09-02 11:19:59 +03:00
.gitattributes Normalize line endings 2014-02-09 21:41:45 +02:00
.gitignore Ignore PyCharm settings/data 2015-03-06 16:00:23 +02:00
.gitreview Update .gitreview for new namespace 2015-10-17 21:58:19 +00:00
.testr.conf Fixes requirements on Linux 2014-10-05 22:20:58 +03:00
LICENSE Adds LICENSE file 2013-10-04 00:07:58 +03:00
README.rst Updates project repo to openstack 2015-10-19 01:17:26 +03:00
requirements.txt Use environment markers for platform-specific modules 2015-09-10 14:00:58 +03:00
setup.cfg Fix docs build 2016-10-04 16:59:46 +02:00
setup.py Move to the new oslo_config and oslo_log modules 2015-08-12 17:43:45 +03:00
test-requirements.txt Add cloudbase-init Sphinx documentation 2015-09-04 20:46:15 +03:00
tox.ini Adds tox.ini 2014-09-10 12:57:37 +03:00