livecd-rootfs/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot

#!/bin/bash

# NOTE: the file number needs to be **higher** than the one
# cloud-init writes (cloud-init uses 50-cloud-init.conf) so
# the cloud-init file takes precedence
cat << EOF >> "/etc/ssh/sshd_config.d/60-cloudimg-settings.conf"
PasswordAuthentication no
EOF
Add hooks and includes. 2015-04-08 09:34:15 +01:00			`#!/bin/bash`

fix: use correct sshd_config.d/ ordering Commit 3b2eeb017153cbb wrongly backported a change to not modify /etc/ssh/sshd_config . The correct fix from ubuntu/master is 3b2eeb017153c where the file is named 60-cloudimg-settings.conf instead of 10-cloudimg-settings.conf. This fixes problems with cloud-init which does write 50-cloud-init.conf which should have higher priority than the provided file from the image. (cherry picked from commit 434b21e2023c3c3e5261fbd78e2eefee9aac5b1e) 2024-01-19 09:29:52 +01:00			`# NOTE: the file number needs to be higher than the one`
			`# cloud-init writes (cloud-init uses 50-cloud-init.conf) so`
			`# the cloud-init file takes precedence`
			`cat << EOF >> "/etc/ssh/sshd_config.d/60-cloudimg-settings.conf"`
fix: don't modify ssh_config for ubuntu-cpc projects (LP:1968873) Modifying directly /etc/ssh/sshd_config creates "problems" when upgrading eg. from Focal to Jammy because the upgrade will ask the user what to do with the modified config. To avoid that, put the custom configuration into /etc/ssh/sshd_config.d/ so the upgrade of openssh-server can just replace /etc/ssh/sshd_config without asking the user. (cherry picked from commit b54d24ff3310f7ace00ab08e0dacfdc89e026f1c) 2022-06-28 13:24:46 +02:00			`PasswordAuthentication no`
			`EOF`