From b68bdabbb45c3be69ec7d6ee3f93b9cdbb95c4a0 Mon Sep 17 00:00:00 2001 From: Mohammed Naser Date: Tue, 14 Mar 2017 20:09:58 -0400 Subject: Refactor and enable shell access When installing from binary, packaging tools create a user for Keystone which does not have a shell. This results in fernet token operations failing due to the fact that `rsync` cannot connect over SSH because the Keystone user cannot login. This patch addresses this issue by enabling shell access to the Keystone user, it also refactors the Nova SSH controller to use the pre-existing macro. Change-Id: Ic753a94311c5d7d72a82d91c1279dfe982e9afbd Related-Bug: #1617902 --- docker/keystone/keystone-ssh/Dockerfile.j2 | 2 ++ 1 file changed, 2 insertions(+) (limited to 'docker/keystone') diff --git a/docker/keystone/keystone-ssh/Dockerfile.j2 b/docker/keystone/keystone-ssh/Dockerfile.j2 index 51314cdc8..2f919fe9c 100644 --- a/docker/keystone/keystone-ssh/Dockerfile.j2 +++ b/docker/keystone/keystone-ssh/Dockerfile.j2 @@ -5,6 +5,8 @@ MAINTAINER {{ maintainer }} {% import "macros.j2" as macros with context %} +{{ macros.configure_user(name='keystone', shell='/bin/bash') }} + {% if base_distro in ['centos', 'oraclelinux', 'rhel'] %} {% set keystone_ssh_packages = [ 'openssh-server', -- cgit v1.2.3