password recovery tool reports success but system loads with original password set in vyos_user_data.tfpl
vyos_user_data.tfpl:
vyos_config_commands:
- set system host-name 'VyOS-for-Smoke-Tests'
- set system login banner pre-login 'Welcome to the VyOS for Smoke Tests on AWS'
- set interfaces ethernet eth0 description 'WAN'
- set interfaces ethernet eth1 description 'LAN'
- set interfaces ethernet eth1 dhcp-options no-default-route
- set service ssh disable-password-authentication
- set system login user vyos authentication plaintext-password 'vyos'Steps to reproduce:
- Instance started, login vyos/vyos success
- Reboot and choose password recovery from grub menu
- Boot into password recovery tool and set a new password for user vyos
- Reboot and try to login with new password
after loading config.boot still contains the old password in plaintext form:
user vyos {
authentication {
plaintext-password "vyos"
public-keys cloud-init-66988e94-df50-4773-8851-c44486acfa6e {
key "AAAAB3NzaC1yc2EAAAADAQABAAABAQC9mPxTvrtc7zjCz56eDRu+KrSFS9z6I/arkZz7dc8NYS7dL2xqMGy+0S4vOVmTlBOFHFF+MW4HWH6tYsk3aprC/3vyqlzJKqL0iEd9VYstsiAO4+uGHypeRpn1b8WkuxFHSb6NytwDUR++vxykxK+MekV8ugfoojaZtELTk7J86KPtxzNqHGAFXcbeeKXnc+Q1rmVMO4Fi6vHcreOa+aWwLoO7kxIDl05npBd45PpFNuoltKO9Kgv3+S7UOMbNNLRuCFdaTWXsyQBgbp6AxdCQlCadiXCR6fV3FIKwfkdo+/y+QRmtqR16N9FaCqKX46UeunoPeVahBuiTnxaYcf+p"
type "ssh-rsa"
}
}
}show configuration commands outputs encrypted password:
set system login user vyos authentication encrypted-password '$6$rounds=656000$wqq79iiRpB5FZByS$xHWB6pTC98wagApySgB9CO6V3ldGhG5LHuMJDmIWZPwjV9hjvv.gxpHGL3ofXo8I9vQ9OEfH5HsZi2szQV.m..'