id_rsa.pub location when adding host using SSH Auth

[daniftodi]

Currently the path of the id_rsa.pub file that should be added to the /root/.ssh/authorized_hosts isn't correct for CloudStack 4.20.0, see: https://docs.cloudstack.apache.org/en/4.20.0.0/installguide/configuration.html

Based on commit: apache/cloudstack@8952cd5

the key is located at: /var/lib/cloudstack/management/.ssh/id_rsa.pub

Verified on CloudStack 4.20.0 during the initial setup for CloudStack.

---

📚 Documentation preview 📚: https://cloudstack-documentation--478.org.readthedocs.build/en/478/

[weizhouapache]

👍

the home of cloud user is different on ubuntu and RHEL, so the correct location should be ~cloud/.ssh/id_rsa.pub
@daniftodi

[daniftodi]

👍

the home of cloud user is different on ubuntu and RHEL, so the correct location should be ~cloud/.ssh/id_rsa.pub @daniftodi

Thank you for approving this, I can't merge, probably will be merged by someone with write access.

Isn't the username a configuration passed on the Username field during the configuration of a host?

[DaanHoogland]

👍
the home of cloud user is different on ubuntu and RHEL, so the correct location should be ~cloud/.ssh/id_rsa.pub @daniftodi

does this mean we need to adjust the text still more @weizhouapache ?

Thank you for approving this, I can't merge, probably will be merged by someone with write access.

Isn't the username a configuration passed on the Username field during the configuration of a host?

good point @daniftodi , but I have never seen an installation using anything but the default. could be a good test ;)

[weizhouapache]

Suggested change

	- Copy the SSH public key from /var/lib/cloudstack/management/.ssh/id_rsa.pub on the management server
	- Copy the SSH public key from ~cloud/.ssh/id_rsa.pub on the management server

[daniftodi]

This is not a valid, ~cloud/.ssh/id_rsa.pub - doesn't exist. Who should create it?

[weizhouapache]

the cloud user is created by cloudstack.

I tested on two management servers.
the cloud users have different home directories on ubuntu and rocky. This is why I suggested.

• ubuntu 24.04

# ls -l ~cloud/.ssh/id_rsa.pub 
-rw-r--r-- 1 cloud cloud 594 Mar 14 16:19 /var/lib/cloudstack/management/.ssh/id_rsa.pub

• rocky8

# ls -l ~cloud/.ssh/id_rsa.pub 
-rw-r--r--. 1 cloud cloud 202 Mar 14 10:14 /var/cloudstack/management/.ssh/id_rsa.pub

[DaanHoogland]

I think @weizhouapache 's suggestion is valid. We could add a remark that "the actual user may differ depending on your configuration".