Packer SSH key in public AMI

AndrewGuenther / fck-nat

Feasible cost konfigurable NAT: An AWS NAT Instance AMI

https://fck-nat.dev

MIT License

1.04k stars 42 forks source link

Packer SSH key in public AMI #87

Open aidangill-projects opened 1 week ago

aidangill-projects commented 1 week ago

Hi,

I was just investigating some suspicious SSH activity on my fck-nat (looks to be just probes), and I've noticed .ssh/authorized_keys has a pre-existing SSH key in there that looks to be a mistake from the original packer build.

This is in fck-nat-amzn2-hvm-1.2.1-20230209-arm64-ebs.

Would seem to me that should be removed and all of the public AMIs updated.

Cheers Aidan

AndrewGuenther commented 1 week ago

Huh, silly that it's not Packer's default behavior to remove the temp key. I'll make sure that's fixed in the next release.

aidangill-projects commented 5 days ago

Cheers mate have added a pull request with the required command, not tested locally