Closed NorseGaud closed 3 years ago
The failure of launchctl submit
seems because of not /Groups/com.apple.access_ssh
change but UsePAM no
in /etc/ssh/sshd_config
which is also modified from UsePAM yes
and maintained by ec2-macos-init
too.
Could you try to
secureSSHDConfig = false
in /usr/local/aws/ec2-macos-init/init.toml
,UsePAM
to yes in /etc/ssh/sshd_config
, thenand confirm if your original workflow succeeds?
Please be careful that both PasswordAuthentication
and ChallengeResponseAuthentication
in /etc/ssh/sshd_config
are no
to prevent sshd
from accepting password authentication.
I'm opening this on behalf of the Anka development team. It seems as if something this script is doing is preventing us from properly running Virtualization inside of the instances as the ec2-user. A lot of what will be below is paraphrased or copy and pasted. If it's unclear, please ask and I will get clarification.
To reproduce the issue with the launchd context the simple test could be used:
It fails for ec2-user in ssh session and succeeds for root and gui sessions.