In order to be one of the first class citizens in GCP we need to eventually support OS Login.
The bits to enable OS Login seem to be "an NSS module and a PAM module and I think some glue". So we believe we should be able to achieve this goal without necessarily shipping the entire agent, which was our original goal in the original discussion (https://github.com/coreos/fedora-coreos-tracker/issues/67). Hopefully we can glean some bits from when OS Login was implemented for CL.
Any updates or additional thoughts on this? We'd like to use Fedora CoreOS more widely on GCP but without OSLogin support FCOS will remain niche for us.
In order to be one of the first class citizens in GCP we need to eventually support OS Login.
The bits to enable OS Login seem to be "an NSS module and a PAM module and I think some glue". So we believe we should be able to achieve this goal without necessarily shipping the entire agent, which was our original goal in the original discussion (https://github.com/coreos/fedora-coreos-tracker/issues/67). Hopefully we can glean some bits from when OS Login was implemented for CL.
Note: we discussed this briefly at the 2020-10-14 community meeting.