[Merge] lp:~smoser/ubuntu-seeds/ubuntu.yakkety.server-has-ssh into lp:~ubuntu-core-dev/ubuntu-seeds/ubuntu.yakkety

[Martin Pitt]

Review: Disapprove

openssh-server by default enables password authentication, so just merging it like this would violate both the "open ports" policy and the security team requirement right now.

Also, what is the rationale for adding openssh-server to LXD instances? I daresay that most of them actually don't want/need it, and if so you need to configure user accounts anyway.

I think this really belongs into cloud-init: If you enable/configure ssh there (possibly with some public keys), this could install openssh-server along the way, but please don't impose it to *every* cloud workload there.
-- 
https://code.launchpad.net/~smoser/ubuntu-seeds/ubuntu.yakkety.server-has-ssh/+merge/293318
Your team Ubuntu Core Development Team is subscribed to branch lp:~ubuntu-core-dev/ubuntu-seeds/ubuntu.yakkety.