(3.7.0 – 3.13.2) Cannot SSH into LoginNodes with a Key that differs from the HeadNode’s

[hehe7318]

Note

LoginNodes/Pools/Ssh/KeyName will be deprecated since ParallelCluster version 3.14.0.

The issue

Users are unable to SSH into LoginNodes when the cluster has LoginNodes enabled and different SSH key pairs are specified for the HeadNode and LoginNodes.

Root cause

Both HeadNode and LoginNodes write their public keys to /home/$USER/.ssh/authorized_keys. But /home is exported from the HeadNode and mounted by every LoginNode. So authorized_keys from the HeadNode overwrites those configured for LoginNodes and the LoginNode’s SSH daemon rejects authentication attempts that use the LoginNodes key.

Affected Versions

ParallelCluster 3.7.0 - 3.13.2, all released versions support LoginNodes are affected.

Mitigation

You can find the mitigation of the problem in ParallelCluster Github Wiki: (3.7.0 – 3.13.2) Cannot SSH into LoginNodes with a Key that differs from the HeadNode’s