sapcc / nova-password

A tool to decrypt the admin password generated for the VM

Usage

Get the admin password for an OpenStack server

Usage:
  nova-password <server-name>|<server-id> [<server-name>|<server-id>...] [flags]

Flags:
  -d, --debug                     print out request and response objects
  -h, --help                      help for nova-password
  -i, --private-key-path string   a path to the RSA private key (PuTTY and OpenSSH formats) (default "~/.ssh/id_rsa")
  -q, --quiet                     quiet (no extra output)
      --version                   version for nova-password
  -w, --wait uint                 wait for the password timeout in seconds

Prerequisites

• The private key corresponding to the public key, used to create a compute instance, is required
• Only RSA PKCS #1 v1.5 is supported by OpenStack

TLS options

• OS_CACERT - environment variable with a path to custom CA certificate.
• OS_INSECURE - skip endpoint TLS certificate validation. Set to true only if you are otherwise convinced of the OpenStack endpoint's authenticity.

Windows

.\openrc.ps1
.\nova-password.exe --private-key-path C:\Users\user\key.pem my-server
# or
.\nova-password.exe 717433dc-4c2e-4d62-9467-6dd3715b2c6c server-name
# or
.\nova-password.exe my-server -i C:\Users\user\.ssh\putty.ppk

nova-password's Issues

fail when instance doesn't exist

when I call the tool with an instance that doesn't exist it returns with error code 0
Can we make it return with an error code > 0 in case instance doesn't exist

report version

add -v flag

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update github.com/gophercloud/utils digest to 80377ec
• Update module github.com/gophercloud/gophercloud to v1.12.0
• Update module github.com/spf13/viper to v1.19.0
• Update module golang.org/x/crypto to v0.23.0
• Update module golang.org/x/term to v0.20.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

gomod

go.mod

• go 1.20
• github.com/google/uuid v1.6.0
• github.com/gophercloud/gophercloud v1.3.0
• github.com/gophercloud/utils v0.0.0-20230523080330-de873b9cf00d@de873b9cf00d
• github.com/kayrus/putty v1.0.4
• github.com/spf13/cobra v1.8.0
• github.com/spf13/viper v1.18.2
• golang.org/x/crypto v0.22.0
• golang.org/x/term v0.19.0

---

• Check this box to trigger a request for Renovate to run again on this repository

Issue logging on to windows server via my laptop...

Hello

IM really struggling with this connection

im trying to connect from my windows laptop to my windows server instance?

i downloaded the nova-password and it runs fine. I downloaded also ope4nstack RC file

what is this private key path below? where do i get it from?

nova-password <instance_name> -i <private_key_path>

also do I have to do below? i ran the RC from dos and it opened a notepad file? DO i have to change some things there?

Cannot logon vi RDP

nova-password fails with unknown format error

Wait for password availability

Directly after creating a new instance (with terraform), the tool is returning an empty password though the machine exists.
Maybe one can introduce 2 parameters to wait for the password to become available.
-w, --wait Wait for the password to become available
-t, --timeout Timeout in seconds to wait for password

SNI is not supported.

When specifying a domain name, I receive the following error :

2020/03/03 10:12:20 [DEBUG] OpenStack connection error, retries exhausted. Aborting
Error: Post https://URLREMOVED: OpenStack connection error, retries exhausted. Aborting. Last error was: x509: certificate signed by unknown authority

Make the tool scriptable

Currently the nova-password tool produces a lot of output which makes parsing a bit tricky (using awk, to get only the third line and then hope that the 5th word is the password).
I propose something like a -b (--batch) switch that will omit any output and just print the passwords in the order of given servers.

Our use case:
We want to setup windows machines with terraform. We need to attach disks to the instance but initially the disks are offline. So to take online and format the disks we need to remote-exec for which we need the Administrator password. Using an external data source we can get the password during the terraform run and the do a remote exec with winrm.