How to setup Livepatch on-prem server administration tool
To perform operations such as promoting patches to tiers and issuing tokens for machines to attach to the livepatch server, an administration tool is provided as a snap:
$ sudo snap install canonical-livepatch-server-admin
For ease of use, it’s recommended to alias the admin command:
$ sudo snap alias canonical-livepatch-server-admin.livepatch-admin livepatch-admin
Authentication
The livepatch administration tool authenticates with the livepatch server using username and password.
Password authentication
To configure password authentication, username/password hash pairs will need to be generated using the htpasswd tool available in the apache2-utils package.
The apache2-utils package can be installed by using the following commands:
$ sudo apt-get update
$ sudo apt-get install apache2-utils
This will generate a username/password hash pair:
$ htpasswd -bnBC 10 <username> <password>
username:$2y$10$74ZpDgHaxnUQo.AJZk1cMuSRfef5oK5xq5o/GLbUH/Bbw6W2bmctm
Multiple such pairs can be provided as a comma-separated list:
$ juju config livepatch auth_basic_users="<user1>:<password1,<user2>:<password2>"
When logging in with the client, the username and password will need to be provided:
$ export LIVEPATCH_URL={haproxy URL or unit IP}
$ livepatch-admin login --auth <username>:<password>
Ubuntu SSO authentication (removed)
Note: Ubuntu SSO authentication has been removed. Use password (Basic Auth) authentication instead.
Ubuntu SSO authentication was previously supported but has been removed and is no longer available for on-premises deployments.