OpenStack: никакой ssh к экземпляру от neutron-gateway/0 - ошибка “Разрешение, отклоненное (в открытом ключе)”

Я выполнил кластерную установку узла с помощью этого руководства [Руководство по развертыванию Очарования OpenStack]. (https://docs.openstack.org/project-deploy-guide/charm-deployment-guide/latest/install-maas.html), где типом сети является Однородная сеть и используемые компоненты:

• Маас
• Амулет
• OpenStack

Моя лаборатория имеет следующий план сети:

                         +-------------+
                              Firewall
                            10.20.81.254
                          +-------------+
                                 | 
+-------------------------------------------------------------+
                              Switch 
      vlan81              vlan81                  vlan81
+-------------------------------------------------------------+
        |                   |                   || || || ||
+--------------+     +------------+        +------------------+
|Maas+Juju           |Juju Gui|            |Openstack
|10.20.81.1          |10.20.81.2           |10.20.81.3-6
+--------------+     +-------------+       +------------------+
                                                     |
                                +--------------------------------------------+
                                 Private Subnet             Floating Subnet
                                 10.1.0.0/24                10.20.81.220-230/24
                                 +---+----+--+              +----+------+
                                 |    |        +----+            |
                                 |    |        |    |            |
                                 |    +--------+ VR +-------------+
                                 |             |    |
                                 +--+-+        +----+
                                 |    |
                                 | VM |
                                 | .13|
                                 |    |

Я не могу использовать соединение SSH к экземпляру, это - ошибка:

ubuntu@10.1.0.13: Permission denied (publickey).

Ping в порядке:

ubuntu@os-compute02:~$ sudo sudo ip netns exec qrouter-e933429f-6816-47b3-9e50-581d78243935 ping 10.1.0.13
PING 10.1.0.13 (10.1.0.13) 56(84) bytes of data.
64 bytes from 10.1.0.13: icmp_seq=1 ttl=64 time=1.47 ms 

Я сделал это:

$: juju ssh neutron-gateway/0

затем

ubuntu@os-compute02:~$ sudo ip netns
qrouter-e933429f-6816-47b3-9e50-581d78243935 (id: 4)
qdhcp-65727477-9d15-4f79-8bc9-078b59eb6faa (id: 3)

созданный пара ключей SSH на узле с этой командой:

ubuntu@os-compute02: ssh-keygen -t rsa

затем это, я попытался разрешить соединение SSH

ubuntu@os-compute02:~$ sudo ip netns exec qrouter-e933429f-6816-47b3-9e50-581d78243935 ssh -p 22 -i ~/.ssh/id_rsa.pub ubuntu@10.1.0.13 -v
OpenSSH_7.6p1 Ubuntu-4ubuntu0.3, OpenSSL 1.0.2n  7 Dec 2017
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug1: Connecting to 10.1.0.13 [10.1.0.13] port 22.
debug1: Connection established.
debug1: permanently_set_uid: 0/0
debug1: identity file /home/ubuntu/.ssh/id_rsa.pub type 0
debug1: key_load_public: No such file or directory
debug1: identity file /home/ubuntu/.ssh/id_rsa.pub-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.6p1 Ubuntu-4
debug1: match: OpenSSH_7.6p1 Ubuntu-4 pat OpenSSH* compat 0x04000000
debug1: Authenticating to 10.1.0.13:22 as 'ubuntu'
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:E+2ZKulh+LewPnIPh7/OUTMcQ/FYNcUN4RuGMBCDtnA
debug1: Host '10.1.0.13' is known and matches the ECDSA host key.
debug1: Found key in /root/.ssh/known_hosts:7
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521>
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Offering public key: RSA SHA256:z1vLieNiK9fX0UhqioSPLroGX+gdcP0w1sY0XMUeIRM /home/ubuntu/.ssh/id_rsa.pub
debug1: Server accepts key: pkalg rsa-sha2-512 blen 279
Load key "/home/ubuntu/.ssh/id_rsa.pub": invalid format
debug1: No more authentication methods to try.
ubuntu@10.1.0.13: Permission denied (publickey).

первая ошибка:

Load key "/home/ubuntu/.ssh/id_rsa.pub": invalid format

"Консольный журнал экземпляра" на OpenStack сообщает что:

Starting Set console scheme...
[[0;32m  OK  [0m] Started Terminate Plymouth Boot Screen.
[[0;32m  OK  [0m] Started Set console scheme.
[[0;32m  OK  [0m] Created slice system-getty.slice.
[[0;32m  OK  [0m] Started Getty on tty1.
[[0;32m  OK  [0m] Reached target Login Prompts.
[[0;32m  OK  [0m] Started LSB: automatic crash report generation.
[[0;32m  OK  [0m] Started System Logging Service.
[[0;32m  OK  [0m] Started Pollinate to seed the pseudo random number generator.
         Starting OpenBSD Secure Shell server...
[[0;32m  OK  [0m] Started OpenBSD Secure Shell server.

Ubuntu 18.04.1 LTS ubuntu ttyS0

ubuntu login: [   95.684752] cloud-init[1089]: Cloud-init v. 18.3-9-g2e62cb8a-0ubuntu1~18.04.2 running 'modules:config' at Wed, 03 Apr 2019 10:13:41 +0000. Up 94.75 seconds.
ci-info: no authorized ssh keys fingerprints found for user ubuntu.
<14>Apr  3 10:13:43 ec2: 
<14>Apr  3 10:13:43 ec2: #############################################################
<14>Apr  3 10:13:43 ec2: -----BEGIN SSH HOST KEY FINGERPRINTS-----
<14>Apr  3 10:13:43 ec2: 1024 SHA256:pOhpmetFuYOOTAkAR2eXy27gJAGq1g1uO9lIcRwrjCk root@ubuntu (DSA)
<14>Apr  3 10:13:43 ec2: 256 SHA256:nafzb325Ll5FKz4DOA4zmadhnNbhQKEFTIlXiXikG+Y root@ubuntu (ECDSA)
<14>Apr  3 10:13:43 ec2: 256 SHA256:zUlvRYdty80h+m5tIXEM3g59Vs8a0JGMZOIuCYG7NQs root@ubuntu (ED25519)
<14>Apr  3 10:13:43 ec2: 2048 SHA256:rK9e8f76d+ELlmU0LbUpeBL+VsC5JGkNCCpCbDPgJqE root@ubuntu (RSA)
<14>Apr  3 10:13:43 ec2: -----END SSH HOST KEY FINGERPRINTS-----
<14>Apr  3 10:13:43 ec2: #############################################################
-----BEGIN SSH HOST KEY KEYS-----
ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNwKCVHrHIYxDCZ4KKRORJC1rhmVxanX5IZEdVvXlk0bdWUEpAZeRRLSnJDK3GD/xD7t/xVgMpTCWCmP60mjWU4= root@ubuntu
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFvRjPqF6PCl0h/El4q+e7jmUEmxxZnZ9I94Eca+NW+Q root@ubuntu
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+0Jg/RwOuNRdj1lPIyVh8wHuZWeOk8r/INqNflyPq3DCaS5eEiSa3gfwf/2MagGxKsXmTScRDXvPulS0o+TsLaJnyd7FtDG/Wp163SpLQUl027iECoTQjb/oORJgqk0Lpsyk/D/5y93wqYsotPNEl7vP7ldkaSvl5RPcWe1U0Dqx1z4OfVM2NO5WBEEStaJ54OVfpJxiBreG6qS/kcXB9NsbIz63ObTlaSmn7BhLdnrrCXMFt+5WtKnqIjQKNb553d7dUHSbfflACva4G4BWNgPuDy5XXLxO+rLNtjT2uO3+hL9jZaMtfwWzO8Yb7bbu8xehdAZcv+r5uQf8ocxD9 root@ubuntu
-----END SSH HOST KEY KEYS-----
[   96.584607] cloud-init[1138]: Cloud-init v. 18.3-9-g2e62cb8a-0ubuntu1~18.04.2 running 'modules:final' at Wed, 03 Apr 2019 10:13:42 +0000. Up 96.31 seconds.
[   96.585321] cloud-init[1138]: ci-info: no authorized ssh keys fingerprints found for user ubuntu.
[   96.585658] cloud-init[1138]: Cloud-init v. 18.3-9-g2e62cb8a-0ubuntu1~18.04.2 finished at Wed, 03 Apr 2019 10:13:43 +0000. Datasource DataSourceNone.  Up 96.57 seconds
[   96.586004] cloud-init[1138]: 2019-04-03 10:13:43,102 - cc_final_message.py[WARNING]: Used fallback datasource

Подробный режим, показанный меня, что:

ubuntu@os-compute02:~$ sudo ip netns exec qrouter-e933429f-6816-47b3-9e50-581d78243935 ssh -p 22 -i ~/.ssh/id_rsa.pub ubuntu@10.1.0.13 -vvv
OpenSSH_7.6p1 Ubuntu-4ubuntu0.3, OpenSSL 1.0.2n  7 Dec 2017
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
debug2: resolving "10.1.0.13" port 22
debug2: ssh_connect_direct: needpriv 0
debug1: Connecting to 10.1.0.13 [10.1.0.13] port 22.
debug1: Connection established.
debug1: permanently_set_uid: 0/0
debug1: identity file /home/ubuntu/.ssh/id_rsa.pub type 0
debug1: key_load_public: No such file or directory
debug1: identity file /home/ubuntu/.ssh/id_rsa.pub-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3
debug1: Remote protocol version 2.0, remote software version OpenSSH_7.6p1 Ubuntu-4
debug1: match: OpenSSH_7.6p1 Ubuntu-4 pat OpenSSH* compat 0x04000000
debug2: fd 3 setting O_NONBLOCK
debug1: Authenticating to 10.1.0.13:22 as 'ubuntu'
debug3: hostkeys_foreach: reading file "/root/.ssh/known_hosts"
debug3: record_hostkey: found key type ECDSA in file /root/.ssh/known_hosts:7
debug3: load_hostkeys: loaded 1 keys from 10.1.0.13
debug3: order_hostkeyalgs: prefer hostkeyalgs: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
debug3: send packet: type 20
debug1: SSH2_MSG_KEXINIT sent
debug3: receive packet: type 20
debug1: SSH2_MSG_KEXINIT received
debug2: local client KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c
debug2: host key algorithms: ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib@openssh.com,zlib
debug2: compression stoc: none,zlib@openssh.com,zlib
debug2: languages ctos: 
debug2: languages stoc: 
debug2: first_kex_follows 0 
debug2: reserved 0 
debug2: peer server KEXINIT proposal
debug2: KEX algorithms: curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1
debug2: host key algorithms: ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
debug2: ciphers ctos: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: ciphers stoc: chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
debug2: MACs ctos: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: MACs stoc: umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2: compression ctos: none,zlib@openssh.com
debug2: compression stoc: none,zlib@openssh.com
debug2: languages ctos: 
debug2: languages stoc: 
debug2: first_kex_follows 0 
debug2: reserved 0 
debug1: kex: algorithm: curve25519-sha256
debug1: kex: host key algorithm: ecdsa-sha2-nistp256
debug1: kex: server->client cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug1: kex: client->server cipher: chacha20-poly1305@openssh.com MAC: <implicit> compression: none
debug3: send packet: type 30
debug1: expecting SSH2_MSG_KEX_ECDH_REPLY
debug3: receive packet: type 31
debug1: Server host key: ecdsa-sha2-nistp256 SHA256:E+2ZKulh+LewPnIPh7/OUTMcQ/FYNcUN4RuGMBCDtnA
debug3: hostkeys_foreach: reading file "/root/.ssh/known_hosts"
debug3: record_hostkey: found key type ECDSA in file /root/.ssh/known_hosts:7
debug3: load_hostkeys: loaded 1 keys from 10.1.0.13
debug1: Host '10.1.0.13' is known and matches the ECDSA host key.
debug1: Found key in /root/.ssh/known_hosts:7
debug3: send packet: type 21
debug2: set_newkeys: mode 1
debug1: rekey after 134217728 blocks
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug3: receive packet: type 21
debug1: SSH2_MSG_NEWKEYS received
debug2: set_newkeys: mode 0
debug1: rekey after 134217728 blocks
debug2: key: /home/ubuntu/.ssh/id_rsa.pub (0x559368ea5930), explicit
debug3: send packet: type 5
debug3: receive packet: type 7
debug1: SSH2_MSG_EXT_INFO received
debug1: kex_input_ext_info: server-sig-algs=<ssh-ed25519,ssh-rsa,rsa-sha2-256,rsa-sha2-512,ssh-dss,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521>
debug3: receive packet: type 6
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug3: send packet: type 50
debug3: receive packet: type 51
debug1: Authentications that can continue: publickey
debug3: start over, passed a different list publickey
debug3: preferred gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Next authentication method: publickey
debug1: Offering public key: RSA SHA256:z1vLieNiK9fX0UhqioSPLroGX+gdcP0w1sY0XMUeIRM /home/ubuntu/.ssh/id_rsa.pub
debug3: send_pubkey_test
debug3: send packet: type 50
debug2: we sent a publickey packet, wait for reply
debug3: receive packet: type 60
debug1: Server accepts key: pkalg rsa-sha2-512 blen 279
debug2: input_userauth_pk_ok: fp SHA256:z1vLieNiK9fX0UhqioSPLroGX+gdcP0w1sY0XMUeIRM
debug3: sign_and_send_pubkey: RSA SHA256:z1vLieNiK9fX0UhqioSPLroGX+gdcP0w1sY0XMUeIRM
Load key "/home/ubuntu/.ssh/id_rsa.pub": invalid format
debug2: we did not send a packet, disable method
debug1: No more authentication methods to try.
ubuntu@10.1.0.13: Permission denied (publickey).

затем

ubuntu@os-compute02:~$ sudo ip netns exec qrouter-e933429f-6816-47b3-9e50-581d78243935 tail -f /var/log/auth.log
Apr  3 10:39:56 os-compute02 sudo:   ubuntu : TTY=pts/5 ; PWD=/home/ubuntu ; USER=root ; COMMAND=/sbin/ip netns exec qrouter-e933429f-6816-47b3-9e50-581d78243935 ssh -p 22 -i .ssh/id_rsa.pub root@10.1.0.13 -v
    Apr  3 10:39:56 os-compute02 sudo: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0)
    Apr  3 10:39:56 os-compute02 sudo: pam_unix(sudo:session): session closed for user root
    Apr  3 10:40:01 os-compute02 CRON[8944]: pam_unix(cron:session): session opened for user root by (uid=0)
    Apr  3 10:40:01 os-compute02 CRON[8944]: pam_unix(cron:session): session closed for user root

затем

ubuntu@os-compute02:~$ sudo ip netns exec qrouter-e933429f-6816-47b3-9e50-581d78243935 journalctl -u ssh.service -f
-- Logs begin at Tue 2019-04-02 21:01:11 UTC. --
Apr 03 07:25:53 os-compute02 sshd[25670]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Apr 03 07:51:03 os-compute02 sshd[27126]: Connection closed by 10.20.81.1 port 47780 [preauth]
Apr 03 07:51:03 os-compute02 sshd[27128]: Accepted publickey for ubuntu from 10.20.81.1 port 47782 ssh2: RSA SHA256:7ErDKB9+6yxjZtNMbAuPqIBhrrxAU1Ik6RXYda6uYkU
Apr 03 07:51:03 os-compute02 sshd[27128]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Apr 03 08:48:14 os-compute02 sshd[10971]: Connection closed by 10.20.81.1 port 48266 [preauth]
Apr 03 08:48:14 os-compute02 sshd[10973]: Accepted publickey for ubuntu from 10.20.81.1 port 48268 ssh2: RSA SHA256:7ErDKB9+6yxjZtNMbAuPqIBhrrxAU1Ik6RXYda6uYkU
Apr 03 08:48:14 os-compute02 sshd[10973]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)
Apr 03 10:26:49 os-compute02 sshd[20182]: Connection closed by 10.20.81.1 port 49104 [preauth]
Apr 03 10:26:49 os-compute02 sshd[20191]: Accepted publickey for ubuntu from 10.20.81.1 port 49106 ssh2: RSA SHA256:7ErDKB9+6yxjZtNMbAuPqIBhrrxAU1Ik6RXYda6uYkU
Apr 03 10:26:49 os-compute02 sshd[20191]: pam_unix(sshd:session): session opened for user ubuntu by (uid=0)