internal/guest/guest.go

Ref: main v0.0.5   Size: 901 B   History

// Package guest holds the handful of facts the control plane and the data
// plane must agree on about a guest VM. It is a wire-plane leaf: it imports
// nothing, so either plane — and the CLI and the smoke harness — can depend on
// it without coupling the two binaries to each other.
package guest

// LoginUser is the account every guest is created with — the agent's cloud-init
// seed adds it — and therefore the principal every user certificate must carry:
// a guest trusts its tenant's CA set through a bare TrustedUserCAKeys line, so
// sshd matches the certificate principal against the login user. Stock Ubuntu
// cloud images name it "ubuntu". It is named here exactly once so no layer —
// the cert minter, the ssh command builder, the gate dialer, the smoke default
// — pins its own copy that could drift from what the guest actually provisions.
const LoginUser = "ubuntu"