# Is it possible to remove the private keys from AWX Images?

**URL:** <https://forum.ansible.com/t/is-it-possible-to-remove-the-private-keys-from-awx-images/31851>\
**Category:** AWX Project\
**Tags:** awx\
**Created:** [December 19, 2019, 2:39pm UTC](https://forum.ansible.com/t/is-it-possible-to-remove-the-private-keys-from-awx-images/31851 "2019-12-19T14:39:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ankit2](https://avatars.discourse-cdn.com/v4/letter/a/ea5d25/32.png) [@Ankit2](https://forum.ansible.com/u/Ankit2)\
**Post date:** [December 19, 2019, 2:39pm UTC](https://forum.ansible.com/t/is-it-possible-to-remove-the-private-keys-from-awx-images/31851/1 "2019-12-19T14:39:13Z")

</div>

Hello All,

I could see the following Private Keys in AWX Images. Could anyone please suggest what are these used for and is it possible to remove them from build since these are marked as vulnerable for some reason in our scan.

> /var/lib/awx/venv/ansible/lib/python3.6/site-packages/libcloud/test/common/fixtures/google/pkey.pem | [type:“RSA PRIVATE KEY”] |
> 
> - | - |  
> /var/lib/awx/venv/ansible/lib/python3.6/site-packages/libcloud/test/compute/fixtures/misc/dummy\_rsa | [type:“RSA PRIVATE KEY”] |  
> /var/lib/awx/venv/ansible/lib/python3.6/site-packages/libcloud/test/loadbalancer/fixtures/nttcis/alice.key | [type:“PRIVATE KEY”] |  
> /var/lib/awx/venv/ansible/lib/python3.6/site-packages/libcloud/test/loadbalancer/fixtures/nttcis/denis.key | [type:“RSA PRIVATE KEY”] |  
> /var/lib/awx/venv/awx/lib/python3.6/site-packages/future/backports/test/keycert.passwd.pem | [type:“RSA PRIVATE KEY”] |  
> /var/lib/awx/venv/awx/lib/python3.6/site-packages/future/backports/test/badcert.pem | [type:“RSA PRIVATE KEY”] |  
> /var/lib/awx/venv/awx/lib/python3.6/site-packages/future/backports/test/keycert2.pem | [type:“PRIVATE KEY”] |  
> /var/lib/awx/venv/awx/lib/python3.6/site-packages/future/backports/test/keycert.pem | [type:“PRIVATE KEY”] |  
> /var/lib/awx/venv/awx/lib/python3.6/site-packages/future/backports/test/ssl\_key.passwd.pem | [type:“RSA PRIVATE KEY”] |  
> /var/lib/awx/venv/awx/lib/python3.6/site-packages/future/backports/test/ssl\_key.pem | [type:“PRIVATE KEY”] |  
> /var/lib/awx/venv/awx/lib/python3.6/site-packages/slapdtest/certs/server.key | [type:“PRIVATE KEY”] |  
> /var/lib/awx/venv/awx/lib/python3.6/site-packages/slapdtest/certs/client.key | [type:“PRIVATE KEY”] |  
> /var/lib/awx/venv/awx/lib/python3.6/site-packages/social\_core/tests/testkey.pem | [type:“RSA PRIVATE KEY”] |  
> /var/lib/awx/venv/awx/lib/python3.6/site-packages/twisted/test/key.pem.no\_trailing\_newline | [type:“PRIVATE KEY”] |  
> /var/lib/awx/venv/awx/lib/python3.6/site-packages/twisted/test/server.pem | [type:“PRIVATE KEY”] |

Regards,  
Ankit

---

<div class="post-metadata">

**Author:** ![Graham\_Mainwaring](https://avatars.discourse-cdn.com/v4/letter/g/db5fbb/32.png) [@Graham\_Mainwaring](https://forum.ansible.com/u/Graham_Mainwaring)\
**Post date:** [December 19, 2019, 5:21pm UTC](https://forum.ansible.com/t/is-it-possible-to-remove-the-private-keys-from-awx-images/31851/2 "2019-12-19T17:21:16Z")

</div>

These are all test data included with the tests of the Python modules. If you want to, you can probably just make a new container image that deletes them all. But there’s no actual security vulnerability here.

---

<div class="post-metadata">

**Author:** ![Ankit2](https://avatars.discourse-cdn.com/v4/letter/a/ea5d25/32.png) [@Ankit2](https://forum.ansible.com/u/Ankit2)\
**Post date:** [December 19, 2019, 5:45pm UTC](https://forum.ansible.com/t/is-it-possible-to-remove-the-private-keys-from-awx-images/31851/3 "2019-12-19T17:45:44Z")

</div>

Thanks Graham for the confirmation and response on this.

**Regards,**  
**Ankit**