cloud November 2013

cloud@lists.fedoraproject.org

30 participants
37 discussions

Meeting reminder + agenda
by Sam Kottler 05 Nov '13

05 Nov '13

We'll have our second meeting tomorrow (Wednesday for those further east than me) at 17:00 UTC in #fedora-meeting-1 since FESCo has their meeting in #fedora-meeting at the same time. The agenda is: 1) Roll call 2) Announcements 3) Tickets 4) Open Floor If you've got anything you'd like us to cover during the tickets section, add them here [1] with the "meeting" keyword. You can view all the tickets that'll be covered tomorrow here [2]. Let me know if you've got any questions. -Sam 1. https://fedorahosted.org/cloud/newticket 2. https://fedorahosted.org/cloud/query?keywords=~meeting&status=!closed

1 0

Fedora 20-Beta RC3 AMIS
by Dennis Gilmore 05 Nov '13

05 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi all, Beta RC2 images have been uploaded to EC2 and are available at ami-afcc94c6 : us-east-1 image for i386 ami-a5cd95cc : us-east-1 image for x86_64 additionally if your looking to the AMI's they have been added to files in the release tree http://dl.fedoraproject.org/pub/alt/stage/20-Beta-RC3/Images/i386/Fedora-Im… http://dl.fedoraproject.org/pub/alt/stage/20-Beta-RC3/Images/x86_64/Fedora-… when we get to final Beta and the images are uploaded to all regions they will all be listed and the file will be gpg signed in the final tree Dennis -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJSePznAAoJEH7ltONmPFDRZUMP/0OKQWw6gAUfoZF9Npxr/cUv bpy72rO8diw6gnP75DREvNpIBv+0Ud3EjSqgz58ZLRt8EVRBufNFAVHa4yqgaPUj IKkNcm6+INOY5xEDDblxzTduvJaeW5hv0y8cAirIgN63Yz3TEfFa1PV05bdb7Gnx NJ0qdaSRkDnXJ6RwIe0CIH7VSlUsw2atBVBw3vZPeXZ/RJALyDDBwJXxlrvgoM5h zuk4x8c960FHGplSd3h2bvYo9+weapcA10Jc+78j8qQoHzTLPtg6G18Yoqs/EFq8 TDR/zdogw2bFQfgsaBPEVpfAs0tnrUo0bHrp8ojQTXpKXOlZmvzVk23x903v9LsT SsgnpvoCs4u/n0dMKzF10uw7MgpZBY9BIPTumnKg+/+iCqhcjKzJy1uOnFVeG8UT DeyuI2NFZ18NM+iXqMPmMEWawiNys2p9JY3L5TiGEK5iJXuOaX5BXcXGhX1BOrai t0YtlKRa3afYogMgzJmb2/ZLiV8fuvt40VbJ3Io+wJUHougMhGYMjivJd7dfmd7c KHnlst54J00rnm9Ul47VvrYQg2HuFQEyuJA/uDy9qYMBInqGIQlfyGM7yM4lMt8V pPZ6gMi0EbTbnRh1t0mf4J2TdzuPj7wODk1zZ1PzY54mIlCNr76bQ8a9aukz0dzJ M6uLJmRzUTom0Az+r3Pa =6Hha -----END PGP SIGNATURE-----

1 0

Working group meeting next week
by Sam Kottler 05 Nov '13

05 Nov '13

Hi all, I've setup a new whenisgood [1] for next week's meeting. I'm free anytime but Wednesday afternoon (just this week), but if the time we used at the first meeting a few days ago works well for people then I'm perfectly content in using it again. mattdm will run the meeting if it ends up landing on Wednesday. Also, we should probably agree on a more permanent time at the upcoming meeting. Also, if you've got any topics you'd like to bring up please file them in trac [2] and I'll go through them and tag the issues we'll cover. Have a great weekend! -Sam 1. http://whenisgood.net/8eghr77 2. https://fedorahosted.org/cloud/newticket

4 6

traveling today (at Usenix LISA this week)
by Matthew Miller 04 Nov '13

04 Nov '13

Hi all. I'm going to Usenix LISA, and will be traveling today. I should have internet access but it will be a bit slow and unreliable, so if I'm harder to get ahold of than usual, that's why. Also, if you happen to be at LISA too, stop by the Fedora booth and say hello! -- Matthew Miller ☁☁☁ Fedora Cloud Architect ☁☁☁ <mattdm(a)fedoraproject.org>

1 0

Fedora 20-Beta RC2 AMIS
by Dennis Gilmore 01 Nov '13

01 Nov '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi all, Beta RC2 images have been uploaded to EC2 and are available at ami-cbaaf3a2 : us-east-1 image for i386 ami-17abf27e : us-east-1 image for x86_64 additionally if your looking to the AMI's they have been added to files in the release tree http://dl.fedoraproject.org/pub/alt/stage/20-Beta-RC2/Images/i386/Fedora-Im… http://dl.fedoraproject.org/pub/alt/stage/20-Beta-RC2/Images/x86_64/Fedora-… when we get to final Beta and the images are uploaded to all regions they will all be listed and the file will be gpg signed in the final tree Dennis -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBAgAGBQJSdDUXAAoJEH7ltONmPFDREjcP/3+J3ZVsGLR/qQDSWFQr6qOD GkbrUGfMmDDzdHjeDosJOwnFb50txblO/yYkLrOwueVLvO8gg4SPXcEidftFjmLl euzFUXxsRkFLYiUZswXAHH4oD+DCy4l+HCy/YSRMK9G0u9Nr8SjXpu9zc0DF0NiR AczhdMjGSyrBfUc2TSqBgZMAmpSa4OCgR5B4T/yaWjROaSDkvNB48dtGVw0lKZcx YN/R09lMprJy5dxnmcZCSeCFG0R4qI2XcrGEQyHrzb7NeWEEm1wGY39EfAwiNEPE sBgZBLZCbCh3RX6wWvoIrlGslRkqmjvpiN5L+W2MzGlvFg5R2g5cPcgZAz+b3waU LsVFg9ogxeuMZTeMFyTae23VXGbdlMhe8w6EKU5NRGFGP2cZWpk+nq9cq/wG+z+b DLnLHcr/wvVi6btP7+5/UlHX66GSec3mFMC/Wz6Z8WV0MSss0tk4tNsjbW1ZL1oM lB4u4DWaL+zqgssO3dqwj45Rj3/n0wO6lY8r+cNP7Qau58WtvjXoEZ9wBgFaA87R XxVC5A++VWDIKDxkfWSBUOoDSf8Dm07BaLQxOHOKnZPKKJ9xr1Lv4HAu9hDtCkPe A7pa6h/CuRC9MRwHp2OnbRscDXRMepMRNDTesqA/u25Kl+ACwXYbRnbY33cmEayU MahQ9/38anpAHQ49b8lr =iMhF -----END PGP SIGNATURE-----

1 0

Re: [Fedora-legal-list] Hosting Fedora cloud images
by Richard W.M. Jones 01 Nov '13

01 Nov '13

[NB: CC'd to the Fedora cloud SIG mailing list] On Tue, Oct 01, 2013 at 09:22:44AM -0400, Matthew Miller wrote: > On Tue, Oct 01, 2013 at 02:20:11PM +0100, Richard W.M. Jones wrote: > > > Is there a reason to not use the official Fedora cloud images? > > That's part 2 of this exercise. Would like to talk to you > > about that separately at some point. > > Okay. Any time. :) So there are a few immediate problems (some of them in virt-builder itself). (1) Virt-builder really needs to be able to source images from multiple places. At the moment there is only one source location allowed, unless the user clumsily uses the --source option to point at another one. (2) Virt-builder currently assumes the image format is xz-compressed. Actually I notice the raw.xz images are in the correct format already, so we're good here. (3) Virt-builder requires all images to be GPG-signed. It worries me that these images are neither signed nor downloaded over https. (4) Virt-builder requires a (signed) index file describing each cloud image. I believe it would be a good thing for the cloud images to include an index file, so that tools can automatically find out what's there. The format of the index file is described here: http://libguestfs.org/virt-builder.1.html#creating-and-signing-the-index-fi… However having the index file will be less useful until (1) is fixed. (5) Digital signatures: Currently virt-builder requires all indexes and images to be signed by yours truly unless you go through an involved process described here: http://libguestfs.org/virt-builder.1.html#setting-up-a-gpg-key We need to fix this, but key management is a non-trivial problem, since we cannot host the public key in the same place as the index & images (an attacker could replace both the images & key at the same time). What's the strategy going to be for signing these cloud images? ---------------------------------------------------------------------- To test this out, I created an index file for the 64 bit Fedora 19 cloud image, which is attached. I also signed it (signature also attached). You can test this if you want by putting all 3 files into a directory anywhere and using commands such as: virt-builder --source file:///path/to/index.asc -l virt-builder --source file:///path/to/index.asc --notes fedora-cloud-19 virt-builder --source file:///path/to/index.asc \ fedora-cloud-19 \ --size 20G \ --root-password password:123456 \ --install @development-tools And basically it works: $ virt-builder --source file:///mnt/scratch/index.asc fedora-cloud-19 --size 20G --root-password password:123456 --install @development-tools[ 0.0] Downloading: file:///mnt/scratch/Fedora-x86_64-19-20130627-sda.raw.xz [ 0.0] Creating disk image: fedora-cloud-19.img [ 1.0] Uncompressing: file:///mnt/scratch/Fedora-x86_64-19-20130627-sda.raw.xz [ 14.0] Running virt-resize to expand the disk to 20.0G [ 44.0] Opening the new disk [ 47.0] Setting a random seed [ 47.0] Setting root password [ 47.0] Installing packages: @development-tools [ 156.0] Finishing off Output: fedora-cloud-19.img Total usable space: 19.7G Free space: 18.6G (94%) I didn't test this one to see if it boots. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones virt-top is 'top' for virtual machines. Tiny program with many powerful monitoring features, net stats, disk stats, logging, etc. http://people.redhat.com/~rjones/virt-top

4 10

RE:
by Thomas Noonan 01 Nov '13

01 Nov '13

Email: attorney.noonan(a)att.net

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

cloud November 2013