Fedora 20-Beta RC3 AMIS
by Dennis Gilmore
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
hi all,
Beta RC2 images have been uploaded to EC2 and are available at
ami-afcc94c6 : us-east-1 image for i386
ami-a5cd95cc : us-east-1 image for x86_64
additionally if your looking to the AMI's they have been added to files
in the release tree
http://dl.fedoraproject.org/pub/alt/stage/20-Beta-RC3/Images/i386/Fedora-...
http://dl.fedoraproject.org/pub/alt/stage/20-Beta-RC3/Images/x86_64/Fedor...
when we get to final Beta and the images are uploaded to all regions
they will all be listed and the file will be gpg signed in the final
tree
Dennis
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
iQIcBAEBAgAGBQJSePznAAoJEH7ltONmPFDRZUMP/0OKQWw6gAUfoZF9Npxr/cUv
bpy72rO8diw6gnP75DREvNpIBv+0Ud3EjSqgz58ZLRt8EVRBufNFAVHa4yqgaPUj
IKkNcm6+INOY5xEDDblxzTduvJaeW5hv0y8cAirIgN63Yz3TEfFa1PV05bdb7Gnx
NJ0qdaSRkDnXJ6RwIe0CIH7VSlUsw2atBVBw3vZPeXZ/RJALyDDBwJXxlrvgoM5h
zuk4x8c960FHGplSd3h2bvYo9+weapcA10Jc+78j8qQoHzTLPtg6G18Yoqs/EFq8
TDR/zdogw2bFQfgsaBPEVpfAs0tnrUo0bHrp8ojQTXpKXOlZmvzVk23x903v9LsT
SsgnpvoCs4u/n0dMKzF10uw7MgpZBY9BIPTumnKg+/+iCqhcjKzJy1uOnFVeG8UT
DeyuI2NFZ18NM+iXqMPmMEWawiNys2p9JY3L5TiGEK5iJXuOaX5BXcXGhX1BOrai
t0YtlKRa3afYogMgzJmb2/ZLiV8fuvt40VbJ3Io+wJUHougMhGYMjivJd7dfmd7c
KHnlst54J00rnm9Ul47VvrYQg2HuFQEyuJA/uDy9qYMBInqGIQlfyGM7yM4lMt8V
pPZ6gMi0EbTbnRh1t0mf4J2TdzuPj7wODk1zZ1PzY54mIlCNr76bQ8a9aukz0dzJ
M6uLJmRzUTom0Az+r3Pa
=6Hha
-----END PGP SIGNATURE-----
10 years, 5 months
Working group meeting next week
by Sam Kottler
Hi all,
I've setup a new whenisgood [1] for next week's meeting. I'm free anytime but Wednesday afternoon (just this week), but if the time we used at the first meeting a few days ago works well for people then I'm perfectly content in using it again. mattdm will run the meeting if it ends up landing on Wednesday. Also, we should probably agree on a more permanent time at the upcoming meeting.
Also, if you've got any topics you'd like to bring up please file them in trac [2] and I'll go through them and tag the issues we'll cover.
Have a great weekend!
-Sam
1. http://whenisgood.net/8eghr77
2. https://fedorahosted.org/cloud/newticket
10 years, 5 months
traveling today (at Usenix LISA this week)
by Matthew Miller
Hi all. I'm going to Usenix LISA, and will be traveling today. I should have
internet access but it will be a bit slow and unreliable, so if I'm harder
to get ahold of than usual, that's why.
Also, if you happen to be at LISA too, stop by the Fedora booth and say
hello!
--
Matthew Miller ☁☁☁ Fedora Cloud Architect ☁☁☁ <mattdm(a)fedoraproject.org>
10 years, 5 months
Fedora 20-Beta RC2 AMIS
by Dennis Gilmore
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
hi all,
Beta RC2 images have been uploaded to EC2 and are available at
ami-cbaaf3a2 : us-east-1 image for i386
ami-17abf27e : us-east-1 image for x86_64
additionally if your looking to the AMI's they have been added to files
in the release tree
http://dl.fedoraproject.org/pub/alt/stage/20-Beta-RC2/Images/i386/Fedora-...
http://dl.fedoraproject.org/pub/alt/stage/20-Beta-RC2/Images/x86_64/Fedor...
when we get to final Beta and the images are uploaded to all regions
they will all be listed and the file will be gpg signed in the final
tree
Dennis
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)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=iMhF
-----END PGP SIGNATURE-----
10 years, 5 months
Re: [Fedora-legal-list] Hosting Fedora cloud images
by Richard W.M. Jones
[NB: CC'd to the Fedora cloud SIG mailing list]
On Tue, Oct 01, 2013 at 09:22:44AM -0400, Matthew Miller wrote:
> On Tue, Oct 01, 2013 at 02:20:11PM +0100, Richard W.M. Jones wrote:
> > > Is there a reason to not use the official Fedora cloud images?
> > That's part 2 of this exercise. Would like to talk to you
> > about that separately at some point.
>
> Okay. Any time. :)
So there are a few immediate problems (some of them in virt-builder
itself).
(1) Virt-builder really needs to be able to source images from
multiple places. At the moment there is only one source location
allowed, unless the user clumsily uses the --source option to point at
another one.
(2) Virt-builder currently assumes the image format is xz-compressed.
Actually I notice the raw.xz images are in the correct format already,
so we're good here.
(3) Virt-builder requires all images to be GPG-signed. It worries me
that these images are neither signed nor downloaded over https.
(4) Virt-builder requires a (signed) index file describing each cloud
image. I believe it would be a good thing for the cloud images to
include an index file, so that tools can automatically find out what's
there. The format of the index file is described here:
http://libguestfs.org/virt-builder.1.html#creating-and-signing-the-index-...
However having the index file will be less useful until (1) is fixed.
(5) Digital signatures: Currently virt-builder requires all indexes
and images to be signed by yours truly unless you go through an
involved process described here:
http://libguestfs.org/virt-builder.1.html#setting-up-a-gpg-key
We need to fix this, but key management is a non-trivial problem,
since we cannot host the public key in the same place as the index &
images (an attacker could replace both the images & key at the same
time). What's the strategy going to be for signing these cloud images?
----------------------------------------------------------------------
To test this out, I created an index file for the 64 bit Fedora 19
cloud image, which is attached. I also signed it (signature also
attached). You can test this if you want by putting all 3 files into
a directory anywhere and using commands such as:
virt-builder --source file:///path/to/index.asc -l
virt-builder --source file:///path/to/index.asc --notes fedora-cloud-19
virt-builder --source file:///path/to/index.asc \
fedora-cloud-19 \
--size 20G \
--root-password password:123456 \
--install @development-tools
And basically it works:
$ virt-builder --source file:///mnt/scratch/index.asc fedora-cloud-19 --size 20G --root-password password:123456 --install @development-tools[ 0.0] Downloading: file:///mnt/scratch/Fedora-x86_64-19-20130627-sda.raw.xz
[ 0.0] Creating disk image: fedora-cloud-19.img
[ 1.0] Uncompressing: file:///mnt/scratch/Fedora-x86_64-19-20130627-sda.raw.xz
[ 14.0] Running virt-resize to expand the disk to 20.0G
[ 44.0] Opening the new disk
[ 47.0] Setting a random seed
[ 47.0] Setting root password
[ 47.0] Installing packages: @development-tools
[ 156.0] Finishing off
Output: fedora-cloud-19.img
Total usable space: 19.7G
Free space: 18.6G (94%)
I didn't test this one to see if it boots.
Rich.
--
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
virt-top is 'top' for virtual machines. Tiny program with many
powerful monitoring features, net stats, disk stats, logging, etc.
http://people.redhat.com/~rjones/virt-top
10 years, 5 months
RE:
by Thomas Noonan
Email: attorney.noonan(a)att.net
10 years, 5 months
