#65: crucial questions on Docker image deliverable
-----------------------------------+--------------------------------
Reporter: mattdm | Owner:
Type: task | Status: new
Priority: major | Milestone: Fedora 21 (Branch)
Component: Docker Base Container | Keywords: meeting
-----------------------------------+--------------------------------
Adam W asks some excellent questions here:
https://lists.fedoraproject.org/pipermail/devel/2014-June/199579.html
> What "Fedora" exactly is the image going to contain? Fedora Server?
> Fedora Cloud? Will it be a part of either of those products? If not,
> what is its status, exactly? Who's responsible for it? Is it considered
> a primary or frontline or whatever Fedora deliverable? Who's going to
> test it? How's it going to be promoted in relation to all our other
> deliverables?
I gave some tentative answers, but let's get them answered definitively.
--
Ticket URL: <https://fedorahosted.org/cloud/ticket/65>
cloud <https://fedorahosted.org/cloud>
Fedora Cloud Working Group Ticketing System
Dear all,
You are kindly invited to the meeting:
Fedora Cloud Workgroup on 2014-08-01 from 17:00:00 to 18:00:00 UTC
At fedora-meeting(a)irc.freenode.net
The meeting will be about:
Standing meeting for the Fedora Cloud Workgroup.
Source: https://apps.fedoraproject.org/calendar//meeting/482/
Dear all,
You are kindly invited to the meeting:
Fedora Cloud Workgroup on 2014-08-01 from 08:00:00 to 09:00:00 Europe/Paris
The meeting will be about:
Standing meeting for the Fedora Cloud Workgroup.
Source: https://apps.fedoraproject.org/calendar//meeting/484/
Dear all,
You are kindly invited to the meeting:
Fedora Cloud Workgroup on 2014-07-25 from 08:00:00 to 09:00:00 Europe/Paris
The meeting will be about:
Standing meeting for the Fedora Cloud Workgroup.
Source: https://apps.fedoraproject.org/calendar//meeting/482/
Hi,
I was originally including Cockpit in
https://fedoraproject.org/wiki/Changes/Atomic_Cloud_Image
but rel-eng raised the concern that
https://fedoraproject.org/wiki/Changes/CockpitManagementConsole
is only listed for Server. Should we include it in Cloud too? Right
now it's promoted as part of the Project Atomic, so I think it'd make
sense to include there.
Perhaps a relevant difference here is that Cloud is more often treated
as cattle instead of pets - disposable stateless systems managed as a
group, and thus there's less need to configure things node by node.
Even then though, Cockpit offers visualization on a per-node level.
Thoughts?
Hi,
Trying to get ahead of the Change process this time =)
I'd like to move Atomic under the Server WG as I feel it's a more
appropriate home for Fedora 22, with the increased scope to bare metal
installation. (Really it crosses both as Atomic should run in all the
clouds that mainline does, but I see Cloud as a specialization of Server
personally)
I started a Change page here:
https://fedoraproject.org/wiki/Changes/Atomic_Server
Comments (and improvements to the Change proposal) are appreciated.
So, basically, we have these files:
/etc/init.d/google-accounts-manager
/etc/init.d/google-address-manager
/etc/init/google-accounts-manager-service.conf
/etc/init/google-accounts-manager-task.conf
/etc/init/google-address-manager.conf
/usr/lib/systemd/system/google-address-manager.service
/usr/lib/systemd/system/google-accounts-manager.service
/usr/share/google/google_daemon/accounts_manager_daemon.py
/usr/share/google/google_daemon/address_manager.py
/usr/share/google/google_daemon/utils.py
/usr/share/google/google_daemon/manage_accounts.py
/usr/share/google/google_daemon/desired_accounts.py
/usr/share/google/google_daemon/accounts_manager.py
/usr/share/google/google_daemon/accounts.py
/usr/share/google/google_daemon/manage_addresses.py
My proposal:
> /etc/init.d/google-accounts-manager
> /etc/init.d/google-address-manager
No need for these. We can delete them... right?
> /etc/init/google-accounts-manager-service.conf
> /etc/init/google-accounts-manager-task.conf
> /etc/init/google-address-manager.conf
Maybe these should go in /etc/sysconfig
> /usr/lib/systemd/system/google-address-manager.service
> /usr/lib/systemd/system/google-accounts-manager.service
Modify these so they point to /usr/share/google-daemon if possible.
> /usr/share/google/google_daemon/accounts_manager_daemon.py
> /usr/share/google/google_daemon/address_manager.py
> /usr/share/google/google_daemon/utils.py
> /usr/share/google/google_daemon/manage_accounts.py
> /usr/share/google/google_daemon/desired_accounts.py
> /usr/share/google/google_daemon/accounts_manager.py
> /usr/share/google/google_daemon/accounts.py
> /usr/share/google/google_daemon/manage_addresses.py
Move these to /usr/share/google-daemon
I'll show a spec in a little while.
--
It's hard to be free... but I love to struggle. Love isn't asked for;
it's just given. Respect isn't asked for; it's earned!
Renich Bon Ciric
http://www.woralelandia.com/http://www.introbella.com/
Ok, I have a working recipe. Check it out:
https://github.com/renich/gce-images-fedora/blob/master/imagefactory/f20.tdl
I am using:
oz-install -d3 -t 10000 f20.tld
oz-customize -d3 f20.tld f20<date>
Tu generate and customize.
It is missing some of the security points:
- root still has a password
- root is not locked
- root can login with a key
- ssh by password is not disabled.
I am waiting for the google packages to be ready so I can lock root
and all. It should be easy to do those things once they're done.
+Felipe, let me know if you need help with anything.