New Releases of Ubuntu and Debian Images for Amazon EC2 (Tools, Security)

| 7 Comments | 0 TrackBacks

New updates have been released for the Ubuntu and Debian AMIs (EC2 images) published on:

http://alestic.com

The following notes apply to this release:

  • The EC2 AMI tools have been upgraded to version 1.3-34544. Note that an “apt-get upgrade” will downgrade the EC2 AMI tools because the versions of the ec2-ami-tools package currently in the Ubuntu Hardy, Intrepid, Jaunty archives are outdated. If you have an easy solution to this, please let us know.

  • The ssh host key regeneration has been moved to run after the RNG is seeded. This improves security, especially for folks who are verifying the ssh host key on the first connect by comparing the fingerprint to the value in the instance console output. Thanks to Andrew Becherer for suggesting this improvement.

  • The Ubuntu Karmic Alpha images were not updated. Due to a new kernel requirement, Karmic will no longer run on Amazon’s 2.6.21 kernel. Once Canonical releases an Ubuntu kernel with the appropriate features, the Karmic series may be resumed. Running “apt-get upgrade” on an existing Karmic AMI will cause it to be inaccessible after rebooting.

  • The Debian Etch desktop images were not updated because apparently LaTeX refuses to build a format from a source file which is more than five years old. If there is anybody who wants Etch desktops and is willing to investigate, please contact me, otherwise I plan to discontinue support for this series. If you’re using Debian, I’d encourage you to upgrade to Lenny “stable” anyway.

Please give these new images a spin and let us know if you run into any problems.

Enjoy

No TrackBacks

TrackBack URL: http://alestic.com/mt/mt-tb.cgi/46

7 Comments

>Note that an “apt-get upgrade” will downgrade the EC2 AMI
>tools because the versions of the ec2-ami-tools package
>currently in the Ubuntu Hardy, Intrepid, Jaunty archives are
>outdated. If you have an easy solution to this, please let us
>know.


Create a PPA on Launchpad.net and publish the latest ec2-ami-tools package there. Then, just add it by default to /etc/apt/sources.list.

can't you simply put the ec2-ami-tools package on hold?

as described here:
http://blogs.koolwal.net/2009/03/04/tip-how-to-keep-a-debian-package-on-hold/

onestone: I've been putting off learning about publishing packages because I have a company to build in my real job, but there are a growing number of reasons I would like to do this, so we'll see.

jrhadmin: Thanks! So it boils down to:

echo ec2-ami-tools hold | sudo dpkg --set-selections

and then it won't be downgraded on upgrades. Unfortunately, it also won't be upgraded if the archives ever catch up, but this statement releases the hold:

echo ec2-ami-tools install | sudo dpkg --set-selections

If the archives continue to stay out of date, I'll use this setting by default in the next release of the AMIs.

Is there a document that contains all of the release notes describing the differences between the "tweaked" Amazon AMIs and a basic Ubuntu install? I'm specifically interested in 9.04.

agussman: Most of the differences are described in the "Features" section of the AMI documentation:

http://ec2jaunty.notlong.com

You can also read the code which builds the images:

http://ec2ubuntu-build-ami.notlong.com

Hi, with the Jaunty desktop image, running user-setup crashes if encrypted home directories is selected. Tried installing ecryptfs-utils package first, but it didn't make a difference.
Thanks

Leave a comment

Stay Updated

Subscribe with email address:
 Subscribe with a reader
Join the EC2 Ubuntu Google Group
Follow Eric Hammond on Twitter

More Entries

Understanding Access Credentials for AWS/EC2
Amazon Web Services (AWS) has a dizzying proliferation of credentials, keys, ids, usernames, certificates, passwords, and codes which are used…
How *Not* to Upgrade to Ubuntu 9.10 Karmic on Amazon EC2
WARNING! Though most Ubuntu 9.04 Jaunty systems can upgrade to 9.10 Karmic in place, this is not possible on EC2…
1 TB of Memory in 1 Minute with 1 Command
Amazon Web Services just announced the release of two new instance types for EC2. These new types have 34.2 GB…
New Releases of Ubuntu and Debian Images for Amazon EC2 (Kernel, Security, PPA, runurl, Tools)
New updates have been released for the Ubuntu and Debian AMIs (EC2 images) published on: http://alestic.com The following notes apply…
Encrypting Ephemeral Storage and EBS Volumes on Amazon EC2
Over the years, Amazon has repeatedly recommended that customers who care about the security of their data should consider encrypting…
Creating Consistent EBS Snapshots with MySQL and XFS on EC2
In the article Running MySQL on Amazon EC2 with Elastic Block Store I describe the principles involved in using EBS…
Hidden Dangers in Creating Public EBS Snapshots on EC2
Amazon EC2 recently released a feature which lets you share an EBS snapshot so that other accounts can access it.…
Solving: "I can't connect to my server on Amazon EC2"
Help! I can’t connect to my EC2 instance! Woah! My box just stopped talking to me! Hey! I can’t access…
runurl - A Tool and Approach for Simplifying user-data Scripts on EC2
Many Ubuntu and Debian images for Amazon EC2 include a hook where scripts passed as user-data will be run as…
Presentation: Building Custom Linux Images for Amazon EC2
At the end of July, I gave a presentation at O’Reilly’s Open Source Convention (OSCON 2009) in San Jose. The…
New Releases of Ubuntu and Debian Images for Amazon EC2 (Tools, Security)
New updates have been released for the Ubuntu and Debian AMIs (EC2 images) published on: http://alestic.com The following notes apply…
Poll: Verifying ssh Fingerprint on EC2 Instances
When you ssh to a new EC2 instance, you are presented with the challenge: The authenticity of host 'XXX' can't…
EBS Snapshots of a MySQL Slave Database on EC2
At our company, CampusExplorer.com, we regularly snapshot the EBS volume which holds our MySQL database using the basic procedure I…
Matching EC2 Availability Zones Across AWS Accounts
Summary: EC2 availability zone names in different accounts do not match to the same underlying physical infrastructure. This article explains…
Does Your Product Help Users Build AMIs for Amazon EC2?
I will be speaking at the O’Reilly Open Source Convention (OSCON 2009) next week, giving a presentation on building custom…
Creating a New Image for EC2 by Rebundling a Running Instance
When you start up an instance (server) on Amazon EC2, you need to pick the image or AMI (Amazon Machine…
New Releases of Ubuntu Images for Amazon EC2 2009-06-23 (Karmic Koala Alpha released)
Ubuntu Karmic Koala Alpha is being developed and will be released as Ubuntu 9.10 in October. If you want to…
Using RAID on EC2 EBS Volumes to Break the 1TB Barrier and Increase Performance
Amazon EC2 currently has a limit of 1,000 GB (1 TB) for EBS volumes (Elastic Block Store). It is possible…
New Releases of Ubuntu and Debian Images for Amazon EC2 2009-06-14 (Reliability and Security)
New updates have been released for the Ubuntu and Debian AMIs (EC2 images) published on: http://alestic.com The following improvements are…
Repost: Hiring EC2/AWS Developers/Engineers
Reposting a response I wrote to a user on Amazon’s EC2 forum who is having a hard time finding good…