<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Ubuntu Cloud Portal &#187; featured</title>
	<atom:link href="http://cloud.ubuntu.com/tag/featured/feed/" rel="self" type="application/rss+xml" />
	<link>http://cloud.ubuntu.com</link>
	<description>Ubuntu Cloud Portal</description>
	<lastBuildDate>Fri, 11 May 2012 10:15:27 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Introducing Project Sputnik: Developer laptop</title>
		<link>http://bartongeorge.net/2012/05/07/introducing-project-sputnik-developer-laptop/</link>
		<comments>http://bartongeorge.net/2012/05/07/introducing-project-sputnik-developer-laptop/#comments</comments>
		<pubDate>Mon, 07 May 2012 14:00:09 +0000</pubDate>
		<dc:creator>Barton George</dc:creator>
				<category><![CDATA[developers]]></category>
		<category><![CDATA[featured]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[mark shuttleworth]]></category>
		<category><![CDATA[open source]]></category>
		<category><![CDATA[ubuntu]]></category>
		<category><![CDATA[uds]]></category>
		<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://bartongeorge.net/?p=6921</guid>
		<description><![CDATA[Today I am very excited, I finally get to talk about project Sputnik!  In a nutshell, drumroll please, here it is: Made possible by an internal innovation fund, project Sputnik is a 6 month effort to explore the possibility of creating an open source laptop targeted directly at developers.  It is based on Ubuntu 12.04 [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=bartongeorge.net&#38;blog=4695609&#38;post=6921&#38;subd=barton808&#38;ref=&#38;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>Today I am very excited, I finally get to talk about project Sputnik!  In a nutshell, drumroll <a href="http://barton808.files.wordpress.com/2012/05/xps13.png"><img class="alignright size-thumbnail wp-image-6936" title="XPS13" src="http://barton808.files.wordpress.com/2012/05/xps13.png?w=150&h=95" alt="" width="150" height="95" /></a>please, here it is:</p>
<p style="padding-left:30px;">Made possible by an<a href="http://bartongeorge.net/2012/05/02/ferreting-out-innovation/" > internal innovation fund</a>, project Sputnik is a 6 month effort to explore the possibility of creating an open source laptop targeted directly at developers.  It is based on <a href="http://www.google.com/url?sa=t&amp;rct=j&amp;q=&amp;esrc=s&amp;source=web&amp;cd=2&amp;ved=0CH0QFjAB&amp;url=http://www.ubuntu.com/download&amp;ei=K_-mT_5w0dqJArqU3OUC&amp;usg=AFQjCNFhQvqag11nTsIp2yCDanOTF8CaEg&amp;sig2=nrGNhms3UBAJ831P8fHQdg" >Ubuntu 12.04</a> and Dell’s <a href="http://www.dell.com/us/p/xps-13-l321x/pd?c=us&amp;cs=19&amp;l=en&amp;s=dhs&amp;ST=dell%20XPS%2013&amp;dgc=ST&amp;cid=79646&amp;lid=4226210&amp;acd=sEuxyDAL5,23765875074,901pdb6671" >XPS13 laptop</a>.</p>
<p>To put it in context, Sputnik is part of an effort by Dell to better understand and serve the needs of developers in Web companies.  We want to finds ways to make the developer experience as powerful and simple as possible.  And what better way to do that than beginning with a laptop that is both highly mobile and extremely stylish, running the 12.04 LTS release of Ubuntu Linux.</p>
<p><strong>Why a developer laptop</strong></p>
<p>When we first started setting up the web vertical to focus on companies who use the internet as their platform, we brought in <a href="http://www.google.com/url?sa=t&amp;rct=j&amp;q=&amp;esrc=s&amp;source=web&amp;cd=1&amp;ved=0CF8QFjAA&amp;url=http://redmonk.com/sogrady/&amp;ei=z_-mT4P2OuariAKgoMCyAg&amp;usg=AFQjCNHey6UdPJKZ4LjfkTiu-RxJ1_z6tA&amp;sig2=O1f38I-IGVQMhygQmSmYYA" >Stephen O’Grady</a> of Redmonk to learn as much as we could about the needs of developers.  One of the ideas that Stephen tossed out was a Dell laptop running Ubuntu, targeting developers.  We thought the idea was pretty cool and filed it away.</p>
<p>As we continued talking to customers and developers the topic of Ubuntu kept coming up and we came across a fair number of devs who were asking for a Dell laptop specifically based <a href="http://barton808.files.wordpress.com/2012/05/ubuntu.png"><img class="alignleft size-thumbnail wp-image-6940" title="Ubuntu" src="http://barton808.files.wordpress.com/2012/05/ubuntu.png?w=150&h=33" alt="" width="150" height="33" /></a>on it.  To my knowledge, no other OEM has yet made a system specifically targeted at devs and figured it was time to see what that might mean.  When the XPS13 launched we realized that we found the perfect platform to start with and when Dell’s incubation program was announced we knew I had the vehicle to get the effort kick started.</p>
<p>I should also add that Ubuntu was a natural choice not only because of its popularity in the Web world but Dell has quite a bit of experience with it.  In fact Dell has enabled and pre-installed out-of-the-factory Ubuntu on more computer models than any other OEM.</p>
<p><strong>What’s Sputnik actually running?</strong></p>
<p>The <a href="http://hwe.ubuntu.com/uds-q/dellxps/" >install image</a> available for Sputnik contains</p>
<ol>
<li>drivers/patches for Hardware enablement</li>
<li>a basic offering of key tools and utilities (see the complete list at the end of this entry)</li>
<li>coming soon, a software management tool to go out to a github repository to pull down various developer profiles.</li>
</ol>
<p><strong>Hardware enablement</strong></p>
<p>In putting together the project, the area that we focused on first was hardware enablement.  As Linux users are all too painfully aware, Linux drivers are not always available for various platforms.  We have been working hand in hand with Canonical, the commercial sponsor behind Ubuntu and identified three main areas on the XPS13:</p>
<ol>
<li>An issue with brightness</li>
<li>The Wifi hotkey</li>
<li>The touchpad and multi touch support</li>
</ol>
<p>The first two have been <a href="https://launchpad.net/~kamalmostafa/+archive/dellxps" >resolved </a> but the last one re the touchpad is still at large.  The issue is a bit of a pain particularly the lack of palm rejection support which can cause your cursor to jump by mistake.  We have contacted the vendor who makes the touchpad and they are sizing the effort to fix this and at the same time we are working with Canonical to find an interim solution.</p>
<p><strong>Developer profile management</strong></p>
<p>Hardware enablement is table stakes but where Sputnik starts to get interesting is when we talk about profiles.  No two developers are alike so instead of stuffing the system with every possible tool or app a developer could possibly want, we are trying a different approach.  As mentioned above, the actual “stuff” on the install image is pretty basic, instead we are working with a few developers to put together a tool that can go out to a github repository and pull down various developer profiles.  The first profiles we are targeting are Android, Ruby and JavaScript.</p>
<p>As a one of our alpha cosmonauts, <a href="http://cogentdude.com/" >Charles Lowell</a>, explained (we have been working with three local developers in Austin, Charles, <a href="http://spanning.com/spanning-blog-contributors/mike-pav-vp-engineering/" >Mike Pav</a> and <a href="http://www.google.com/url?sa=t&amp;rct=j&amp;q=&amp;esrc=s&amp;source=web&amp;cd=1&amp;ved=0CFkQFjAA&amp;url=http://blog.dustinkirkland.com/&amp;ei=BAGnT5y4FIeriQKBhPDnAg&amp;usg=AFQjCNGPnec2hN4TSJ0y7DgynW2eSVwNow&amp;sig2=ww28UMHnFsTpHMTzhX3IMA" >Dustin Kirkland</a> to put together our initial offering together.   And yes I know Sputnik was unmanned but its our project and we wanted to call the testers “cosmonauts.” )</p>
<p style="padding-left:30px;">What I&#8217;d like to see is not only a gold-standard configuration, but also a meta-system to manage your developer configuration… The devops revolution is about configuration as code. How cool would it be if my laptop configuration were code that I could store in a source repo somewhere?</p>
<p>After we build the management tool and some basic profiles to get the effort started, we are hoping that the community will take over and began creating profiles of their own.</p>
<p><strong>Getting Feedback and UDS activities</strong></p>
<p>The idea is to conduct project Sputnik out in the open.  There is a <a href="http://www.ideastorm.com/Idea2SessionIdea?v=1336396592542&amp;id=a017000000hIx3bAAC" >Storm Session</a> that went live this morning on Dell Idea Storm for people to discuss the project and submit feedback, comments and ideas.  Later today here at the Ubuntu Developer Summit, Dustin, <a href="https://launchpad.net/~superm1" >Mario Limonciello</a> of Dell and I will be hosting a <a href="https://blueprints.launchpad.net/ubuntu/+spec/other-dell-devops-community-feedback">UDS session</a> to discuss Sputnik.  Additionally at UDS there is a coding <a href="http://cloud.ubuntu.com/2012/04/announcing-the-uds-juju-charm-contest-for-uds-attendees/">contest</a> that has been kicked off.  The three people who write the best Juju charms will each get an XPS13.</p>
<p><strong>The Vision: a Launchpad to the cloud </strong></p>
<p>As mentioned at the start, Sputnik is currently a 6month project to investigate an Ubuntu laptop.  If successful, we have big plans for the effort. <img src='http://s0.wp.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>When we initially pitched Sputnik to Ubuntu’s founder <a href="http://www.google.com/url?sa=t&amp;rct=j&amp;q=&amp;esrc=s&amp;source=web&amp;cd=2&amp;ved=0CIYBEBYwAQ&amp;url=http://www.markshuttleworth.com/biography&amp;ei=FwKnT-C-AsGWiQLS0qCZAg&amp;usg=AFQjCNHI8wvJFYGZrgE05Dke98fMaESRIA&amp;sig2=G1wenkhDWtOvrnQZfSiEoQ" >Mark Shuttleworth</a> a couple months ago he really liked the idea.  In his eyes however, he saw something bigger.  Where it got really interesting for him was when this laptop was optimized for DevOps.  In this scenario we would have a common set of tools from client, to test, to production, thereby tying Sputnik via a common tool chain to a cloud backend powered by OpenStack.  Developers could create “micro clouds” locally and then push them to the cloud writ large.</p>
<p>We see a lot of potential in Sputnik to provide developers with a simple and powerful tool.  Only time will tell however so stay tuned to this blog, check out the Sputnik Storm session and weigh in on the project, what you’d like to see and how you think it can be made better.</p>
<p>Pau for now…</p>
<p><strong>Extra-credit reading</strong></p>
<ul>
<li><a href="http://www.zdnet.co.uk/reviews/desktop-os/2012/04/26/ubuntu-1204-lts-precise-pangolin-40154970/">Ubuntu 12.04 LTS (<em>Precise Pangolin</em>) Review | Desktop OS | <em>ZDNet</em> <strong></strong></a></li>
<li><a title="If you’ve been following my tweets you may have heard about “Project Sputnik.”  While I’m not quite ready to talk about it, I wanted to give some insight into the program that’s helped get it off the ground. Innovation Incubation At the beginning of the year Dell launched an internal incubation fund with the idea [...]" href="http://feedproxy.google.com/~r/bartongeorge/nMQw/~3/hvLWvs2wOIE/">Ferreting out Innovation</a></li>
</ul>
<p><span style="text-decoration:underline;"><strong>Links and notes</strong></span></p>
<ul>
<li><strong> </strong><a href="http://www.ideastorm.com/Idea2SessionIdea?v=1336396592542&amp;id=a017000000hIx3bAAC">Sputnik Storm session</a> on idea storm</li>
</ul>
<ul>
<li>Sputnik <a href="http://hwe.ubuntu.com/uds-q/dellxps/" >install image</a></li>
</ul>
<p><strong>Touchpad issue</strong></p>
<p>Current behavior is that the touchpad functions as a basic pointing device, but lacks some desirable functionality:</p>
<ol>
<li>Pinch, zoom, &amp; flick</li>
<li>Palm negation (esp. important on larger touchpads where it&#8217;s easy for your hand to inadvertently touch the surface)</li>
<li>Side/edge scrolling</li>
<li>Two finger scrolling</li>
</ol>
<p>We have contacted the vendor who makes the touchpad and they are sizing the effort to fix this and at the same time we are working with Canonical to find an interim solution.</p>
<p><strong>Basic Install</strong></p>
<p>== standard meta packages ==</p>
<p>ubuntu-desktop^</p>
<p>standard^</p>
<p>== scm ==</p>
<p>git</p>
<p>git-core</p>
<p>bzr</p>
<p>bzr-gtk</p>
<p>bzr-git</p>
<p>python-launchpadlib</p>
<p>== utilities ==</p>
<p>screen</p>
<p>byobu</p>
<p>tmux</p>
<p>meld</p>
<p>juju</p>
<p>charm-tools</p>
<p>charm-helper-sh</p>
<p>euca2ools</p>
<p>puppet</p>
<p>chef (available post install)</p>
<p>== editors ==</p>
<p>emacs</p>
<p>vim</p>
<p>vim-gnome</p>
<p>== browsers ==</p>
<p>chromium-browser</p>
<p>firefox</p>
<p>== common build tools/utilities &amp; dependencies == fakeroot build-essential crash kexec-tools kvm makedumpfile kernel-wedge fwts devscripts</p>
<p>libncurses5</p>
<p>libncurses5-dev</p>
<p>libelf-dev</p>
<p>asciidoc</p>
<p>binutils-dev</p>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/barton808.wordpress.com/6921/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/barton808.wordpress.com/6921/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/barton808.wordpress.com/6921/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/barton808.wordpress.com/6921/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/barton808.wordpress.com/6921/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/barton808.wordpress.com/6921/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/barton808.wordpress.com/6921/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/barton808.wordpress.com/6921/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/barton808.wordpress.com/6921/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/barton808.wordpress.com/6921/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/barton808.wordpress.com/6921/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/barton808.wordpress.com/6921/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/barton808.wordpress.com/6921/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/barton808.wordpress.com/6921/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=bartongeorge.net&#038;blog=4695609&%23038;post=6921&%23038;subd=barton808&%23038;ref=&%23038;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://cloud.ubuntu.com/2012/05/introducing-project-sputnik-developer-laptop/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
<enclosure url="http://barton808.files.wordpress.com/2012/05/ubuntu.png?w=150" length="" type="" />
<enclosure url="http://barton808.files.wordpress.com/2012/05/xps13.png?w=150" length="" type="" />
<enclosure url="http://1.gravatar.com/avatar/9c77eaa95387a63934516eb3da5fd3d2?s=96&amp;amp;d=identicon&amp;amp;r=G" length="" type="" />
		</item>
		<item>
		<title>Announcing the UDS Juju Charm Contest for UDS attendees</title>
		<link>http://cloud.ubuntu.com/2012/04/announcing-the-uds-juju-charm-contest-for-uds-attendees/</link>
		<comments>http://cloud.ubuntu.com/2012/04/announcing-the-uds-juju-charm-contest-for-uds-attendees/#comments</comments>
		<pubDate>Wed, 25 Apr 2012 22:16:06 +0000</pubDate>
		<dc:creator>jorge</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[cloud]]></category>
		<category><![CDATA[contest]]></category>
		<category><![CDATA[featured]]></category>
		<category><![CDATA[juju]]></category>
		<category><![CDATA[planet]]></category>

		<guid isPermaLink="false">http://cloud.ubuntu.com/?p=34531</guid>
		<description><![CDATA[It&#8217;s time for another Juju Charm Contest, where you can submit your charms and win fabulous prizes! This contest is for Ubuntu Developer Summit Attendees; and our prizes are three sexy Dell XPS 13 ultrabooks, which we&#8217;ll be awarding to the three lucky winners of the contest. So how can you win yourself one of [...]]]></description>
			<content:encoded><![CDATA[<p>It&#8217;s time for another Juju Charm Contest, where you can submit your charms and win fabulous prizes! This contest is for <a href="http://uds.ubuntu.com">Ubuntu Developer Summit</a> Attendees; and our prizes are three sexy <a href="http://www.dell.com/story">Dell XPS 13 ultrabooks</a>, which we&#8217;ll be awarding to the three lucky winners of the contest.</p>
<p><a href="http://cloud.ubuntu.com/wp-content/uploads/2012/04/Screenshot-from-2012-04-25-180659.png"><img class="alignnone size-full wp-image-34532" title="Dell XPS 13" src="http://cloud.ubuntu.com/wp-content/uploads/2012/04/Screenshot-from-2012-04-25-180659.png" alt="" width="919" height="410" /></a></p>
<p>So how can you win yourself one of these? Well, with 66 services already ready to be deployed on the cloud we&#8217;re always looking for more, so <a href="http://jujucharms.com/charms/precise">have a look</a> at what you think is missing from the Juju Charm Store and submit your charm as an entry.</p>
<p>We&#8217;ve got the <a href="https://juju.ubuntu.com/Charms">step-by-step instructions</a> on how to write your own charm, we&#8217;re looking for things DevOps deploy to the cloud, so be creative! You have from now until May 09 to submit your charm. At that point we&#8217;ll judge the entries, and then give out the Dell XPS 13&#8242;s during the last day of the Ubuntu  Developer Summit, so if you&#8217;re missing your favorite service from the Charm Store, submit an entry and you&#8217;ll automatically be entered in the contest.</p>
<p><a href="https://juju.ubuntu.com/CharmContest">Full contest rules here</a>, including the judging criteria, so you&#8217;ll want to read that before you get started. Happy Charming!</p>
]]></content:encoded>
			<wfw:commentRss>http://cloud.ubuntu.com/2012/04/announcing-the-uds-juju-charm-contest-for-uds-attendees/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
		<item>
		<title>juju client now available for Mac OSX</title>
		<link>http://cloud.ubuntu.com/2012/04/juju-client-now-available-for-mac-osx/</link>
		<comments>http://cloud.ubuntu.com/2012/04/juju-client-now-available-for-mac-osx/#comments</comments>
		<pubDate>Tue, 24 Apr 2012 15:55:47 +0000</pubDate>
		<dc:creator>jorge</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[cloud]]></category>
		<category><![CDATA[featured]]></category>
		<category><![CDATA[juju]]></category>
		<category><![CDATA[planet]]></category>

		<guid isPermaLink="false">http://cloud.ubuntu.com/?p=34464</guid>
		<description><![CDATA[Brandon Holtsclaw has published a Mac port of juju. This will enable Mac users to deploy to their Ubuntu Servers from the comfort of their home operating system. Brandon adds along: Pull Requests or filing Issue&#8217;s are more than Welcome&#8217;d from anyone. Need help getting started with juju? Check out our Getting Started documentation and [...]]]></description>
			<content:encoded><![CDATA[<p>Brandon Holtsclaw has published a <a href="http://jujutools.github.com/">Mac port of juju</a>. This will enable Mac users to deploy to their Ubuntu Servers from the comfort of their home operating system. Brandon adds along:</p>
<blockquote><p>Pull Requests or filing Issue&#8217;s are more than Welcome&#8217;d from anyone.</p></blockquote>
<p>Need help getting started with juju? Check out our <a href="https://juju.ubuntu.com/docs/getting-started.html">Getting Started</a> documentation and then browse through the <a href="http://jujucharms.com/">Charm Store</a> to see what you can start deploying today!</p>
]]></content:encoded>
			<wfw:commentRss>http://cloud.ubuntu.com/2012/04/juju-client-now-available-for-mac-osx/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>OpenStack in Ubuntu Server 12.04 LTS</title>
		<link>http://undacuvabrutha.wordpress.com/2012/04/19/openstack-in-ubuntu-server-12-04-lts/</link>
		<comments>http://undacuvabrutha.wordpress.com/2012/04/19/openstack-in-ubuntu-server-12-04-lts/#comments</comments>
		<pubDate>Thu, 19 Apr 2012 21:54:11 +0000</pubDate>
		<dc:creator>Robbie</dc:creator>
				<category><![CDATA[canonical]]></category>
		<category><![CDATA[featured]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://undacuvabrutha.wordpress.com/?p=542</guid>
		<description><![CDATA[With the release of Ubuntu Server 12.04 LTS quickly approaching, the Ubuntu Server Team has been working extremely hard on ensuring OpenStack Essex will be of high quality and tightly integrated into Ubuntu Cloud.  As with prior Long Term Support releases, Canonical commits to maintaining Ubuntu Server 12.04 LTS for five years, which means users [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=undacuvabrutha.wordpress.com&#38;blog=8749449&#38;post=542&#38;subd=undacuvabrutha&#38;ref=&#38;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>With the release of Ubuntu Server 12.04 LTS quickly approaching, the <a href="https://wiki.ubuntu.com/ServerTeam/">Ubuntu Server Team</a> has been working extremely hard on ensuring <a href="http://wiki.openstack.org/EssexReleaseSchedule">OpenStack Essex</a> will be of <a href="http://www.openstack.org/blog/2012/02/automating-openstack-testing-on-ubuntu/">high quality</a> and tightly integrated into <a href="http://www.ubuntu.com/cloud#build-your-own-cloud">Ubuntu Cloud</a>.  As with prior <a href="https://wiki.ubuntu.com/LTS">Long Term Support</a> releases, Canonical commits to maintaining Ubuntu Server 12.04 LTS for five years, which means users receive five years of maintenance for the OpenStack Essex packages we provide in main.   With that said, we recognize that OpenStack is still a relatively young project moving at a tremendous rate of innovation right now, with features and fixes already planned for Folsom that some users require for their production deployment.  In the past, these users would have to upgrade off the LTS, in order to get maintenance for the OpenStack release they need on Ubuntu Server&#8230; thus foregoing the five year maintenance they want and need for their production deployment.  We wholeheartedly believe there are situations where moving to the next release of Ubuntu (12.10, 13.04, etc) for newer OpenStack releases works just fine, especially for test/dev deployments.  However, we also know there will be many situations where users cannot afford the risk and/or the cost of upgrading their entire cloud infrastructure just to get the benefits of a newer OpenStack release, and we need to have a solution that fits their needs. After thinking about what users want and where most people expect OpenStack go in terms of continued innovation and stability, we have decided to provide Ubuntu users with two options for maintenance and support in the 12.04 LTS.</p>
<p>The first option is that users can stay with the shipped version of OpenStack (Essex) and remain with it for the full life of the LTS.  As per the Ubuntu LTS policy, we commit to maintaining and supporting the Essex release for 5 years.  The point releases will also ship the Essex version of OpenStack, along with any bug fixes or security updates made available since its release.<strong><strong><br />
</strong></strong></p>
<h2>Introducing the Ubuntu Cloud Archive</h2>
<p>The second option involves Canonical’s Ubuntu Cloud archive, which we are officially announcing today.  Users can elect to enable this archive, and install newer releases of OpenStack (and the dependencies) as they become available up through the next Ubuntu LTS release (presumably 14.04).  Bug processing and patch contributions will follow standard Ubuntu practice and policy where applicable.  Canonical commits to maintaining and supporting new OpenStack releases for Ubuntu Server 12.04 LTS in our Ubuntu Cloud archive for at least 18 months after they release.  Canonical will stop introducing new releases of OpenStack for Ubuntu Server 12.04 LTS into the Ubuntu Cloud archive with the version shipped in the next Ubuntu Server LTS release (presumably 14.04).  We will maintain and support this last updated release of OpenStack in the Ubuntu Cloud archive for 3 years, i.e. until the end of the Ubuntu 12.04 LTS lifecycle.<br />
In order to allow for a relatively easy upgrades, and still adhere to Ubuntu processes and policy, we have elected to have archive.canonical.com be the home of the Ubuntu Cloud archive.  We will enable update paths for each OpenStack release.</p>
<ul>
<li>e.g. Enabling “precise-folsom” in the archive will provide access to all OpenStack Folsom packages built for Ubuntu Server 12.04 LTS (binary and source), any updated dependencies required, and bug/security fixes made after release.</li>
</ul>
<p>As of now, we have no plans to build or host OpenStack packages for non-LTS releases of Ubuntu Server in the Ubuntu Cloud archive.  We have created the chart below to help better explain the options.<strong><strong><br />
<a href="https://undacuvabrutha.files.wordpress.com/2012/04/plan.png"><img class="alignleft size-full wp-image-546" title="OpenStack Release Plan" src="https://undacuvabrutha.files.wordpress.com/2012/04/plan.png?w=497&#038;h=384" alt="" width="497" height="384" /></a><br />
</strong></strong></p>
<h1>Q&amp;A</h1>
<h2>Why Not Use Stable Release Updates?</h2>
<p>Ubuntu&#8217;s release policy states that once an Ubuntu release has been published, updates must follow a special procedure called a <a href="https://wiki.ubuntu.com/StableReleaseUpdates">stable release update</a>, or SRU, and are delivered via the -updates archive.  These updates are restricted to a specific set of characteristics:</p>
<ul>
<li>severe regression bugs</li>
<li>security vulnerabilities (via the -security archive)</li>
<li>bugs causing loss of user data</li>
<li>&#8220;safe&#8221; application layer bugs</li>
<li>hardware enablement</li>
<li>partner archive updates</li>
</ul>
<p>Exceptions to the SRU policy are possible. However, for this to occur the Ubuntu Technical Board must approve the exception, which must meet their guidelines:</p>
<ol>
<li>Updates to new upstream versions of packages must be forced or substantially impelled by changes in the external environment, i.e. changes must be outside anything that could reasonably be encapsulated in a stable release of Ubuntu. Changes internal to the operating system we ship (i.e. the Ubuntu archive), or simple bugs or new features, would not normally qualify.</li>
<li>A new upstream version must be the best way to solve the problem.  For example, if a new upstream version includes a small protocol compatibility fix and a large set of user interface changes, then, without any judgement required as to the benefits of the user interface changes, we will normally prefer to backport the protocol compatibility fix to the version currently in Ubuntu.</li>
<li>The upstream developers must be willing to work with Ubuntu.  A responsive upstream who understands Ubuntu&#8217;s requirements and is willing to work within them can make things very much easier for us.</li>
<li>The upstream code must be well-tested (in terms of unit and system tests).  It must also be straightforward to run those tests on the actual packages proposed for deployment to Ubuntu users.</li>
<li>Where possible, the package must have minimal interaction with other packages in Ubuntu.  Ensuring that there are no regressions in a library package that requires changes in several of its reverse-dependencies, for example, is significantly harder than ensuring that there are no regressions in a package with a straightforward standalone interface that can simply be tested in isolation. We would not normally accept the former, but might  consider the latter.</li>
</ol>
<p>Once approved by the Tech Board, the exception must have a documented update policy, e.g. <a href="http://wiki.ubuntu.com/LandscapeUpdates">http://wiki.ubuntu.com/LandscapeUpdates</a>.  Based on these guidelines and the core functionality OpenStack serves in Ubuntu Cloud, the Ubuntu Server team did not feel it was in the best interest of their users, nor Ubuntu in general, to pursue an SRU exception.<strong><strong><br />
</strong></strong></p>
<h2>What about using Ubuntu Backports?</h2>
<p>The <a href="https://wiki.ubuntu.com/UbuntuBackports">Ubuntu Backports process</a> (excludes kernel) provides us a mechanism for releasing package updates for stable releases that provide new features or functionality.  Changes were recently made to `apt` in Ubuntu 11.10, whereby it now only installs packages from Backports when they are explicitly requested.  Prior to 11.10, `apt` would install everything from Backports once it was enabled, which led to packages being unintentionally upgraded to newer versions.  The primary drawbacks with using the Backports archive is that the <a href="https://wiki.ubuntu.com/SecurityTeam">Ubuntu Security team</a> does not provide updates for the archive, it’s a bit of a hassle to enable per package updates, and Canonical doesn’t traditionally offer support services for the packages hosted there.  Furthermore, with each new release of OpenStack, there are other applications that OpenStack depends on that also must be at certain levels.  By having more than one version of OpenStack in the same Backports archive, we run a huge risk of having backward compatibility issues with these dependencies.<strong><strong><br />
</strong></strong></p>
<h2>How Will You Ensure Stability and Quality?</h2>
<p>In order for us to ensure users have a safe and reliable upgrade path, we will establish a QA policy where all new versions and updated dependencies are required to pass a specific set of regression tests with a 100% success rate.  In addition:</p>
<ul>
<li>Unit testing must cover a minimum set of functionality and APIs</li>
<li>System test scenarios must be executed for 24, 48 and 72 hours uninterrupted.</li>
<li>Package testing must cover: initial installation, upgrades from the previous OpenStack release, and upgrades from the previous LTS and non-LTS Ubuntu release.</li>
<li>All test failures must be documented as bugs in Launchpad, with regressions marked Fix Released before the packages are allowed to exit QA.</li>
<li>Test results are posted publicly and announced via a mailing list specifically created for this effort only.</li>
</ul>
<p>Only upon successfully exiting QA will packages be pushed into the Ubuntu Cloud archive.<strong><strong><br />
</strong></strong></p>
<h2>What Happens With OpenStack Support and Maintenance in 14.04?</h2>
<p>Good question.  The cycle could repeat itself, however at this point Canonical is not making such a commitment.  If the rate of innovation and growth of the OpenStack project matures to a point where users become less likely to need the next release for its improved stability and/or quality, and instead just want it for a new feature, then we would likely return to our traditional LTS maintenance and support model.</p>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/undacuvabrutha.wordpress.com/542/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/undacuvabrutha.wordpress.com/542/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/undacuvabrutha.wordpress.com/542/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/undacuvabrutha.wordpress.com/542/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/undacuvabrutha.wordpress.com/542/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/undacuvabrutha.wordpress.com/542/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/undacuvabrutha.wordpress.com/542/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/undacuvabrutha.wordpress.com/542/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/undacuvabrutha.wordpress.com/542/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/undacuvabrutha.wordpress.com/542/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/undacuvabrutha.wordpress.com/542/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/undacuvabrutha.wordpress.com/542/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/undacuvabrutha.wordpress.com/542/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/undacuvabrutha.wordpress.com/542/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=undacuvabrutha.wordpress.com&amp;blog=8749449&amp;post=542&amp;subd=undacuvabrutha&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://cloud.ubuntu.com/2012/04/openstack-in-ubuntu-server-12-04-lts/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
<enclosure url="http://0.gravatar.com/avatar/c732abad5d7b56a10a2367739d9fe2fd?s=96&amp;amp;d=http://s0.wp.com/i/mu.gif&amp;amp;r=PG" length="" type="" />
<enclosure url="https://undacuvabrutha.files.wordpress.com/2012/04/plan.png" length="" type="" />
		</item>
		<item>
		<title>Want to mess with SPDY easily? Come experiment with it via juju</title>
		<link>http://www.jorgecastro.org/2012/04/17/want-to-mess-with-spdy-easily-come-experiment-with-it-via-juju/</link>
		<comments>http://www.jorgecastro.org/2012/04/17/want-to-mess-with-spdy-easily-come-experiment-with-it-via-juju/#comments</comments>
		<pubDate>Wed, 18 Apr 2012 00:00:00 +0000</pubDate>
		<dc:creator>Jorge O. Castro</dc:creator>
				<category><![CDATA[featured]]></category>

		<guid isPermaLink="false">http://www.jorgecastro.org/2012/04/17/want-to-mess-with-spdy-easily-come-experiment-with-it-via-juju</guid>
		<description><![CDATA[(This is half broken and not ready, but it&#8217;s too cool to not tell you about right away.)

The folks over at Google released a new snapshot of mod_spdy for use with Apache.

Thinking this would be a cool way to show off juju&#8217;s subordinate fe...]]></description>
			<content:encoded><![CDATA[<p>(This is half broken and not ready, but it&#8217;s too cool to not tell you about right away.)</p>

<p>The folks over at Google released a <a href="http://googledevelopers.blogspot.com/2012/04/add-spdy-support-to-your-apache-server.html">new snapshot of mod_spdy</a> for use with Apache.</p>

<p>Thinking this would be a cool way to show off juju&#8217;s subordinate feature, Clint Byrum got to work and hacked together a mod_spdy subordinate charm; which means (assuming it works), that we can just tack it onto things serving via Apache and get mod_spdy relatively easy for all the charms that would use it in the store. Neat huh?</p>

<p>Here it is:</p>

<p><a href="http://jujucharms.com/~clint-fewbar/precise/mod-spdy">http://jujucharms.com/~clint-fewbar/precise/mod-spdy</a></p>

<p>And here&#8217;s how you&#8217;d test it:</p>

<pre><code>juju deploy wordpress
juju deploy mysql
juju add-relation mysql wordpress
juju expose wordpress
juju deploy cs:~clint-fewbar/precise/mod-spdy
juju add-relation mod-spdy wordpress
</code></pre>

<p>Clint realized that juju does not allow subordinates to open ports for their primaries, so you have to use the <code>open-port</code> script in juju-jitsu.</p>

<p>To do that, after you&#8217;ve done the steps above:</p>

<pre><code>bzr branch lp:juju-jitsu
juju-jitsu/sub-commands/open-port your-primary-service 443
</code></pre>

<p>https://your-public-ip/ should be SSL, and should be using SPDY if you try it in Chrome/Chromium/Firefox.</p>

<p>This is a rough cut, and not in the charm store yet for obvious reasons, and when I tested it it didn&#8217;t even serve the right page, but, at least the error was served over SPDY, heh. But you can immediately see that by using a subordinate charm you can add on a feature to an existing charm, making it a nice way to test something new and shiny.</p>

<p>We&#8217;re in #juju on freenode if you want to start whacking on this and making it more deployable, find bugs, and finish the implementation, we can then make this a nice option for Ubuntu Server users. Happy spdying!</p>
]]></content:encoded>
			<wfw:commentRss>http://cloud.ubuntu.com/2012/04/want-to-mess-with-spdy-easily-come-experiment-with-it-via-juju/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Juju constraints unbinds your machines</title>
		<link>http://fewbar.com/2012/04/juju-constraints-unbinds-your-machines/</link>
		<comments>http://fewbar.com/2012/04/juju-constraints-unbinds-your-machines/#comments</comments>
		<pubDate>Mon, 16 Apr 2012 22:48:17 +0000</pubDate>
		<dc:creator>clint</dc:creator>
				<category><![CDATA[cloud]]></category>
		<category><![CDATA[ec2]]></category>
		<category><![CDATA[featured]]></category>
		<category><![CDATA[juju]]></category>
		<category><![CDATA[mysql]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://fewbar.com/?p=534</guid>
		<description><![CDATA[<a href="http://fewbar.com/2012/04/juju-constraints-unbinds-your-machines/" title="Juju constraints unbinds your machines"></a>This week, William &#8220;I code more than you will ever be able to&#8221; Reade announced that Juju has a new feature called &#8216;Constraints&#8217;. This is really, really cool and brings juju into a new area of capability for deploying big &#8230;<p><a href="http://fewbar.com/2012/04/juju-constraints-unbinds-your-machines/">Read more &#187;</a></p>]]></description>
			<content:encoded><![CDATA[<a href="http://fewbar.com/2012/04/juju-constraints-unbinds-your-machines/" title="Juju constraints unbinds your machines"></a><p>This week, <a href="https://lists.ubuntu.com/archives/juju/2012-April/001426.html">William &#8220;I code more than you will ever be able to&#8221; Reade announced that Juju has a new feature called &#8216;Constraints&#8217;.</a></p>
<p>This is really, really cool and brings juju into a new area of capability for deploying big and little sites.</p>
<p>To be clear, this allows you to abstract things pretty effectively.</p>
<p>Consider this:</p>
<p><code>juju deploy mysql --constraints mem=10G<br />
juju deploy statusnet --constraints cpu=1</code></p>
<p>This will result in your mysql service being on an extra large instance since it has 15GB of RAM. Your statusnet instances will be m1.small&#8217;s since that will have just 1 ECU.</p>
<p>Even cooler than this is now if you want a mysql slave in a different availability zone:</p>
<p><code>juju deploy mysql --constraints ec2-zone=a mysql-a<br />
juju deploy mysql --constraints ec2-zone=b mysql-b<br />
juju add-relation mysql-a:master mysql-b:slave<br />
juju add-relation statusnet mysql-a</code></p>
<p>Now if mysql-a goes down</p>
<p><code>juju remove-relation statusnet mysql-a<br />
juju add-relation statusnet mysql-b</code></p>
<p>Much and more is possible, but this really does make juju even more compelling as a tool for simple, easy deployment. <em>Edit: fixed ec2-zone to be the single character, per William&#8217;s feedback.</em></p>
]]></content:encoded>
			<wfw:commentRss>http://cloud.ubuntu.com/2012/04/juju-constraints-unbinds-your-machines/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Announcing the Ubuntu Cloud Summit, 8 May, Oakland, California</title>
		<link>http://cloud.ubuntu.com/2012/04/announcing-the-ubuntu-cloud-summit-8-may-oakland-california/</link>
		<comments>http://cloud.ubuntu.com/2012/04/announcing-the-ubuntu-cloud-summit-8-may-oakland-california/#comments</comments>
		<pubDate>Tue, 10 Apr 2012 20:03:10 +0000</pubDate>
		<dc:creator>jorge</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[cloud]]></category>
		<category><![CDATA[featured]]></category>
		<category><![CDATA[planet]]></category>

		<guid isPermaLink="false">http://cloud.ubuntu.com/?p=34095</guid>
		<description><![CDATA[Canonical in collaboration with Redmonk will be hosting &#8220;The Ubuntu Cloud Summit&#8221; &#8211; a one day event for both technology and business attendees interested in how open-source cloud computing can help their organisations. The event takes place on Tuesday 8th May, at the The Oakland Marriott City Center Hotel, and runs in conjunction with UDS. The [...]]]></description>
			<content:encoded><![CDATA[<p>Canonical in collaboration with <a href="http://www.redmonk.com">Redmonk</a> will be hosting &#8220;The Ubuntu Cloud Summit&#8221; &#8211; a one day event for both technology and business attendees interested in how open-source cloud computing can help their organisations.</p>
<p>The event takes place on Tuesday 8th May, at the The Oakland Marriott City Center Hotel, and runs in conjunction with UDS.</p>
<p>The agenda is still being defined, but the sessions will cover some interesting ideas, challenges and trends around cloud computing and how attendees can deploy an open cloud in their organisation.</p>
<p>Topics will include:</p>
<ul>
<li>The Open Cloud - The role of open source in cloud computing—particularly how an open cloud enables a more flexible, vendor-neutral approach.</li>
<li>Lessons from cloud deployments - Open cloud deployments are real and growing. We’ll discuss and illustrate through case studies the best approaches to deploying and maximising an open cloud.</li>
<li>Open-source cloud technologies - With Ubuntu including technologies such as OpenStack, MAAS and Juju, we’ll examine how they come together to form an open cloud.</li>
</ul>
<p>For more information, visit: <a href="http://uds.ubuntu.com/cloud-summit/">http://uds.ubuntu.com/cloud-summit/</a></p>
<p>The cost of a ticket for attending this event is $100 which includes lunch and refreshments.</p>
]]></content:encoded>
			<wfw:commentRss>http://cloud.ubuntu.com/2012/04/announcing-the-ubuntu-cloud-summit-8-may-oakland-california/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>juju Charm Contest winners!</title>
		<link>http://cloud.ubuntu.com/2012/04/juju-charm-contest-winners/</link>
		<comments>http://cloud.ubuntu.com/2012/04/juju-charm-contest-winners/#comments</comments>
		<pubDate>Tue, 10 Apr 2012 17:00:04 +0000</pubDate>
		<dc:creator>jorge</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[cloud]]></category>
		<category><![CDATA[featured]]></category>
		<category><![CDATA[planet]]></category>

		<guid isPermaLink="false">http://cloud.ubuntu.com/?p=34088</guid>
		<description><![CDATA[The community submitted over 10 charms as part of the juju charm contest. The judges have deliberated and have picked the following winners: The Grand Prize ($300 Amazon Gift Card) goes to Jimmi Andersen for his charm that deploys Appflower, a Rapid Application Development (RAD) tool for building web applications. You can check out the [...]]]></description>
			<content:encoded><![CDATA[<p>The community submitted over 10 charms as part of the <a href="https://juju.ubuntu.com/CharmContest">juju charm contest</a>. The judges have deliberated and have picked the following winners:</p>
<p>The Grand Prize ($300 Amazon Gift Card) goes to Jimmi Andersen for his charm that deploys <a href="http://www.appflower.com/cms/home">Appflower</a>, a Rapid Application Development (RAD) tool for building web applications. You can check <a href="http://jujucharms.com/charms/oneiric/appflower">out the charm</a> in the store for deployment instructions. The judges were impressed by how complete the charm is and how it brings software to Ubuntu that was previously only available by installing it by hand.</p>
<p>The 2 runners up (in no particular order) are Kees Cook for <a href="http://jujucharms.com/charms/oneiric/sbuild">sbuild</a>, and Ben Kerensa for <a href="http://jujucharms.com/charms/oneiric/subway">Subway</a>. sbuild provides a build environment for developers to test packages against and has been used for portable &#8220;hackathons&#8221; where having the packages build on the cloud is quicker and more convenient than building on your local machines. The Subway charm deploys the <a href="https://github.com/thedjpetersen/subway">Subway IRC client</a>, a sexy web based IRC client that uses Node.js and MongoDB. Thanks Ben and Kees, you&#8217;ll each receive a $100 Amazon gift card.</p>
<p>The <a href="http://jujucharms.com/charms">charm store</a> continues to grow as we now have over 73 total charms. The following people contributed charms to the contest and will each receive a Juju tshirt and Ubuntu travel mug: Patrick Hetu (znc and OpenERP), Atul Jha (OwnCloud), Nathan Osman (StackMobile), shazzner (Gitolite), and Brandon Holtsclaw (Drupal). Honorable mention goes to Ryan Kather, who attempted Moodle but was not able to complete it in time. Maybe next time! We&#8217;ll go deeper into these charms and show off their examples throughout the coming weeks.</p>
<p>Not finding what you need in the Charm Store? Well you can always contribute your own charms, here&#8217;s how you can <a href="https://juju.ubuntu.com/Charms">get started</a>.</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://cloud.ubuntu.com/2012/04/juju-charm-contest-winners/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Uploading Known ssh Host Key in EC2 user-data Script</title>
		<link>http://feeds.alestic.com/~r/alestic-ubuntucloud/~3/SsDZzsdpS7M/ec2-ssh-host-key</link>
		<comments>http://feeds.alestic.com/~r/alestic-ubuntucloud/~3/SsDZzsdpS7M/ec2-ssh-host-key#comments</comments>
		<pubDate>Mon, 09 Apr 2012 14:00:00 +0000</pubDate>
		<dc:creator>Eric Hammond</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[ec2]]></category>
		<category><![CDATA[featured]]></category>
		<category><![CDATA[keys]]></category>
		<category><![CDATA[PlanetUbuntu]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[ssh]]></category>
		<category><![CDATA[ubuntu]]></category>
		<category><![CDATA[ubuntucloud]]></category>
		<category><![CDATA[userdata]]></category>
		<category><![CDATA[userdatascripts]]></category>

		<guid isPermaLink="false">http://cloud.ubuntu.com/?guid=6c835720866d0b191f69244129820183</guid>
		<description><![CDATA[The ssh protocol uses two different keys to keep you secure: The user ssh key is the one we normally think of. This authenticates us to the remote host, proving that we are who we say we are and allowing...]]></description>
			<content:encoded><![CDATA[The ssh protocol uses two different keys to keep you secure:
<ol>
	<li>The <strong>user ssh key</strong> is the one we normally think of. This
authenticates us to the remote host, proving that we are who we say we
are and allowing us to log in.</li>
	<li>The <strong>ssh host key</strong> gets less attention, but is also important. This
authenticates the remote host to our local computer and proves that the ssh session is
encrypted so that nobody can be listening in.</li>
</ol>
Every time you see a prompt like the following, ssh is checking the
host key and asking you to make sure that your session is going to
be encrypted securely.
<pre><code>The authenticity of host 'ec2-...' can't be established. ECDSA key fingerprint is ca:79:72:ea:23:94:5e:f5:f0:b8:c0:5a:17:8c:6f:a8. Are you sure you want to continue connecting (yes/no)? </code></pre>
If you answer “yes” without verifying that the remote ssh host
key fingerprint is the same, then you are basically saying:
<blockquote><em>I don’t need this ssh session encrypted. It’s fine for any
man-in-the-middle to intercept the communication.</em></blockquote>
Ouch! (But <a href="http://alestic.com/2009/08/ec2-poll-fingerprint">a lot of people do this</a>.)

Note: If you have a line like the following in your ssh config file,
then you are automatically answering “yes” to this prompt for every
ssh connection.
<pre><code># DON'T DO THIS! StrictHostKeyChecking false </code></pre>
<h2>Care about security</h2>
Since you <em>do</em> care about security and privacy, you want to verify
that you are talking to the right server using encryption and that no
man-in-the-middle can intercept your session.

There are a couple approaches you can take to check the fingerprint
for a new Amazon EC2 instance. The first is to wait for the console
output to be available from the instance, retrieve it, and verify that
the ssh host key fingerprint in the console output is the same as the
one which is being presented to you in the prompt.

Scott Moser has written a blog post describing how to <a href="http://ubuntu-smoser.blogspot.com/2010/07/verify-ssh-keys-on-ec2-instances.html">verify ssh keys
on EC2 instances</a>. It’s worth reading so that you understand
the principles and the official way to do this.

The rest of this article is going to present a different approach that
lets you in to your new instance quickly and securely.
<h2>Passing ssh host key to new EC2 instance</h2>
Instead of letting the new EC2 instance generate its own ssh host key
and waiting for it to communicate the fingerprint through the EC2
console output, we can generate the new ssh host key on our local
system and pass it to the new instance.

Using this approach, we already know the public side of the ssh key so
we don’t have to wait for it to become available through the console
(which can take minutes).

Generate a new ssh host key for the new EC2 instance.
<pre><code>tmpdir=$(mktemp -d /tmp/ssh-host-key.XXXXXX) keyfile=$tmpdir/ssh_host_ecdsa_key ssh-keygen -q -t ecdsa -N "" -C "" -f $keyfile </code></pre>
Create the user-data script that will set the ssh host key.
<pre><code>userdatafile=$tmpdir/set-ssh-host-key.user-data cat &lt;&lt;EOF &gt;$userdatafile #!/bin/bash -xeu cat &lt;&lt;EOKEY &gt;/etc/ssh/ssh_host_ecdsa_key $(cat $keyfile) EOKEY cat &lt;&lt;EOKEY &gt;/etc/ssh/ssh_host_ecdsa_key.pub $(cat $keyfile.pub) EOKEY EOF </code></pre>
Run an EC2 instance, say Ubuntu 11.10 Oneiric, passing in the
user-data script. Make a note of the new instance id.
<pre><code>ec2-run-instances --key $USER --user-data-file $userdatafile ami-4dad7424 instanceid=i-... </code></pre>
Wait for the instance to get a public DNS name and make a note of it.
<pre><code>ec2-describe-instances $instanceid host=ec2-...compute-1.amazonaws.com </code></pre>
Add new public ssh host key to our local ssh known_hosts after
removing any leftover key (e.g., from previous EC2 instance at same IP
address).
<pre><code>knownhosts=$HOME/.ssh/known_hosts ssh-keygen -R $host -f $knownhosts ssh-keygen -R $(dig +short $host) -f $knownhosts ( echo -n "$host "; cat $keyfile.pub echo -n "$(dig +short $host) "; cat $keyfile.pub ) &gt;&gt; $knownhosts </code></pre>
When the instance starts running and the user-data script has
executed, you can ssh in to the server without being prompted to
verify the fingerprint
<pre><code>ssh ubuntu@$host </code></pre>
Don’t forget to clean up and to terminate your test instance.
<pre><code>rm -rf $tmpdir ec2-terminate-instances $instanceid </code></pre>
<h2>Caveat</h2>
There is one big drawback in the above sample implementation of this
approach. We have placed secret information (the private ssh host
key) into the EC2 user-data, which I generally recommend against.

Any user who can log in to the instance or who can cause the instance
to request a URL and get the output, can retrieve the user-data. You
might think this is unlikely to happen, but I’d rather avoid or
minimize unnecessary risk.

In a production implementation of this approach, I would take steps
like the following:
<ol>
	<li>Upload the new ssh host key to S3 in a private object.</li>
	<li>Generate an authenticated URL to the S3 object and have that URL
expire in, say, 10 minutes.</li>
	<li>In the user-data script, download the ssh host key with the
authenticated, expiring S3 URL.</li>
</ol>
Now, there is a short window of exposure and you don’t have to worry
about protecting the user-data after the URL has expired.

Original article:
<a href="http://alestic.com/2012/04/ec2-ssh-host-key">http://alestic.com/2012/04/ec2-ssh-host-key</a>

<img src="http://feeds.feedburner.com/~r/alestic-ubuntucloud/~4/SsDZzsdpS7M" alt="" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://cloud.ubuntu.com/2012/04/uploading-known-ssh-host-key-in-ec2-user-data-script/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Brightbox 12.04 daily images now available, discounts for testers and Ubuntu members</title>
		<link>http://cloud.ubuntu.com/2012/04/brightbox-12-04-daily-images-now-available-discounts-for-testers-and-ubuntu-members/</link>
		<comments>http://cloud.ubuntu.com/2012/04/brightbox-12-04-daily-images-now-available-discounts-for-testers-and-ubuntu-members/#comments</comments>
		<pubDate>Thu, 05 Apr 2012 15:47:19 +0000</pubDate>
		<dc:creator>jorge</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[cloud]]></category>
		<category><![CDATA[featured]]></category>
		<category><![CDATA[planet]]></category>

		<guid isPermaLink="false">http://cloud.ubuntu.com/?p=33959</guid>
		<description><![CDATA[UK cloud provider Brightbox would like to announce that they now have daily images of Ubuntu 12.04 available for testing. Brightbox has an EC2 compatible metadata service that works with Ubuntu&#8217;s cloud-init, you can find more about that in the documentation. As a thank you to the Ubuntu community Brightbox is running a special through [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://brightbox.com/"><img class="alignnone size-medium wp-image-33960" title="bb_logo_small" src="http://cloud.ubuntu.com/wp-content/uploads/2012/04/bb_logo_small-300x141.png" alt="" width="300" height="141" /></a></p>
<p>UK cloud provider Brightbox would like to announce that they now have <a href="http://brightbox.com/blog/2012/03/20/ubuntu-precise-daily-images/">daily images</a> of Ubuntu 12.04 available for testing. Brightbox has an EC2 compatible metadata service that works with Ubuntu&#8217;s cloud-init, you can find more about that in <a href="http://docs.brightbox.com/guides/cli/user-data/">the documentation</a>.</p>
<p>As a thank you to the Ubuntu community Brightbox is running a special through to September. A 10% discount to casual testers, and a 50% discount to anyone registering using their @<a href="http://ubuntu.com/" target="_blank">ubuntu.com</a> address.</p>
<p>Testers can sign up at <a href="http://brightbox.com/" target="_blank">http://brightbox.com/</a>, and to claim the discount you just need to email <a href="mailto:support@brightbox.com">support@brightbox.com</a> with your account id and let them know how you&#8217;re testing out Ubuntu.</p>
<p>Here&#8217;s their <a href="http://docs.brightbox.com/guides/cli/getting-started/">Getting Started guide</a>. Happy testing!</p>
]]></content:encoded>
			<wfw:commentRss>http://cloud.ubuntu.com/2012/04/brightbox-12-04-daily-images-now-available-discounts-for-testers-and-ubuntu-members/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>

