Differences between revisions 17 and 18
Revision 17 as of 2013-01-09 04:51:52
Size: 6944
Editor: GeoffSimmons
Comment: State page language, fix link to anchor, limit automatic linking.
Revision 18 as of 2013-02-26 15:18:21
Size: 10984
Comment: Add information about 6.0.7 AMIs
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:
= Squeeze on AWS =

List of point release images published to the AWS [[../Marketplace|Marketplace]]:
= Debian Squeeze (6.0.x) on AWS =

List of point release AMIs published to the AWS [[../Marketplace|Marketplace]]:

 * [[#6.0.7|6.0.7]]
Line 8: Line 9:
You may wish to use the [[#CFTemplate|CloudFormation template]] and launch your instance with some smart [[#UserDataExamples|UserData scripts]].

----
You may wish to use the [[#CFTemplate|CloudFormation template]] and launch your instance with some smart [[#UserDataExamples|UserData scripts]]. For some releases you are free to choose the AWS Marketplace AMI, or the AMI that exists in the Debian AMI Account (account number 379101102735).

----

== 6.0.7 ==
<<Anchor(6.0.7)>>


=== Debian Developer-created master images ===
<<Anchor(6.0.7-DDCreated)>>
Images were created on 24/Feb/2013 by James Bromberger using [[https://github.com/andsens/ec2debian-build-ami/tree/offical-6.0.7-2013/02/24|ec2debian-build-ami]] tagged accordingly. The original (non-AWS-Marketplace) AMIs were generated in account 379101102735, and the images were identifiable in the AWS US-East-1 Region as:
 * ami-2ae17343: 379101102735/debian-squeeze-i386-20130224
 * ami-7ce17315: 379101102735/debian-squeeze-amd64-20130224

{{{#!wiki note
'''SSH username'''

In line with the security of most Linux distributions on ''Amazon Web Services'', remote ''root'' SSH is disabled (as is password authentication). You will need to connect to instances from this AMI as the user '''admin''', and then '''sudo -i''' to gain root access.
}}}

These images were generated in each Region (except !GovCloud) with the following script:
{{{#!highlight bash
#!/bin/sh
apt-get update; apt-get install -y git; cd ~root; git clone https://github.com/andsens/ec2debian-build-ami.git; cd ~root/ec2debian-build-ami; export PATH=$PATH:/usr/local/bin/; export EC2_ACCESS_KEY='XXXXXXXXXXX'; export EC2_SECRET_KEY='XXXXXXXXXXX'; ./ec2debian-build-ami --volume-size 8 --plugin plugins/admin-user --description 'Debian 6.0.7 (Squeeze)' --plugin plugins/publish-ami --plugin plugins/publish-snapshot --codename squeeze; ./ec2debian-build-ami --volume-size 8 --plugin plugins/admin-user --description 'Debian 6.0.7 (Sequeze)' --arch i386 --plugin plugins/publish-ami --plugin plugins/publish-snapshot --codename squeeze; shutdown -h now
}}}

The full list of AMIs worldwide in the Debian AMI account are:

==== N Virginia/US-East-1: ====
 * ami-7ce17315: 379101102735/debian-squeeze-amd64-20130224
 * ami-2ae17343: 379101102735/debian-squeeze-i386-20130224

==== Oregon/US-West-2: ====
 * ami-cecf5afe: 379101102735/debian-squeeze-i386-20130224
 * ami-decf5aee: 379101102735/debian-squeeze-amd64-20130224

==== N California/US-West-1: ====
 * ami-a41f3de1: 379101102735/debian-squeeze-amd64-20130224
 * ami-b81f3dfd: 379101102735/debian-squeeze-i386-20130224

==== Ireland/EU-West-1: ====
 * ami-582e262c: 379101102735/debian-squeeze-i386-20130224
 * ami-722e2606: 379101102735/debian-squeeze-amd64-20130224

==== Singapore/AP-Southeast-1: ====
 * ami-ec9ed3be: 379101102735/debian-squeeze-i386-20130224
 * ami-f89ed3aa: 379101102735/debian-squeeze-amd64-20130224

==== Tokyo/AP-Northeast-1: ====
 * ami-13e76112: 379101102735/debian-squeeze-amd64-20130224
 * ami-1fe7611e: 379101102735/debian-squeeze-i386-20130224

==== Sydney/AP-Southeast-2: ====
 * ami-8cfd6cb6: 379101102735/debian-squeeze-i386-20130224
 * ami-94fd6cae: 379101102735/debian-squeeze-amd64-20130224

==== Sao Paulo/SA-East-1: ====
 * ami-d1fe25cc: 379101102735/debian-squeeze-i386-20130224
 * ami-d9fe25c4: 379101102735/debian-squeeze-amd64-20130224

All AMIs and their corresponding EBS snapshots are marked as public so can be inspected by any other AWS user.

=== AWS Marketplace Image Distribution ===
<<Anchor(6.0.7-Marketplace)>>
These images ([[#6.0.7-DDCreated|above]]) are pending publication by the AWS Marketplace team at this stage (26/Feb/2013).

=== Upgrading from previous 6.0.x releases ===
As is standard with Debian, a simple '''apt-get update && apt-get upgrade''' should bring all packages up to date. There is no need to reinstall, but any CloudFormation templates and AutoScale Launch Configurations should be tested with and then updated to use the current AMI. It is recommended not to use older point releases.


----
Line 24: Line 92:
In line with the security of most Linux distributions on ''Amazon Web Services'', remote ''root'' SSH is disabled (as is password authentication). You will need to connect to instancs from this AMI as the user '''admin''', and then '''sudo -i''' to gain root access.
}}}

These two AMIs are made of corresponding AWS EBS Snapshots. These snapshots have been made available for you to download, should you wish to (you do not need to do this to use the AMI on AWS):

|| '''Architecture''' || '''AMI ID''' || '''Snap ID''' || '''URL (gunzip this object after download)''' || '''Uncompressed md5sum''' ||
|| i386 || ami-1977f070 || snap-e526e2ad || pending || pending ||
|| amd64 || ami-8568efec || snap-98fb3fd0 || pending || pending ||
In line with the security of most Linux distributions on ''Amazon Web Services'', remote ''root'' SSH is disabled (as is password authentication). You will need to connect to instances from this AMI as the user '''admin''', and then '''sudo -i''' to gain root access.
}}}
Line 34: Line 97:
{{{ {{{#!highlight bash
Line 88: Line 151:
            "Debian606" : {             "Debian606-marketplace" : {
Line 99: Line 162:
     "Debian607-marketplace" : {
                "us-east-1" : { "32" : "", "64" : ""},
                "us-west-1" : { "32" : "", "64" : ""},
                "us-west-2" : { "32" : "", "64" : ""},
                "us-gov-west-1" : { "32" : "", "64" : ""},
                "eu-west-1" : { "32" : "", "64" : ""},
                "ap-southeast-1" : { "32" : "", "64" : ""},
                "ap-southeast-2" : { "32" : "", "64" : ""},
                "ap-northeast-1" : { "32" : "", "64" : ""},
                "sa-east-1" : { "32" : "", "64" : ""},
     },
Line 100: Line 174:
  "stable" : { "squeeze" : "Debian606" }   "stable" : { "squeeze" : "Debian606-marketplace" }
Line 139: Line 213:
{{{ {{{#!highlight bash

Debian Squeeze (6.0.x) on AWS

List of point release AMIs published to the AWS Marketplace:

You may wish to use the CloudFormation template and launch your instance with some smart UserData scripts. For some releases you are free to choose the AWS Marketplace AMI, or the AMI that exists in the Debian AMI Account (account number 379101102735).


6.0.7

Debian Developer-created master images

Images were created on 24/Feb/2013 by James Bromberger using ec2debian-build-ami tagged accordingly. The original (non-AWS-Marketplace) AMIs were generated in account 379101102735, and the images were identifiable in the AWS US-East-1 Region as:

  • ami-2ae17343: 379101102735/debian-squeeze-i386-20130224
  • ami-7ce17315: 379101102735/debian-squeeze-amd64-20130224

SSH username

In line with the security of most Linux distributions on Amazon Web Services, remote root SSH is disabled (as is password authentication). You will need to connect to instances from this AMI as the user admin, and then sudo -i to gain root access.

These images were generated in each Region (except GovCloud) with the following script:

   1 #!/bin/sh
   2 apt-get update; apt-get install -y git; cd ~root; git clone https://github.com/andsens/ec2debian-build-ami.git; cd ~root/ec2debian-build-ami; export PATH=$PATH:/usr/local/bin/;  export EC2_ACCESS_KEY='XXXXXXXXXXX'; export EC2_SECRET_KEY='XXXXXXXXXXX'; ./ec2debian-build-ami --volume-size 8 --plugin plugins/admin-user --description 'Debian 6.0.7 (Squeeze)' --plugin plugins/publish-ami --plugin plugins/publish-snapshot --codename squeeze; ./ec2debian-build-ami --volume-size 8 --plugin plugins/admin-user --description 'Debian 6.0.7 (Sequeze)' --arch i386 --plugin plugins/publish-ami --plugin plugins/publish-snapshot --codename squeeze; shutdown -h now

The full list of AMIs worldwide in the Debian AMI account are:

N Virginia/US-East-1:

  • ami-7ce17315: 379101102735/debian-squeeze-amd64-20130224
  • ami-2ae17343: 379101102735/debian-squeeze-i386-20130224

Oregon/US-West-2:

  • ami-cecf5afe: 379101102735/debian-squeeze-i386-20130224
  • ami-decf5aee: 379101102735/debian-squeeze-amd64-20130224

N California/US-West-1:

  • ami-a41f3de1: 379101102735/debian-squeeze-amd64-20130224
  • ami-b81f3dfd: 379101102735/debian-squeeze-i386-20130224

Ireland/EU-West-1:

  • ami-582e262c: 379101102735/debian-squeeze-i386-20130224
  • ami-722e2606: 379101102735/debian-squeeze-amd64-20130224

Singapore/AP-Southeast-1:

  • ami-ec9ed3be: 379101102735/debian-squeeze-i386-20130224
  • ami-f89ed3aa: 379101102735/debian-squeeze-amd64-20130224

Tokyo/AP-Northeast-1:

  • ami-13e76112: 379101102735/debian-squeeze-amd64-20130224
  • ami-1fe7611e: 379101102735/debian-squeeze-i386-20130224

Sydney/AP-Southeast-2:

  • ami-8cfd6cb6: 379101102735/debian-squeeze-i386-20130224
  • ami-94fd6cae: 379101102735/debian-squeeze-amd64-20130224

Sao Paulo/SA-East-1:

  • ami-d1fe25cc: 379101102735/debian-squeeze-i386-20130224
  • ami-d9fe25c4: 379101102735/debian-squeeze-amd64-20130224

All AMIs and their corresponding EBS snapshots are marked as public so can be inspected by any other AWS user.

AWS Marketplace Image Distribution

These images (above) are pending publication by the AWS Marketplace team at this stage (26/Feb/2013).

Upgrading from previous 6.0.x releases

As is standard with Debian, a simple apt-get update && apt-get upgrade should bring all packages up to date. There is no need to reinstall, but any ?CloudFormation templates and ?AutoScale Launch Configurations should be tested with and then updated to use the current AMI. It is recommended not to use older point releases.


6.0.6

Debian Developer-created master images

This image was created on 15/Nov/2012 by James Bromberger using the ec2debian-build-ami from https://github.com/andsens/ec2debian-build-ami by Anders Ingemann. The original images were generated in account 379101102735, and the images were identifiable in the AWS US-East-1 Region as:

  • ami-1977f070: 379101102735/debian-squeeze-i386-20121119
  • ami-8568efec: 379101102735/debian-squeeze-amd64-20121119

SSH username

In line with the security of most Linux distributions on Amazon Web Services, remote root SSH is disabled (as is password authentication). You will need to connect to instances from this AMI as the user admin, and then sudo -i to gain root access.

These images were generated with the following script (supplied as a UserData scription to a Debian AMI with shutdown behaviour set to terminate):

   1 #!/bin/sh
   2 apt-get update; apt-get install -y git; cd ~root; git clone https://github.com/andsens/ec2debian-build-ami.git; cd ~root/ec2debian-build-ami; export EC2_URL=https://ec2.us-east-1.amazonaws.com/; export EC2_ACCESS_KEY='''XXXX'''; export EC2_SECRET_KEY='''XXXX'''; ./ec2debian-build-ami --volume-size 8 --filesystem ext4 --plugin plugins/admin-user --description 'Debian 6.0.6 (Squeeze)'; ./ec2debian-build-ami --volume-size 8 --filesystem ext4 --plugin plugins/admin-user --description 'Debian 6.0.6 (Squeeze)' --arch i386; shutdown -h now

AWS Marketplace Image Distribution

These images (above) were copied to the AWS Marketplace Account and then replicated to all AWS Marketplace-supported Regions, and became identifiable by the following list of AMI IDs:

Region

32-bit PVM

64-bit PVM

US-East-1

ami-a121a6c8

ami-4d20a724

US-West-1

ami-e4da52d4

ami-ecda52dc

US-West-2

ami-2c735269

ami-36735273

US-Gov-West-1

EU-West-1

ami-75cdcf01

ami-7fcdcf0b

AP-Northeast-1

ami-a650e9a7

ami-be50e9bf

AP-Southeast-1

ami-947d3ec6

ami-867d3ed4

AP-Southeast-2

SA-East-1

ami-0689511b

ami-0289511f

The image performs the following tasks:

  • UserData that is a shell script is executed (you may wish to apply pending updates and install other software, etc)

  • The root ext4 filesystem is resized on boot (you can grow larger than the default on instance launch)
  • The root account is disabled; please SSH to the instance as the user 'admin'.

The image by default makes no contact to any external servers (no updates applied, no outbound requests, no data leakage).

It is planned to provide a machine-readable version of the above list of images. For the sake of the brainstorm, a JSON version is temporarly placed at Cloud/AmazonEC2Image/Squeeze/JSON. However, the structure is very likely to change, see 694035 for details. Here is a naive example on how to query the list. euca-describe-images $(curl --silent http://wiki.debian.org/Cloud/AmazonEC2Image/Squeeze/JSON?action=raw | jsonpipe | awk '/Debian606.ap-northeast-1.64/ {print $2}' | sed 's/"//g')


CloudFormation Template

CloudFormation is a templating system for defining AWS resources - see http://aws.amazon.com/cloudformation/

{
        "Parameters" : {
                "KeyName" : {
                        "Description" : "SSH Key Name",
                        "Type" : "String",
                        "Default" : "My-Key"
                },
                "MyInstanceSize": {
                        "Description": "Instance size",
                        "Type": "String",
                        "Default" : "t1.micro"
                },
                "MyInstanceName": {
                        "Description": "Instance name",
                        "Type": "String"
                }
        },
        "Mappings" : {
            "Debian606-marketplace" : { 
                "us-east-1" :      { "32" : "ami-a121a6c8", "64" : "ami-4d20a724"},
                "us-west-1" :      { "32" : "ami-e4da52d4", "64" : "ami-ecda52dc"},
                "us-west-2" :      { "32" : "ami-2c735269", "64" : "ami-36735273"},
                "us-gov-west-1" :  { "32" : "", "64" : ""},
                "eu-west-1" :      { "32" : "ami-75cdcf01", "64" : "ami-7fcdcf0b"},
                "ap-southeast-1" : { "32" : "ami-947d3ec6", "64" : "ami-867d3ed4"},
                "ap-southeast-2" : { "32" : "", "64" : ""},
                "ap-northeast-1" : { "32" : "ami-a650e9a7", "64" : "ami-be50e9bf"},
                "sa-east-1" :      { "32" : "ami-0689511b", "64" : "ami-0289511f"},
            },
            "Debian607-marketplace" : {
                "us-east-1" :      { "32" : "", "64" : ""},
                "us-west-1" :      { "32" : "", "64" : ""},
                "us-west-2" :      { "32" : "", "64" : ""},
                "us-gov-west-1" :  { "32" : "", "64" : ""},
                "eu-west-1" :      { "32" : "", "64" : ""},
                "ap-southeast-1" : { "32" : "", "64" : ""},
                "ap-southeast-2" : { "32" : "", "64" : ""},
                "ap-northeast-1" : { "32" : "", "64" : ""},
                "sa-east-1" :      { "32" : "", "64" : ""},
            },
            "release" : {
                "stable" : { "squeeze" : "Debian606-marketplace" }
            }
        },
        "Resources" : {
                "MyInstance" : {
                        "Type" : "AWS::EC2::Instance",
                        "Properties" : {
                                "SecurityGroups" : [ { "Ref" : "MySecurityGroup" } ],
                                "KeyName" : { "Ref": "KeyName" },
                                "Tags" : [{"Key": "Name", "Value": {"Ref" : "MyInstanceName"} } ],
                                "ImageId" : { "Fn::FindInMap" : [ "Debian606",  { "Ref" : "AWS::Region" }, "64"  ]},
                                "InstanceType" : { "Ref" : "MyInstanceSize" },
                                "UserData" : { "Fn::Base64" : "" }
                        }
                },
                "MySecurityGroup" : {
                        "Type" : "AWS::EC2::SecurityGroup",
                        "Properties" : {
                                "GroupDescription" : "Permit inbound SSH",
                                "SecurityGroupIngress" : [ 
                                    {
                                        "IpProtocol" : "tcp",
                                        "FromPort" : "22",
                                        "ToPort" : "22",
                                        "CidrIp" : "0.0.0.0/0"
                                    }
                                ]
                        }
                }
        }
}

Suggested UserData scripts

The image by default takes no actions upon boot, and does not auto-update. However, as the Debian image does honour executing UserData meta-data that looks like a script (started with #!/bin/sh), you may optionally chose to take some action. This action can be passed as a script in the AWS Console UserData input, or in the above CloudFormation template to an instance (see the UserData section in the example above).

You can chose to enable auto update with the following UserData scripts:

   1 #!/bin/sh
   2 apt-get update && apt-get upgrade -y && apt-get install -y unattended-upgrades


See also Cloud and Teams/Cloud.