Debian Squeeze (6.0.x) on AWS

List of point release AMIs published to the AWS Marketplace:

You may wish to use the CloudFormation template and launch your instance with some smart UserData scripts. For some releases you are free to choose the AWS Marketplace AMI, or the AMI that exists in the Debian AMI Account (account number 379101102735).

6.0.7

Debian Developer-created master images

Images were created on 24/Feb/2013 by James Bromberger using ec2debian-build-ami tagged accordingly. The original (non-AWS-Marketplace) AMIs were generated in account 379101102735, and the images were identifiable in the AWS US-East-1 Region as:

SSH username

In line with the security of most Linux distributions on Amazon Web Services, remote root SSH is disabled (as is password authentication). You will need to connect to instances from this AMI as the user admin, and then sudo -i to gain root access.

These images were generated in each Region (except GovCloud) with the following script: 

   1 #!/bin/sh
   2 apt-get update; apt-get install -y git; cd ~root; git clone https://github.com/andsens/ec2debian-build-ami.git; cd ~root/ec2debian-build-ami; export PATH=$PATH:/usr/local/bin/;  export EC2_ACCESS_KEY='XXXXXXXXXXX'; export EC2_SECRET_KEY='XXXXXXXXXXX'; ./ec2debian-build-ami --volume-size 8 --plugin plugins/admin-user --description 'Debian 6.0.7 (Squeeze)' --plugin plugins/publish-ami --plugin plugins/publish-snapshot --codename squeeze; ./ec2debian-build-ami --volume-size 8 --plugin plugins/admin-user --description 'Debian 6.0.7 (Sequeze)' --arch i386 --plugin plugins/publish-ami --plugin plugins/publish-snapshot --codename squeeze; shutdown -h now

The full list of AMIs worldwide in the Debian AMI account are:

N Virginia/US-East-1:

Oregon/US-West-2:

N California/US-West-1:

Ireland/EU-West-1:

Singapore/AP-Southeast-1:

Tokyo/AP-Northeast-1:

Sydney/AP-Southeast-2:

Sao Paulo/SA-East-1:

All AMIs and their corresponding EBS snapshots are marked as public so can be inspected by any other AWS user.

AWS Marketplace Image Distribution

These images (above) were copied to the AWS Marketplace Account and then replicated to all AWS Marketplace-supported Regions, and became identifiable by the following list of AMI IDs:

Region

32-bit PVM

64-bit PVM

US-East-1

ami-2c28ba45

ami-3428ba5d

US-West-1

ami-3afddf7f

ami-c2fddf87

US-West-2

ami-f2ee7bc2

ami-f4ee7bc4

US-Gov-West-1

EU-West-1

ami-caeee6be

ami-b2eee6c6

AP-Northeast-1

ami-3fb3353e

ami-47b33546

AP-Southeast-1

ami-9aaae7c8

ami-9eaae7cc

AP-Southeast-2

ami-c69302fc

ami-3c920306

SA-East-1

ami-a5ef34b8

ami-a3ef34be

Upgrading from previous 6.0.x releases

As is standard with Debian, a simple apt-get update && apt-get upgrade should bring all packages up to date. There is no need to reinstall, but any ?CloudFormation templates and ?AutoScale Launch Configurations should be tested with and then updated to use the current AMI. It is recommended not to use older point releases.

6.0.6

Debian Developer-created master images

This image was created on 15/Nov/2012 by James Bromberger using the ec2debian-build-ami from https://github.com/andsens/ec2debian-build-ami by Anders Ingemann. The original images were generated in account 379101102735, and the images were identifiable in the AWS US-East-1 Region as:

SSH username

In line with the security of most Linux distributions on Amazon Web Services, remote root SSH is disabled (as is password authentication). You will need to connect to instances from this AMI as the user admin, and then sudo -i to gain root access.

These images were generated with the following script (supplied as a UserData scription to a Debian AMI with shutdown behaviour set to terminate): 

   1 #!/bin/sh
   2 apt-get update; apt-get install -y git; cd ~root; git clone https://github.com/andsens/ec2debian-build-ami.git; cd ~root/ec2debian-build-ami; export EC2_URL=https://ec2.us-east-1.amazonaws.com/; export EC2_ACCESS_KEY='''XXXX'''; export EC2_SECRET_KEY='''XXXX'''; ./ec2debian-build-ami --volume-size 8 --filesystem ext4 --plugin plugins/admin-user --description 'Debian 6.0.6 (Squeeze)'; ./ec2debian-build-ami --volume-size 8 --filesystem ext4 --plugin plugins/admin-user --description 'Debian 6.0.6 (Squeeze)' --arch i386; shutdown -h now

AWS Marketplace Image Distribution

These images (above) were copied to the AWS Marketplace Account and then replicated to all AWS Marketplace-supported Regions, and became identifiable by the following list of AMI IDs:

Region

32-bit PVM

64-bit PVM

US-East-1

ami-a121a6c8

ami-4d20a724

US-West-1

ami-e4da52d4

ami-ecda52dc

US-West-2

ami-2c735269

ami-36735273

US-Gov-West-1

EU-West-1

ami-75cdcf01

ami-7fcdcf0b

AP-Northeast-1

ami-a650e9a7

ami-be50e9bf

AP-Southeast-1

ami-947d3ec6

ami-867d3ed4

AP-Southeast-2

SA-East-1

ami-0689511b

ami-0289511f

The image performs the following tasks:

The image by default makes no contact to any external servers (no updates applied, no outbound requests, no data leakage).

It is planned to provide a machine-readable version of the above list of images. For the sake of the brainstorm, a JSON version is temporarly placed at Cloud/AmazonEC2Image/Squeeze/JSON. However, the structure is very likely to change, see 694035 for details. Here is a naive example on how to query the list. euca-describe-images $(curl --silent http://wiki.debian.org/Cloud/AmazonEC2Image/Squeeze/JSON?action=raw | jsonpipe | awk '/Debian606.ap-northeast-1.64/ {print $2}' | sed 's/"//g')

CloudFormation Template

CloudFormation is a templating system for defining AWS resources - see http://aws.amazon.com/cloudformation/ 

{
        "Parameters" : {
                "KeyName" : {
                        "Description" : "SSH Key Name",
                        "Type" : "String",
                        "Default" : "My-Key"
                },
                "MyInstanceSize": {
                        "Description": "Instance size",
                        "Type": "String",
                        "Default" : "t1.micro"
                },
                "MyInstanceName": {
                        "Description": "Instance name",
                        "Type": "String"
                }
        },
        "Mappings" : {
            "Debian606-marketplace" : { 
                "us-east-1" :      { "32" : "ami-a121a6c8", "64" : "ami-4d20a724"},
                "us-west-1" :      { "32" : "ami-e4da52d4", "64" : "ami-ecda52dc"},
                "us-west-2" :      { "32" : "ami-2c735269", "64" : "ami-36735273"},
                "us-gov-west-1" :  { "32" : "", "64" : ""},
                "eu-west-1" :      { "32" : "ami-75cdcf01", "64" : "ami-7fcdcf0b"},
                "ap-southeast-1" : { "32" : "ami-947d3ec6", "64" : "ami-867d3ed4"},
                "ap-southeast-2" : { "32" : "", "64" : ""},
                "ap-northeast-1" : { "32" : "ami-a650e9a7", "64" : "ami-be50e9bf"},
                "sa-east-1" :      { "32" : "ami-0689511b", "64" : "ami-0289511f"},
            },
            "Debian607-marketplace" : {
                "us-east-1" :      { "32" : "ami-2c28ba45", "64" : "ami-3428ba5d"},
                "us-west-1" :      { "32" : "ami-3afddf7f", "64" : "ami-c2fddf87"},
                "us-west-2" :      { "32" : "ami-f2ee7bc2", "64" : "ami-f4ee7bc4"},
                "us-gov-west-1" :  { "32" : "", "64" : ""},
                "eu-west-1" :      { "32" : "ami-caeee6be", "64" : "ami-b2eee6c6"},
                "ap-southeast-1" : { "32" : "ami-9aaae7c8", "64" : "ami-9eaae7cc"},
                "ap-southeast-2" : { "32" : "ami-c69302fc", "64" : "ami-3c920306"},
                "ap-northeast-1" : { "32" : "ami-3fb3353e", "64" : "ami-47b33546"},
                "sa-east-1" :      { "32" : "ami-a5ef34b8", "64" : "ami-a3ef34be"},
            },
            "release" : {
                "stable" : { "squeeze" : "Debian607-marketplace" }
            }
        },
        "Resources" : {
                "MyInstance" : {
                        "Type" : "AWS::EC2::Instance",
                        "Properties" : {
                                "SecurityGroups" : [ { "Ref" : "MySecurityGroup" } ],
                                "KeyName" : { "Ref": "KeyName" },
                                "Tags" : [{"Key": "Name", "Value": {"Ref" : "MyInstanceName"} } ],
                                "ImageId" : { "Fn::FindInMap" : [ "Debian606",  { "Ref" : "AWS::Region" }, "64"  ]},
                                "InstanceType" : { "Ref" : "MyInstanceSize" },
                                "UserData" : { "Fn::Base64" : "" }
                        }
                },
                "MySecurityGroup" : {
                        "Type" : "AWS::EC2::SecurityGroup",
                        "Properties" : {
                                "GroupDescription" : "Permit inbound SSH",
                                "SecurityGroupIngress" : [ 
                                    {
                                        "IpProtocol" : "tcp",
                                        "FromPort" : "22",
                                        "ToPort" : "22",
                                        "CidrIp" : "0.0.0.0/0"
                                    }
                                ]
                        }
                }
        }
}

Suggested UserData scripts

The image by default takes no actions upon boot, and does not auto-update. However, as the Debian image does honour executing UserData meta-data that looks like a script (started with #!/bin/sh), you may optionally chose to take some action. This action can be passed as a script in the AWS Console UserData input, or in the above CloudFormation template to an instance (see the UserData section in the example above).

You can chose to enable auto update with the following UserData scripts: 

   1 #!/bin/sh
   2 apt-get update && apt-get upgrade -y && apt-get install -y unattended-upgrades

See also Cloud and Teams/Cloud.