SpamapSflaccid: definitely00:20
SpamapSflaccid: but its not really any more secure than chroot in that regard00:20
SpamapSflaccid: the biggest thing is you have network isolation so you could, on the host, firewall them00:21
flaccidsounds good00:25
hallyn-afkyou can combine lxc with lsm for better results, but a lot of work needs to be done00:26
=== dendro-afk is now known as dendrobates
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
=== koolhead11|afk is now known as koolhead11
=== lool- is now known as lool
=== daker_ is now known as daker
=== daker_ is now known as daker
kim0koolhead11: hey o/12:24
=== koolhead11 is now known as koolhead11|afk
=== chuck_ is now known as zul
crazedwelcome to the party15:11
kim0welcome .. huh what party ;)15:31
raphinkhi there16:33
raphinkaliguori, you have a question about preseeds?16:36
aliguoriraphink, yeah, in #ubuntu-installer16:39
raphinkkirkland told me you were here16:39
aliguoriraphink, http://pastebin.ubuntu.com/586927/16:39
aliguorii'm happy to discuss anywhere :-)16:39
aliguorii'm trying to automate a guest install, so it's relevant here too :-)16:40
aliguoriraphink, i'm trying to build a preseed file dynamically using commands, such that i can avoid remastering an iso and avoid needing a specific network configuration16:42
raphinkhmmm, I'm not that much of a preseed expert ;-)16:44
raphinkkirkland didn't specify the technicity of the question :-)16:44
kirklandraphink: <kirkland> any preseed wizards around?16:45
kirklandaliguori: sorry16:45
raphinkright kirkland, you did say wizard ;-)16:45
raphinksorry I couldn't help you aliguori16:45
raphinkit's always worth a try ;-)16:45
kirklandaliguori: cjwatson will be able to help;  he's tied up getting beta1 out the door16:45
aliguorii tried to look through the source last night to figure it out myself... i quickly stopped that :-)16:45
aliguorithere's some serious vodoo in that stuff16:46
hallynkim0: zul: all right, whatever else works or doesn't work for me, I want to take kim0's patch to add netbase to the target debootstrap list i the natty lxc template.  I'll be asking to push a lxc package with that plus my other template fixes (bumping up the relase version by 2)16:51
hallynnext monday, that is16:51
hallynkim0: do you remember the bug id offhand?16:51
zulhallyn: cool16:51
kim0hallyn: bug 74016717:03
uvirtbotLaunchpad bug 740167 in debootstrap "LXC natty guest failing to configure properly" [High,Incomplete] https://launchpad.net/bugs/74016717:03
kim0hallyn: so it wasn't a debootstrap thing ? I was convinced it was :)17:04
hallynkim0: i think it is,17:04
hallynbut meanwhile while my containers build fine, i end up having to apt-get install netbase before i can do more packaging inside the container17:04
hallynso let's just work around the silly thing17:04
hallynkim0: can you mark bug 740167 as also affecting lxc?  :-)17:05
uvirtbotLaunchpad bug 740167 in debootstrap "LXC natty guest failing to configure properly" [High,Incomplete] https://launchpad.net/bugs/74016717:05
kim0yeah sure ..  debootstrap17:05
kim0I mean, I hope debootstrap guys will still properly fix it later17:05
* kim0 marks17:05
kim0hallyn: done17:07
hallynkim0: awesome, thanks17:07
kim0hallyn: btw doing apt-get -f install .. inside the container gets netbase17:08
kim0so apt knows it's a needed dep .. no idea why it's not installed first time though17:08
hallynkim0: yeah, actually -f install is what i did i guess17:08
hallynit's weird, no doubt17:09
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
=== daker is now known as daker_
obinokim0: sorry it took me so long to answer the forum post you mentioned19:34
obinojust got to it19:34
hallynSpamapS: all right i'm now stylin' with lvm-based lxc cloneing21:13
hallynthough it actually makes first bringup of the container a bit slower21:13
hallynguess i'll see how i like it21:13
MathuinI am using an official Ubuntu AMI and would like to access the key-value pairs called 'tags' which can be set when requesting an instance.  I don't see anything in cloud-info or anything else that might help.  Suggestions?21:53
MathuinTo be clear, I want to access those tags from _within_ the instance.21:54
semiosisMathuin: best way i've found to do that is to create an IAM user with just enough privs to call DescribeInstances, then install the API tools & that IAM user's key onto the instance21:58
semiosisMathuin: if there's a better way i'd sure like to know about it as well21:58
Mathuinsemiosis: oh man that sounds totally annoying.21:58
MathuinI was thinking there might be a web service call I can make after getting my instance-id from ec2metadata or something.21:59
semiosisyeah DescribeInstance is the EC2 API call, but you need an access key/secret key to do that, rather than using your master key I suggest creating a dedicated one with IAM just for that purpose21:59
semiosisthe EC2 CLI command ec2-describe-instances makes that call, and it will return instance tags as well22:00
MathuinYeah, I could do that from outside.  Might also be able to use DescribeTags but without a key, and generating them is annoying.22:01
semiosisgotta run, good luck with that, i'd be interested to hear what you figure out if you feel like sharing.22:01
MathuinI'll post on the forums and mention it here if I can.22:01
mathiazsmoser: kirkland: do you know if update-motd is run on EC2 lucid images?22:25
kirklandmathiaz: 99% sure, yes22:25
mathiazsmoser: kirkland: when I'm logging into my instance /var/run/motd never exists22:25
kirklandmathiaz: is /etc/motd a symlink to /var/run/motd?22:26
mathiazkirkland: yes22:26
mathiazkirkland: and pam_motd seems to be enabled:22:27
mathiazkirkland: http://paste.ubuntu.com/587072/22:27
kirklandmathiaz: curious....22:28
kirklandmathiaz: let me launch and instance...  what's your ami?22:29
mathiazkirkland: ami-3202f25b22:29
kirklandmathiaz: launched...22:30
kirklandmathiaz: hmm, worked fine for me22:34
mathiazkirkland: hm...22:34
kirklandmathiaz: here ...22:34
mathiazkirkland: could it be related to the fact that I don't use the ubuntu account?22:35
kirklandmathiaz: i don't think so ...22:35
kirklandmathiaz: ssh ubuntu@ec2-50-17-64-179.compute-1.amazonaws.com22:35
kirklandmathiaz: i imported your pubkey there22:36
kirklandmathiaz: $ ll /etc/update-motd.d/99-kirkland22:36
kirkland-rwxr-xr-x 1 root root 38 2011-03-29 21:33 /etc/update-motd.d/99-kirkland*22:36
mathiazkirkland: indeed22:36
kirklandmathiaz: you want to create one in there?22:37
kirklandmathiaz: maybe add another user, or something?22:37
* mathiaz tries22:38
mathiazkirkland: need to jet out22:38
kirklandmathiaz: okay22:39
kirklandmathiaz: i'll help you debug this22:39
kirklandmathiaz: but i can't reproduce it yet22:39
kirklandmathiaz: i just created a "kirkland" uesr22:42
kirklandmathiaz: and I get the motd there too22:42
kirklandmathiaz: i removed /var/run/motd, and it was recreated when i logged in as 'kirkland'22:43

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!