#ubuntu-ec2 2009-07-27
<erichammond> I am told that this channel is now being logged on http://irclogs.ubuntu.com (by the "ubuntulog" bot).
<erichammond> Could somebody with admin rights update the topic to reflect this so that folks entering the channel are less likely to be surprised that their messages to a public channel are public?
<erichammond> Hm, perhaps it isn't done in the topic.  I get a separate message when I enter channels like #ubuntu which includes "This channel is officially logged at http://irclogs.ubuntu.com/"
<LyricHartley> question: what are you guys doing for smtp? I see some recommendations in the forum for fastmail.fm and authsmtp ...any thoughts
<erichammond> LyricHartley: We run a leased server with a clean IP address at a separate ISP and relay outbound email through it.
<erichammond> The best depends on a number of factors including the volume of email sent, and the amount of effort you want to put into maintaining the solution.
#ubuntu-ec2 2009-07-28
<moj0e> does Amazon actively block vulnerability scans to the EC2?
<moj0e> (other than the regular firewall)
<erichammond> InfiBase performance tests on EC2: http://www.infibase.com/blog/2009/07/mysql-on-amazon-ec2-part-1/
#ubuntu-ec2 2009-07-29
<agussman> Does anyone know where I can get a list of all the kernels ec2 supports?
<koan> I created a Jaunty AMI with vmbuilder, and I launched it successfully with ec2-run-instances. ec2-describe-instances shows it as running and lists an IP address, but I can't ping to it
<koan> and ec2-get-console-output gives a sensible output, so there's no kernel problem
<koan> what could be wrong?
<agussman> koan: It could be blocked by the security settings you specified when you started theimage
<koan> where can I find these settings?
<rick_h_> yea, by default I don't think the images allow icmp requests
<koan> I can't ssh into the image too
<rick_h_> you should be able to ssh into it with the ubuntu user account and key launched with
<koan> but I did ec2-authorize default -p 22
<koan> and I added ssh to --addpkg
<rick_h_> you can check the console output with the EC2 web manager to see if there were any errors starting the instance?
<rick_h_> you're using keys to ssh correct?
<rick_h_> by default it doesn't allow password logins
<koan> indeed
<koan> ec2-get-console-output only complains about uvesafb
<koan> so I really don't see where the problem lies
<koan> I created the image with sudo vmbuilder xen ubuntu --suite=jaunty --arch=i386 --addpkg ssh unattended-upgrades --ec2 --ec2-cert=$EC2_CERT --ec2-key=$EC2_PRIVATE_KEY --ec2-user=$AWS_USER_ID --ec2-access-key=$AWS_ACCESS_KEY_ID --ec2-secret-key=$AWS_SECRET_ACCESS_KEY --ec2-bucket=lxf-bucket --ec2-prefix=lxf --part lxf-part -o -debug
<koan> is there a problem with that?
<agussman> koan: the securtiy settings are specified in the group file that you specify with -g when you run ec2-run-instances
<koan> agussman: ok, and if I don't specify a group file?
<agussman> I don't know what the default security settings are, but I think they are very strict
<koan> ok, but I explicitly allowed port 22, and I can ssh into other AMIs, so I guess that's not the problem
<agussman> yeah, I'm not too familiar with ec2-authorize, I usually manage my vms using Elasticfox
<rick_h_> can you telnet to port 22?
<rick_h_> if you can, the port is open, just a matter of correct user/key settings I'd imagine
<koan> nope I can't
<agussman> koan: this has some instructions for setting up open ssh, I'm not sure if they still apply though: https://help.ubuntu.com/8.10/serverguide/C/jeos-and-vmbuilder.html
<koan> agussman: I know that page, I have built Ubuntu JeOS in the past with vmbuilder, but it's not entirely relevant in this case
<agussman> do you happen to have a link to some good documentation handy?  I've been having a heck of a time getting vmbuilder to do what I want
<koan> do I lack the right firstboot scripts maybe?
<koan> agussman: well I found Ubuntu's wiki pages invaluable, like the one you referred to
<koan> I'm now following this page for building an AMI: http://www.bonjoydell.com/blog/2009/05/08/creating-amis-for-amazon-ec2-with-ubuntu/
<agussman> koan: thanks for the link, I'll check it out
<koan> I hope you have more luck than me :)
<agussman> koan: Did you install ubuntu-vm-builder or python-vm-builder?
<koan> both
<koan> strange, now I do exactly the same, but building an intrepid image instead of jaunty, and this even has no kernel output in the console log
<koan> it really doesn't work, has anyone here a working procedure to create an Ubuntu AMI with vmbuilder?
<erichammond> koan: I have not been able to build good Ubuntu images for EC2 using vmbuilder yet.  The server team is still working on perfecting this process and the documentation.
<koan> erichammond: thanks for that information, I was just looking at your ec2ubuntu-build-ami script
<koan> I'm trying it at this moment
<NoobFukaure> are all of ec2's machines located together in the same geographic location?
<NoobFukaure> n/m
<erichammond> NoobFukaure: The first part of this article talks about that: http://alestic.com/2009/07/ec2-availability-zones
<NoobFukaure> where in the US are the servers hosted?
<NoobFukaure> ah okay thanks
<NoobFukaure> fantastic!
<NoobFukaure> erichammond: thanks!
<erichammond> Amazon does not give specific details about locations for security reasons.
<NoobFukaure> makes sense, I'm more interested in "general" locations, mainly for latency
<erichammond> From their security whitepaper: "AWS data centers are housed in nondescript facilities, and critical facilities have extensive setback and military grade perimeter control berms as well as other natural boundary protection."
#ubuntu-ec2 2009-07-30
<katol> hello, i want to
<katol> setup an apache balancer on ec2
<katol> right now i'm using public hostnames but i would like to use the ec2 hostnames
<cossovich> hello peeps.
<cossovich> I'm joining the ec2 fun and running some tests. Loving it.
<cossovich> I'm using one of the canonical AMIs on ec2 (hardy heron).... I'm looking for some docs on the sudo password... does anyone have any tips?
<cossovich> ok so sudo isn't shipping with a password...  I should of guessed that.
<koan> hi erichammond, many thanks for your awesome ec2ubuntu-build-ami script, it just works!
<macstar> anyone tell me / point me to somewhere on how to enable root login on the canonical ubuntu images
<macstar> please :)
<agussman> Potentially stupid question, is it possible to run 32 bit AMIs on the large (64bit) instances?
<erichammond> agussman: Nope.
<agussman> erichammond: thanks!
<erichammond> macstar: See the "root ssh" section of http://alestic.com/2009/04/ubuntu-ec2-sudo-ssh-rsync
<agussman> erichammond:  Do you happen to know why that is?  I was under the impression that 32bit guest OSs can be run on 64bit host OSs in Xen.
<erichammond> agussman: Amazon does not share details about the hows and whys of their internal implementations.
<agussman> erichammond: thanks for the response (and your AMIs!).  I found something of an answer in the in the "Instance Types and Architectures FAQ"
<agussman> e.g. "Nope."
<erichammond> agussman: I might also mention that I've seen a number of folks requesting the ability to run the same AMI across a larger set of instance types, though they tend to want 64-bit on smaller instances.
<erichammond> Amazon is pretty good about listening to customers; you can add your voice on the EC2 forum http://ec2forum.notlong.com perhaps tagging on to an existing thread on the topic.
#ubuntu-ec2 2009-07-31
<impl> Hi guys. Does anyone know where I can get a copy of /lib/modules/2.6.28-9-xen (preferrably without having to boot an instance, but that's not a huge deal)? I poked around on the Ubuntu EC2 site but couldn't find the source repositories.
<erichammond> impl: You might ask zul the question about the kernel when he gets back.
<erichammond> I think the kernel modules for the Canonical images came from (or were published on) the ubuntu-ec2 PPA at https://launchpad.net/~ubuntu-ec2/+archive/ppa but I don't see the newer kernels there.
<erichammond> As you are likely aware, the kernel modules must exactly match the kernel version and normal users can't build their own kernel for EC2.
<impl> erichammond: Okay, cool. I'll hang around for a bit.
#ubuntu-ec2 2010-07-02
<boxbeats1> hi guys, i'm trying to set up a mysql server on an EBS volume that I can access from myultiple EC2 ubuntu instances.  I've got it set up so that the server that the volume is attached to can access it through localhost
<boxbeats1> how can i make it so that i can access the mysql server from other insatnces?
#ubuntu-ec2 2010-07-07
<rberger> Using UEC, is there really no way to specify the /dev/sdx device of an EBS Mount? It seems you have to manually figure out which device the instance magically chose by grepping dmesg. Is this really true? It makes it hard to automate. ec2-describe-volumes says something like unknown,requested:/dev/sdb but it doesn't mean that its attached to /dev/sdb
<erichammond> rberger: This channel is not active.  You may want to try #ubuntu-server or #eucalyptus
<rberger> Thanks, I always forget which channel is good or not.
#ubuntu-ec2 2010-07-09
<flaccid> i assume its possible to download an AMI and mount it as a loopback image?
#ubuntu-ec2 2010-07-10
<anonident> hey
<anonident> anyone here?
<anonident> I'm having an issue creating a bootable ebs AMI with lucid
<anonident> it was an ephemeral drive issue breaking the ami
<anonident> should have really specified that somewhere
<anonident> canonical
#ubuntu-ec2 2010-07-12
<patdk-wk> I am just unable to get nx to work using, ami-05fad071
<patdk-wk> http://ubuntu.pastebin.com/cwBu9SSg
#ubuntu-ec2 2010-07-13
<dadaumpa> hello
<dadaumpa> someone can tell me how can I get ip address of an instance when i launch command ec2-run-instances?
<dadaumpa> or there is another command to know ipaddress during instance starting?
<dadaumpa> ping
<dadaumpa> thanks
#ubuntu-ec2 2010-07-14
<rampr> we are running 8.04 and console-kit-daemon has 60 instances of it running. is it safe to kill them ?
#ubuntu-ec2 2010-07-20
<flaccid> i see some images set up /etc/hosts like +1-473-444-0812   domU-12-31-38-00-95-65.compute-1.internal localhost
<flaccid> localhost.localdomain
<flaccid> is this a good or bad practice? (as opposed to just1 +1-473-444-0812   localhost   localhost.localdomain)
<flaccid> yeah the .internal address should be the internal 10. IP
<l1234> hello.  anyone around?
<flaccid> no
<l1234> well thats too bad.
<l1234> I'm trying to setup a subdomain of my ec2 site, and this might be a #apache question
<flaccid> cool
<l1234> any chance you'd be willing to help me out?
<l1234> i think I have the virtualhost settings correct in the 000-default file
<l1234> but its not working
<flaccid> enter #httpd and enter, NameVirtualHost
<l1234> except I'm on webchat.freenode which they ban
<flaccid> really
<l1234> yes.
<flaccid> so whats the prob
<flaccid> paste the config..
<flaccid> well the vhost at least
<l1234> <VirtualHost *:80> ServerName ec2.amazonaws.com DocumentRoot /var/www ServerAlias qa.ec2.compute-1.amazonaws.com </VirtualHost>  <VirtualHost *:80> ServerName ec2.amazonaws.com DocumentRoot /var/www2 ServerAlias qa2.ec2.amazonaws.com </VirtualHost>
<l1234> sorry it stripped the spacing out
<l1234> and i did a crappy job and stripped the compute-1 from the 2nd entry
<l1234> basically when I go to ec2.amazonaws.com it works fine(ccurrently pointed to /var/www)
<l1234> but the subdomains don't seem to work at all
<flaccid> you own amazonaws.com ?
<l1234> no
<l1234> lol
<l1234> i just stripped out our info from the file
<l1234> before I pasted it in here
<flaccid> so you don't even know what the directives mean?
<flaccid> and you can't google?
<l1234> i've tried googling
<flaccid> all you need is ServerName qa.ec2.compute-1.amazonaws.com
<l1234> http://httpd.apache.org/docs/2.0/vhosts/examples.html#purename  and http://www.howtoforge.com/forums/showthread.php?t=23
<flaccid> no aliases
<l1234> so just servername and docroot?
<l1234> lemme try
<flaccid> i did not mention DocumentRoot.
<l1234> how would it know where to get the data?
<flaccid> the first link you gave me doesn't even show using ServerAlias
<flaccid> DocumentRoot /var/ww
<flaccid> *w
<flaccid> you also shouldn't create /var/www2 :)
<l1234> i'm using random dir names
<l1234> obviously www2 is a crappy directory name
<flaccid> so anyway
<flaccid> as long as you have Listen 80 and NameVirtualHost *:80
<flaccid> the solution i advised is the go
<l1234> so like this
<l1234> <VirtualHost *:80> ServerName qa.ec2.compute-1.amazonaws.com DocumentRoot /var/www </VirtualHost>
<l1234> ?
<flaccid> yeah
<flaccid> of course qa.ec2.compute-1.amazonaws.com is foobar
<l1234> right i need to change it to our proper domain name
<l1234> still doesn't work
<flaccid> still doesn't work aint going to help
<l1234> a coworker said I should change my local hosts file
<flaccid> can you explain
<l1234> which makes no sense to me.
<l1234> 404's when I go to qa.ec2
<flaccid> thats better
<flaccid> check the apache logs
<flaccid> first check the access log to ensure you are hitting the server
<flaccid> then the error log
<flaccid> also ensure the vhost configuration is correct in apachectl -S
<l1234> neither apache or error have any info in there
<flaccid> if nothing in access log then you probably are not hitting the right server
<flaccid> check the server signature against curl http://localhost/
<l1234> but -S talks about compute-1.internal
<flaccid> so that would probably come back to dns
<l1234> whereas the one I setup seems to point to amazaws.com ?
<flaccid> show me
<l1234> computer-1.amazonaws.com that is
<flaccid> ok so you shouldn't be touching/changing the default vhost
<flaccid> you need to create new ones and then enable them with a2ensite
<flaccid> please don't pm me again
<l1234> sorry
<l1234> http://apache.pastebin.com/qfHn1w5A  better?
<flaccid> ok so what i said above
<flaccid> you also don't need sudo for apache2ctl
<flaccid> and yes of course your dns and /etc/hosts needs to be correct subsequent to that
<flaccid> i'm about to go to bed
<l1234> http://apache.pastebin.com/tbng2d6i
<l1234> how about this now?
<flaccid> yeah but you still have one of them in /etc/apache2/sites-enabled/000-default
<flaccid> thus its default to the local fqdn
<l1234> have one of what?
<flaccid> the vhosts
<l1234> the vhost info?
<l1234> oh ok
<l1234> one sec
<flaccid> and qa.ec2-184-73-97-66.compute-1.amazonaws.com has to resolve to the client
<flaccid> you don't have authority on this domain so its either hijack in local dns or add to /etc/hosts
<flaccid> sorry, to the client = for the client
<flaccid> as in the computer the web browser is on
<flaccid> also on the server for local access
<l1234> hrm
<l1234> ok
<l1234> damn
<l1234> was hoping to avoid that
<flaccid> aws is not a dns provider
<l1234> aaah ok
<l1234> hrm
<l1234> damn
<flaccid> non elastics IPs are also dynamic
<flaccid> and technically elastic IPs are not marked as static in the ip register
<flaccid> moral to the story, get dns
<l1234> ok
<l1234> thanks
<flaccid> np
<flaccid> oh but the public ip of the instance does not change in the instance lifetime
<flaccid> sidenote..
<flaccid> im gone.
<flaccid> thanks for the help heh
#ubuntu-ec2 2010-07-23
<uvirtbot> New bug: #608958 in ubuntu-on-ec2 "Root logins are crippled" [Undecided,New] https://launchpad.net/bugs/608958
#ubuntu-ec2 2010-07-29
<flaccid> i'm thinking of making debian kernels now as a result of opening up this possibility by ec2. anyone done so yet?

{'channel': 'ubuntu-ec2', 'month': 7}