[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#592550: support for SSH-Key authentication (Supports Eucalyptus and Amazon EC2)

On Jul 19, 2011, at 19:22, Charles Plessy wrote:
> Le Wed, Aug 11, 2010 at 07:58:04PM -0400, Kyle Moffett a écrit :
>> The modified installer now retrieves a "public-ip-url" and displays that
>> address in the console output instead of the IP found on the network
>> interface.  This correctly interoperates with Eucalyptus and Amazon EC2.
>> In those environments you would use the following bit of preseed:
>>  d-i network-console/password-disabled boolean true
>>  d-i network-console/public-ip-url string \
>>  d-i network-console/public-key-url string \
>> I'm also in the process of working on a small Debian-Installer patch to
>> automatically prepare a partially-preseeded D-I image following those
>> conventions.
>> I've built a modified network-console with this patch into a slightly
>> patched Debian-Installer and successfully used it to begin a network
>> install on an Amazon EC2 instance.
> Dear Kyle and Debian Installer team,
> this would be a very interesting feature.  Since the Amazon EC2 can boot on
> custom kernels, it looks like that with this patch (or using Petter's
> workaround), it would be possible to prepare an Amazon Machine Image (AMI) of
> Debian-Installer itself, boot it from GRUB (through Amazon's kernels using
> PVGRUB and preseed it via initrd, in order to install Debian on an Amazon
> Elastic Block.  Is that what you have tried ?

That is exactly what I have done.

The actual construction of the AMI containing the Debian-Installer is a bit of
a pain; I have a shell-script wrapper around the Amazon EC2 tools in order to
do marshall it into the official EC2 format, but the patches necessary to make
the SSH Console and Debian-Installer play nicely were surprisingly small.

Basically, I created a new Debian-Installer image variant with a built-in
preseed file containing references to the standard Amazon EC2 infrastructure
for loading SSH keys and downloading additional preseed from EC2 "user-data".

I will see if I don't have 15 minutes some time soon to dust off those patches
to update and resubmit them.

Kyle Moffett

Reply to: