From owner-freebsd-cloud@freebsd.org Wed Dec 27 15:59:48 2017 Return-Path: Delivered-To: freebsd-cloud@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D19ABE9DFBB for ; Wed, 27 Dec 2017 15:59:48 +0000 (UTC) (envelope-from raf@rafal.net) Received: from fbo-1.mxes.net (mxout-23.mxes.net [216.86.168.223]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A4ACD6B08F for ; Wed, 27 Dec 2017 15:59:47 +0000 (UTC) (envelope-from raf@rafal.net) Received: from smtp-out-1.mxes.net (smtp-out-1.mxes.net [67.222.241.250]) by fbi-1.mxes.net (Postfix) with ESMTP id 1DFCF27561 for ; Wed, 27 Dec 2017 10:53:15 -0500 (EST) Received: from [192.168.40.37] (86-40-118-125-dynamic.agg2.bri.bbh-prp.eircom.net [86.40.118.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id BFC9E2750C for ; Wed, 27 Dec 2017 10:53:05 -0500 (EST) From: Rafal Lukawiecki Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Subject: AMI building AMI Message-Id: <085D225B-2E99-4540-B693-223087B14A27@rafal.net> Date: Wed, 27 Dec 2017 15:53:03 +0000 To: freebsd-cloud@freebsd.org X-Mailer: Apple Mail (2.3445.5.20) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.25 X-BeenThere: freebsd-cloud@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "FreeBSD on cloud platforms \(EC2, GCE, Azure, etc.\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Dec 2017 15:59:48 -0000 Is there a list of AWS AMI ids (and regions) containing Colin=E2=80=99s AMI = builder AMI? The 2015 article http://www.daemonology.net/blog/2015-11-21-Fre= eBSD-AMI-builder-AMI.html mentions one in us-east-1 ami-28682f42. Are there mo= re? Or a documented procedure on using RE tools to achieve the same? I am particularly interested in recompiling 11.1 release kernel, adding a g= ood few packages (to speed up instance launch time) and creating an AMI out = of that. Of course, I can take the lazy route of building a normal AWS AMI, = which will not be as =E2=80=9Cclean and unused=E2=80=9D as the one suggested= in Colin=E2=80=99s article. But if there is a current way to do the cleaner= thing, I would like to know, please. Many thanks, Rafal -- Rafal Lukawiecki Data Scientist Project Botticelli Ltd From owner-freebsd-cloud@freebsd.org Wed Dec 27 17:31:49 2017 Return-Path: Delivered-To: freebsd-cloud@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 262F3EA2FE9 for ; Wed, 27 Dec 2017 17:31:49 +0000 (UTC) (envelope-from michiel@vanbaak.eu) Received: from mail-wm0-x22d.google.com (mail-wm0-x22d.google.com [IPv6:2a00:1450:400c:c09::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id B47E16E657 for ; Wed, 27 Dec 2017 17:31:47 +0000 (UTC) (envelope-from michiel@vanbaak.eu) Received: by mail-wm0-x22d.google.com with SMTP id f140so40286371wmd.2 for ; Wed, 27 Dec 2017 09:31:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vanbaak-eu.20150623.gappssmtp.com; s=20150623; h=date:from:to:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=vp4f2PQzvm5JwnmjrdZqgDT4exIyXT5+eC80OqlJp9k=; b=Wmr3mwHYLQfBHd/UoF6/4a6M08ugz0BhyE9TQ3GjuuiSD2f0A/VtI3cDS0LMIraKJv THFB4rXjdrKCIBCF7cTrHSgVlIOGE2/APFdaUhMwl7jRVV0sipthxk+2tnXCDtPofc3n dphtrDB4hHZ4GX4Bi7t+8e3KW1B30uTAHPybiHsJ5R8+UaEt2OD14iYLYB0CPjHESV7Y sYp0mFwRW64rUhH1I7lPN8QMh+WDgCVBZF2BnZS7SK5wCjeXaliuhNG9RrSBU9RypEjv 0SnRhhcl8p+S2QgTnxWG9mWCu+6QOePGY8d9JU2La6TbdAlanClbYz0RRukMBwy0HEpp ydRQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=vp4f2PQzvm5JwnmjrdZqgDT4exIyXT5+eC80OqlJp9k=; b=a9x0TOG0pv7qDgUQVikEaa3qEVe5zSEDgLnfdkbb2oaYn8l7WhSHlkA8Cjj72gSM7o SL0FHS/+YZ+c1boQkbG5AK3wy7mSzmJqH8ziR6HDgupQ8MvOuxE8/q5ABWMbp4nCVjSr jEB4MjhJ2Nmcb4cccDGwJ1aTabNzKtOHtttSZSN9ey2oFWv26miGrMaJ2m8rq+HDFg0b O3QTcSioTExEIYQBJdj3yuS8q2Ynpd7D6DPQ/XuRg++wxd3wIG4T4qDbiSPbkayPY+2u lZL9khcIwl3VSdAalkbxMO1hLfXhuZdv186vUHmzi6L1oAufOin6BMeVTY/Wojp8P3z3 1HMQ== X-Gm-Message-State: AKGB3mLWgYhKTbGS7eDwuiugM7Kh99x1IeWty0eDS+XgfH1L5yU3Is/9 ZPD+nuxxKlQrOt494wuJwdRNNMCvKyU= X-Google-Smtp-Source: ACJfBouUmpvSuazgB8+rCh5T0ikNYuAlf2Gg/vp+ObzbvFSMIe0LCfToGLHT44Hlo4fXKuC9RD88IQ== X-Received: by 10.80.153.210 with SMTP id n18mr37255040edb.281.1514395905861; Wed, 27 Dec 2017 09:31:45 -0800 (PST) Received: from localhost ([2a02:a443:381e:1::13]) by smtp.gmail.com with ESMTPSA id q10sm27837891edc.32.2017.12.27.09.31.45 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 27 Dec 2017 09:31:45 -0800 (PST) Date: Wed, 27 Dec 2017 18:31:44 +0100 From: Michiel van Baak To: freebsd-cloud@freebsd.org Subject: Re: AMI building AMI Message-ID: <20171227173144.vsdlovd3gz2w7w5g@freebsd02> References: <085D225B-2E99-4540-B693-223087B14A27@rafal.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="2z62ewwcjxeipjdb" Content-Disposition: inline In-Reply-To: <085D225B-2E99-4540-B693-223087B14A27@rafal.net> User-Agent: NeoMutt/20171013 X-BeenThere: freebsd-cloud@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "FreeBSD on cloud platforms \(EC2, GCE, Azure, etc.\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Dec 2017 17:31:49 -0000 --2z62ewwcjxeipjdb Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Dec 27, 2017 at 03:53:03PM +0000, Rafal Lukawiecki wrote: > Is there a list of AWS AMI ids (and regions) containing Colin=E2=80=99s A= MI builder AMI? The 2015 article http://www.daemonology.net/blog/2015-11-21= -FreeBSD-AMI-builder-AMI.html mentions one in us-east-1 ami-28682f42. Are th= ere more? Or a documented procedure on using RE tools to achieve the same? >=20 > I am particularly interested in recompiling 11.1 release kernel, adding a= good few packages (to speed up instance launch time) and creating an AMI o= ut of that. Of course, I can take the lazy route of building a normal AWS A= MI, which will not be as =E2=80=9Cclean and unused=E2=80=9D as the one sugg= ested in Colin=E2=80=99s article. But if there is a current way to do the c= leaner thing, I would like to know, please. Your best bet is to use the official FreeBSD AMI, do your changes, and build an AMI out of that. We do this with the help of ansible: - boot official ami - install ansible - download ansible playbooks from S3 to /tmp - run ansible - clean /tmp - build AMI - ... - PROFIT --=20 Michiel van Baak michiel@vanbaak.eu GPG key: http://pgp.mit.edu/pks/lookup?op=3Dget&search=3D0x6FFC75A2679ED069 NB: I have a new GPG key. Old one revoked and revoked key updated on keyser= vers. --2z62ewwcjxeipjdb Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAABCgAdFiEEO9oGFWGYJa7y6GXGb/x1omee0GkFAlpD2QAACgkQb/x1omee 0GluBAgAp/bIq2pYyFkGzO/LdUMnSmbNMcAHcp1pO+PpJJ9wKLLod+H4U2ph+JGC T+Cngo4ACEnqd6bOZB7yYfiejeH3q1F4B7TzQag9LtSy9FrgZd+DlM5MKgJnksm6 5yCi5A74Ilp5jMN486h9bT8hQ7HGPaRgshzTj5aPLIDnNuPd1NT6tCrfLVTRZbop Wn1habdFTUApZL3W925MyVazwY7qJZJQtT/xGAq/dUPJDHci30pLN9L5hMpgU//Z 2yktOZf9MAXzrqJOwcNr3YJmGvCuVpfBBxGBHvxkC7kl5FfNtT6kGXMVdx8gyFGR fVxGy5+CeHWzi6VCcc+Lq409UTVMsQ== =CLgC -----END PGP SIGNATURE----- --2z62ewwcjxeipjdb-- From owner-freebsd-cloud@freebsd.org Wed Dec 27 18:59:06 2017 Return-Path: Delivered-To: freebsd-cloud@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DA9EFEA6DF4 for ; Wed, 27 Dec 2017 18:59:06 +0000 (UTC) (envelope-from 01000160995789e1-9e02b44d-8c1b-4451-9650-f5388705c9eb-000000@amazonses.com) Received: from a8-176.smtp-out.amazonses.com (a8-176.smtp-out.amazonses.com [54.240.8.176]) (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id A141071605 for ; Wed, 27 Dec 2017 18:59:05 +0000 (UTC) (envelope-from 01000160995789e1-9e02b44d-8c1b-4451-9650-f5388705c9eb-000000@amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ae7m2yrxjw65l2cqdpjxuucyrvy564tn; d=tarsnap.com; t=1514401139; h=Subject:To:References:From:Message-ID:Date:MIME-Version:In-Reply-To:Content-Type:Content-Transfer-Encoding; bh=Ep2dAvgZacZSMCeSrO95DYgj0iBldBIJTTmOzVk+FIY=; b=v/FGFn7WKdS/cVVbmXAZZDTUgZvTTSI8DVRcWY9g9lBEA3jz1cyV2kKlofnbFMUA HvQqL+j5T9TmaDAHVQ5NQ1/gehXIQt1sbRSXNwDZ4Q4bo7B8o8/vFmVJ6gJqXJT8shQ SYnhRen5t1QXNDzSJpo2nX0bMf0k22jnpaCntCsM= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1514401139; h=Subject:To:References:From:Message-ID:Date:MIME-Version:In-Reply-To:Content-Type:Content-Transfer-Encoding:Feedback-ID; bh=Ep2dAvgZacZSMCeSrO95DYgj0iBldBIJTTmOzVk+FIY=; b=Ry8nEOCjd4sSJWFEW3+aYhI2Nfi8VeT2Sb4iaCPM5vD/9VDRsase7nQuoZPCfVYu iloHTUyR+ol5ehsfF/AMt/+xU3yuSTopDji+Hjn/a5bTs/mRl9sIFMqgbCceDbNDrK8 2Tyo5UClVUj84MfhFfYegPTr6X9KdqhYzTPJEtjI= Subject: Re: AMI building AMI To: Rafal Lukawiecki , freebsd-cloud@freebsd.org References: <085D225B-2E99-4540-B693-223087B14A27@rafal.net> From: Colin Percival Message-ID: <01000160995789e1-9e02b44d-8c1b-4451-9650-f5388705c9eb-000000@email.amazonses.com> Date: Wed, 27 Dec 2017 18:58:59 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: <085D225B-2E99-4540-B693-223087B14A27@rafal.net> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-SES-Outgoing: 2017.12.27-54.240.8.176 Feedback-ID: 1.us-east-1.Lv9FVjaNvvR5llaqfLoOVbo2VxOELl7cjN0AOyXnPlk=:AmazonSES X-BeenThere: freebsd-cloud@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "FreeBSD on cloud platforms \(EC2, GCE, Azure, etc.\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Dec 2017 18:59:07 -0000 On 12/27/17 07:53, Rafal Lukawiecki wrote: > Is there a list of AWS AMI ids (and regions) containing Colin’s AMI builder > AMI? The 2015 article > http://www.daemonology.net/blog/2015-11-21-FreeBSD-AMI-builder-AMI.html > > mentions one in us-east-1 ami-28682f42. Are there more? Or a documented > procedure on using RE tools to achieve the same? The blog post explains how to build an AMI Builder AMI by launching a release AMI with the right user-data. > I am particularly interested in recompiling 11.1 release kernel, adding a > good few packages (to speed up instance launch time) and creating an AMI > out of that. Of course, I can take the lazy route of building a normal AWS > AMI, which will not be as “clean and unused” as the one suggested in > Colin’s article. But if there is a current way to do the cleaner thing, I > would like to know, please. I can build an 11.1 AMI Builder AMI tomorrow if you'd like. Using this will be better than trying to clean a "live" instance, since even if you delete all the files you don't want to include, they'll still be lingering in the free disk space. If this includes AWS keys, this could have very bad results. -- Colin Percival Security Officer Emeritus, FreeBSD | The power to serve Founder, Tarsnap | www.tarsnap.com | Online backups for the truly paranoid From owner-freebsd-cloud@freebsd.org Wed Dec 27 19:03:03 2017 Return-Path: Delivered-To: freebsd-cloud@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 01B0EEA713A for ; Wed, 27 Dec 2017 19:03:03 +0000 (UTC) (envelope-from raf@rafal.net) Received: from smtp-out-1.mxes.net (smtp-out-1.mxes.net [67.222.241.250]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D0F1571910 for ; Wed, 27 Dec 2017 19:03:02 +0000 (UTC) (envelope-from raf@rafal.net) Received: from [192.168.40.41] (86-40-118-125-dynamic.agg2.bri.bbh-prp.eircom.net [86.40.118.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id EA19927541; Wed, 27 Dec 2017 14:02:54 -0500 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Subject: Re: AMI building AMI From: Rafal Lukawiecki In-Reply-To: <0100016099578ea7-02da1d5c-997d-47be-9cd8-dc6b75bbeda6-000000@email.amazonses.com> Date: Wed, 27 Dec 2017 19:02:52 +0000 Cc: freebsd-cloud@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <8BCB67B8-DE56-491A-8E6A-95AFB83F71D6@rafal.net> References: <085D225B-2E99-4540-B693-223087B14A27@rafal.net> <0100016099578ea7-02da1d5c-997d-47be-9cd8-dc6b75bbeda6-000000@email.amazonses.com> To: Colin Percival X-Mailer: Apple Mail (2.3445.5.20) X-BeenThere: freebsd-cloud@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "FreeBSD on cloud platforms \(EC2, GCE, Azure, etc.\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Dec 2017 19:03:03 -0000 > On 27 Dec 2017, at 18:59, Colin Percival wrote: >=20 > I can build an 11.1 AMI Builder AMI tomorrow if you'd like. Using = this will > be better than trying to clean a "live" instance, since even if you = delete > all the files you don't want to include, they'll still be lingering in = the > free disk space. If this includes AWS keys, this could have very bad = results. Thank you, Colin. Yes, it would be useful, but it can wait till you = return from your Japanese conference. Will I be able to use it in eu-west-1 or do I need to build in = us-east-1, save to s3 and import into eu? Rafal= From owner-freebsd-cloud@freebsd.org Wed Dec 27 19:16:00 2017 Return-Path: Delivered-To: freebsd-cloud@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B8D43EA79F8 for ; Wed, 27 Dec 2017 19:16:00 +0000 (UTC) (envelope-from 01000160996717b2-70167d82-c887-4e1e-b4a6-924bd8eafd55-000000@amazonses.com) Received: from a8-176.smtp-out.amazonses.com (a8-176.smtp-out.amazonses.com [54.240.8.176]) (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7E8327220D for ; Wed, 27 Dec 2017 19:16:00 +0000 (UTC) (envelope-from 01000160996717b2-70167d82-c887-4e1e-b4a6-924bd8eafd55-000000@amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ae7m2yrxjw65l2cqdpjxuucyrvy564tn; d=tarsnap.com; t=1514402158; h=Subject:To:References:Cc:From:Message-ID:Date:MIME-Version:In-Reply-To:Content-Type:Content-Transfer-Encoding; bh=A+QQQSfvc4An9zrZL/VVMf+CgPAQO+5sHVhmMMeY1E8=; b=IBy6ROLteH53e+2kf/5z6Tkb6LtjT18kKHXPEUBccptQ1xZlegVP7Ayj/1GtZVOA /b10F55Z54e0JCE2BbwhrWPWowIv92WZmiil1eoP+tumQ4g9Te84flNkAzsYRZ9/gMI Ddk6M5V6AYAe8XC4grsiFQtBy3kZmX+7ZZizYauI= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1514402158; h=Subject:To:References:Cc:From:Message-ID:Date:MIME-Version:In-Reply-To:Content-Type:Content-Transfer-Encoding:Feedback-ID; bh=A+QQQSfvc4An9zrZL/VVMf+CgPAQO+5sHVhmMMeY1E8=; b=cJFDRRagyvxe1nxyXp4c3bb723il5XltTxTMrQKAi+uL3bQc2X5mojShYmifkvo+ KkRmcHJdoANaSQboZlGVWU8OQxkPttgpWxL3pG0BF7LPa8RlyJ6DJNgcC40AN/MrvDX E0pahOv7VZ2h32CqKhLJi72HEx6JE8iZGw4flt/c= Subject: Re: AMI building AMI To: Rafal Lukawiecki References: <085D225B-2E99-4540-B693-223087B14A27@rafal.net> <0100016099578ea7-02da1d5c-997d-47be-9cd8-dc6b75bbeda6-000000@email.amazonses.com> <8BCB67B8-DE56-491A-8E6A-95AFB83F71D6@rafal.net> Cc: freebsd-cloud@freebsd.org From: Colin Percival Message-ID: <01000160996717b2-70167d82-c887-4e1e-b4a6-924bd8eafd55-000000@email.amazonses.com> Date: Wed, 27 Dec 2017 19:15:58 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: <8BCB67B8-DE56-491A-8E6A-95AFB83F71D6@rafal.net> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-SES-Outgoing: 2017.12.27-54.240.8.176 Feedback-ID: 1.us-east-1.Lv9FVjaNvvR5llaqfLoOVbo2VxOELl7cjN0AOyXnPlk=:AmazonSES X-BeenThere: freebsd-cloud@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "FreeBSD on cloud platforms \(EC2, GCE, Azure, etc.\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Dec 2017 19:16:00 -0000 On 12/27/17 11:02, Rafal Lukawiecki wrote: >> On 27 Dec 2017, at 18:59, Colin Percival wrote: >> I can build an 11.1 AMI Builder AMI tomorrow if you'd like. Using this will >> be better than trying to clean a "live" instance, since even if you delete >> all the files you don't want to include, they'll still be lingering in the >> free disk space. If this includes AWS keys, this could have very bad results. > > Thank you, Colin. Yes, it would be useful, but it can wait till you return from your Japanese conference. You don't want to wait that long -- AsiaBSDCon isn't until March! > Will I be able to use it in eu-west-1 or do I need to build in us-east-1, > save to s3 and import into eu? I've only built the AMI Builders in us-east-1 in the past. But it's very easy to copy AMIs between regions -- you don't need to save to S3 and then re-import them, just use the "copy AMI" command (available as an API call or via the AWS Console). -- Colin Percival Security Officer Emeritus, FreeBSD | The power to serve Founder, Tarsnap | www.tarsnap.com | Online backups for the truly paranoid From owner-freebsd-cloud@freebsd.org Wed Dec 27 19:28:40 2017 Return-Path: Delivered-To: freebsd-cloud@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0C4B3EA840C for ; Wed, 27 Dec 2017 19:28:40 +0000 (UTC) (envelope-from raf@rafal.net) Received: from fbo-2.mxes.net (mxout-22.mxes.net [216.86.168.222]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D8A3A72905 for ; Wed, 27 Dec 2017 19:28:39 +0000 (UTC) (envelope-from raf@rafal.net) Received: from smtp-out-1.mxes.net (smtp-out-1.mxes.net [67.222.241.250]) by fbi-2.mxes.net (Postfix) with ESMTP id 8851F27558 for ; Wed, 27 Dec 2017 14:22:33 -0500 (EST) Received: from [192.168.40.41] (86-40-118-125-dynamic.agg2.bri.bbh-prp.eircom.net [86.40.118.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id EBDC827542; Wed, 27 Dec 2017 14:22:10 -0500 (EST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Subject: Re: AMI building AMI From: Rafal Lukawiecki In-Reply-To: <0100016099671dff-32d986bf-3979-40a3-accf-4d17c2020403-000000@email.amazonses.com> Date: Wed, 27 Dec 2017 19:22:09 +0000 Cc: freebsd-cloud@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <8538BFB9-B82C-4520-ADB3-E25040EA1B30@rafal.net> References: <085D225B-2E99-4540-B693-223087B14A27@rafal.net> <0100016099578ea7-02da1d5c-997d-47be-9cd8-dc6b75bbeda6-000000@email.amazonses.com> <8BCB67B8-DE56-491A-8E6A-95AFB83F71D6@rafal.net> <0100016099671dff-32d986bf-3979-40a3-accf-4d17c2020403-000000@email.amazonses.com> To: Colin Percival X-Mailer: Apple Mail (2.3445.5.20) X-BeenThere: freebsd-cloud@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "FreeBSD on cloud platforms \(EC2, GCE, Azure, etc.\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Dec 2017 19:28:40 -0000 > You don't want to wait that long -- AsiaBSDCon isn't until March! Ah, in that case please have a go when you have submitted your talk. :) = Thank you. > I've only built the AMI Builders in us-east-1 in the past. But it's = very > easy to copy AMIs between regions -- you don't need to save to S3 and = then > re-import them, just use the "copy AMI" command (available as an API = call > or via the AWS Console). That will be perfect. Thank you, Colin. Rafal= From owner-freebsd-cloud@freebsd.org Fri Dec 29 02:44:46 2017 Return-Path: Delivered-To: freebsd-cloud@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 02065EA40DE for ; Fri, 29 Dec 2017 02:44:46 +0000 (UTC) (envelope-from 01000160a028354d-c2234f8f-a776-42f6-b486-c078d6ca2091-000000@amazonses.com) Received: from a8-26.smtp-out.amazonses.com (a8-26.smtp-out.amazonses.com [54.240.8.26]) (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id BB13F77AA9 for ; Fri, 29 Dec 2017 02:44:44 +0000 (UTC) (envelope-from 01000160a028354d-c2234f8f-a776-42f6-b486-c078d6ca2091-000000@amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ae7m2yrxjw65l2cqdpjxuucyrvy564tn; d=tarsnap.com; t=1514515478; h=Subject:To:References:Cc:From:Message-ID:Date:MIME-Version:In-Reply-To:Content-Type:Content-Transfer-Encoding; bh=ae5w+iePyUs5kakaKAG6UCznV+DRoE6D9kKjwWhYSuc=; b=JgUoLy2Lrch9qfXPSZuM09iATjD7EGeQCx6KPgPnh6DMvf85NmRDg7jacmZM75oE IVFa+GNPNzS8wACT1A+W5PUrkazdovCJtq6GvNvvm+q3toYQxli9B9kdugUSKVh7i2F AhA7nzutJ7nBt/Qj5wBkr0SYXpqj0db2Y7MGWMgw= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1514515478; h=Subject:To:References:Cc:From:Message-ID:Date:MIME-Version:In-Reply-To:Content-Type:Content-Transfer-Encoding:Feedback-ID; bh=ae5w+iePyUs5kakaKAG6UCznV+DRoE6D9kKjwWhYSuc=; b=U1zrr1ip0gyATj8BkwDVhsiAHtK6xtEITe7Dz29Xc70YH4L5c6pJdqgGuy1cB+94 DXrsVuANp4TbiMRp4t5ivpFcNM25bk0ELNnwv+wQx5lem5wJV9weruBDo6pDjdq5SqF NZPLCvXsj2iEcJUEwPby1AKxHk7RpeCgmaVQ1J98= Subject: Re: AMI building AMI To: Rafal Lukawiecki References: <085D225B-2E99-4540-B693-223087B14A27@rafal.net> <0100016099578ea7-02da1d5c-997d-47be-9cd8-dc6b75bbeda6-000000@email.amazonses.com> <8BCB67B8-DE56-491A-8E6A-95AFB83F71D6@rafal.net> <0100016099671dff-32d986bf-3979-40a3-accf-4d17c2020403-000000@email.amazonses.com> <8538BFB9-B82C-4520-ADB3-E25040EA1B30@rafal.net> Cc: freebsd-cloud@freebsd.org From: Colin Percival Message-ID: <01000160a028354d-c2234f8f-a776-42f6-b486-c078d6ca2091-000000@email.amazonses.com> Date: Fri, 29 Dec 2017 02:44:37 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: <8538BFB9-B82C-4520-ADB3-E25040EA1B30@rafal.net> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-SES-Outgoing: 2017.12.29-54.240.8.26 Feedback-ID: 1.us-east-1.Lv9FVjaNvvR5llaqfLoOVbo2VxOELl7cjN0AOyXnPlk=:AmazonSES X-BeenThere: freebsd-cloud@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "FreeBSD on cloud platforms \(EC2, GCE, Azure, etc.\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Dec 2017 02:44:46 -0000 On 12/27/17 11:22, Rafal Lukawiecki wrote: >> I've only built the AMI Builders in us-east-1 in the past. But it's very >> easy to copy AMIs between regions -- you don't need to save to S3 and then >> re-import them, just use the "copy AMI" command (available as an API call >> or via the AWS Console). > > That will be perfect. us-east-1 ami-e6a6ea9c is a FreeBSD 11.1-RELEASE AMI-building AMI. -- Colin Percival Security Officer Emeritus, FreeBSD | The power to serve Founder, Tarsnap | www.tarsnap.com | Online backups for the truly paranoid