21:00:25 #startmeeting Fedora Cloud SIG (2010-02-18) 21:00:26 Meeting started Thu Feb 18 21:00:25 2010 UTC. The chair is gregdek. Information about MeetBot at http://wiki.debian.org/MeetBot. 21:00:28 Useful Commands: #action #agreed #halp #info #idea #link #topic. 21:00:36 #meetingname cloud-sig 21:00:37 The meeting name has been set to 'cloud-sig' 21:00:56 Any objection to starting with our TODO list? 21:01:03 Care to link to it? 21:01:14 https://fedoraproject.org/wiki/Features/FedoraOnEC2#Open_Action_Items 21:01:31 Note: this is the TODO list for Fedora on EC2, specifically. 21:01:38 worksforme 21:01:43 Oxf13: Are you here? 21:01:43 If no one objects, I'll start from the top and work my way down. 21:02:23 #topic first pass base ks with min packageset 21:02:30 huff: ping 21:02:40 gregdek: hi 21:02:49 Howdy. :) Any info on $topic? 21:03:00 so I posted the first pass ks to the list 21:03:05 did not get much feed back 21:03:21 * gregdek nods. 21:03:27 I don't remember seeing it 21:03:28 Why use rc.local instead of a different init script? 21:03:38 :This ks file writes a custom fstab compatible w/ the ec2 infrastructure, 21:03:38 adds the ssh key stuff to rc.local, and enables sshd for remote long in. 21:03:38 It also creates an initrd image and moves it plus the vmlinuz image 21:03:38 outside of the images to be bundled and uploaded separately after image 21:03:39 creation. 21:03:45 * gregdek looks in the archives... 21:03:49 ahh, nm. I found it. 21:03:52 gregdek: b/c thats what we have now 21:04:00 http://github.com/huff/kickstart-stuff/blob/master/fedora-ec2-min.ks 21:04:19 http://lists.fedoraproject.org/pipermail/cloud/2010-February/000078.html 21:04:48 or gholms thats what I had 21:05:14 Yeah, the email also includes workflow. 21:05:29 So now, what we need to do is point people to this workflow and say "worksforyou?" 21:05:41 yea was an idea of how it could work 21:05:41 Of course, we'll need an AKI to do that. :) 21:05:58 We were working this in parallel. So we'll mark this "done" 21:06:06 And move on. Thanks huff, well done. 21:06:14 * gholms still has a question 21:06:18 Shoot. 21:06:24 any objections to building the initrd image inthe ks file 21:06:29 Why rc.local and not a script in /etc/rc.d/init.d? 21:06:32 i thought it was a pretty good soultion 21:06:56 gholms: b/c i did nothave time to write one 21:07:01 and the script works 21:07:04 huff: why not just have it be built by the kernel %post instead? 21:07:06 huff: you can build it, but that isn't what will be used 21:07:22 jforbes: why 21:08:34 huff: because the kernels need to be up and validated without worrying about image creation. Meaning we might use that to create the ARI, but people will be building images using that ks which will not be pushing a new ARI 21:08:59 aiui, this ks is supposed to be a place to start for spinning "standard" AMIs as part of the release process. 21:09:09 Is it not suitable for that? 21:09:37 right we i thought we would build a "standard" AMI AKI and ARI all at once 21:09:51 we need them to match 21:09:51 Yeah, I kinda thought that too. 21:09:55 well the ami and aki 21:09:58 Is that wrong? 21:10:22 The KS is suitable, just an unnecessary step for every image generation, since the ARI is not a part of the image, just referenced in the AMI definition 21:10:39 jforbes: I'm actually pretty concerned about people building new AMIs which end up using a newer kernel for the AMI and then modules not matching the available kernel. but there's nothing we can really do about that I guess given the constraints amazon sets and we can't change :/ 21:11:04 but we are talking about our offical fedora images 21:11:05 "Remove your old kernel RPMs at your own peril" 21:11:08 not thrd party images 21:11:19 jeremy: we can't control the AMIs that others build, ever. But we *can* control the AMIs *we* build, and we can get a Gold Star that says "these are kid tested and mother approved." 21:11:23 jeremy: Yeah, since they require that an external kernel is booted, we are stuck with that possibility 21:11:56 gregdek: oh, definitely. and I think we should make sure our ami build process also does everything we can of building the aki/ari 21:12:02 if nothing else, it helps people that use eucalyptus 21:12:03 The danger I can see is if someone has an image running long enough that the running kernel's modules are evicted during a yum update things will start going haywire. 21:12:14 and maybe it also can be a stick to beat amazon with 21:12:22 gholms: yum won't remove teh modules for the running kernel 21:12:24 The purpose of *this* ks was to give us a starting place towards building the first "official AMI". Is this "good enough" for now? 21:12:27 gholms: wrote that code a long time ago :-P 21:12:47 jeremy: Even if the running kernel came from somewhere else? 21:13:08 gholms: the modules are still from an rpm. and then it uses some crazy matching based on uname() 21:13:46 Sounds good to me, then. 21:13:46 gregdek: sure, the only thing I was saying, was that there is an extra step there which will not be needed most of the time, but it doesnt hurt really 21:14:00 OK. We can ferret that out later if need be. 21:14:08 Ready to move on to kernel questions? 21:14:28 Sure, though nothing to report there 21:14:56 We haven't released the 2.6.32 update, and I don't know if we are any closer or not. People seem bodhi happy with it, so maybe it will ship 21:15:02 #topic f13 kernel for ec2 21:15:28 Actually, I guess we're talking the f12 kernel for ec2, aren't we? 21:15:32 The update kernel, that is. 21:15:50 gregdek: yeah 21:15:59 So still stuck in bodhi. 21:16:08 gregdek: well, yes/no 21:16:27 gregdek: there have been several kernel builds with changes, but none that have been pushed through 21:16:39 When you say "people seem bodhi happy," then, what do you mean? 21:16:51 Has the latest build been sitting for a while and people have voted it up? 21:16:56 Or is there still churn? 21:17:14 it was noted today that a kernel is sitting in bodhi with 2 karma, and it hasn't even made it to updates-testing yet 21:17:35 Hm! Who do we poke about that? 21:17:38 gregdek: yeah, there has been churn, but any of them could be considered good enough 21:17:53 Is this Oxf13's call, or what? 21:17:58 gregdek: no one to poke, people have to test kernels, and they do... Unfortunately they find issues 21:18:09 sorry, I'm here. 21:18:21 Do we know for sure that the kernels in bodhi are definitely Xen/EC2 capable? 21:18:24 So we're just waiting for *any* kernel to make it thru updates-testing. 21:18:25 we're going to try to work in another push today, but we've had some bodhi issues 21:18:26 gregdek: so we have a few regressions with .32, and a large number of issues fixed. 21:18:33 which is outside the scope of the kernle issues 21:18:40 ewan: yes 21:18:40 but fingers are crossed for this kernel build. 21:18:58 ok. we'll keep checking in. :) 21:19:03 Anything else? 21:19:17 nope 21:19:20 Is it worth getting one of the bodhi kernels up on EC2 and testing it there then? They are supposed to be being tested after all. 21:19:21 #info no change on f12 kernel status 21:19:34 ewan: ++ 21:19:39 #info dhuff ks is "good enough for now", move that item to "complete" 21:19:53 ewan: we are testing essentially the same thing, on RHEL hosts here 21:19:57 story of my life 21:20:01 Hee hee. 21:20:51 If jforbes is confident that the kernel will run on EC2 xen hosts, I see no reason to rush a bodhi-based build on to EC2, I guess. 21:20:59 jforbes, you're quite sure? :) 21:21:24 gregdek: yeah, we had a rather extensive call with them, we know what they are running for hosts 21:21:29 Great. 21:21:38 And if you're wrong, we reserve the right to make fun of you. 21:21:46 (But we do that anyway, I guess.) 21:21:50 But of course :) 21:22:00 Moving on: 21:22:02 Makes sense to me. 21:22:06 #topic jforbes will document kernel/initramfs upload process 21:22:12 jforbes? 21:22:19 * gregdek wanders afk for a sec, brb 21:23:05 gregdek: right, documentation is being updated as the first real kernel is pushed 21:23:54 So this waits also. 21:24:16 #info kernel/initramfs upload process will be done when first real kernel is pushed 21:24:18 I have documentation from the last time I did it, but we need to make sure that it is accurate/relevant for fedora, so the doc part is easy 21:24:28 Good enough. 21:24:32 I guess we can move on, then. 21:24:49 #topic jforbes will share upload credentials with Fedora kernel developers 21:25:06 Who needs this, actually? Did they get it? 21:25:28 This isn't critical until we've actually got a working build process, I suppose, hm? 21:25:31 Just the kernel package maintainers? 21:25:31 gregdek: davej, kylem, and cebbert, and they will get it with the documentation 21:25:58 gholms, I've got to think we want to limit this, since it will define "authoritative" kernels. 21:26:00 They are aware that it will be coming to them 21:26:16 We'll have a testing account that will be more widely available, i think. 21:26:21 Right, not everyone with commit access to the kernel, just certain people 21:26:42 I mean... we definitely have two accounts. We just have to figure out at some point exactly what each one is used for. 21:27:15 #info upload credentials will be ready when upload documentation is ready 21:27:35 Anything to add there? 21:28:02 Bueller? 21:28:04 No? 21:28:07 OK, moving on: 21:28:47 #topic gregdek will ask amazon to host srpms / update servers / s3 for mirror manager 21:29:20 This all falls under the broader "working to get as much stuff as possible from Amazon for free". :) 21:29:36 Which is still waiting on a series of meeting with Nathan Thomas, so nothing to update there for now. 21:29:54 Nathan Thomas? 21:30:01 Our guy at Amazon. 21:30:04 Ah 21:30:15 Formerly of RH and rPath, so we know him and can work with him. 21:30:42 #info amazon hosting of srpms / update servers still waiting on meetings with Amazon folks 21:30:47 gregdek: there are some negiotions on the rhel side for sothing simular i think we may be able to jump on that 21:30:56 huff, is ferris working on that? 21:30:59 yea 21:31:03 I'll ping him, then. 21:31:30 Any questions about any of that? 21:31:48 Seems like a no. 21:31:50 Moving on: 21:31:53 What's next? 21:32:02 #topic Get euca2ools approved in Fedora 21:32:08 Ooh, that's me! 21:32:10 gholms? 21:32:11 :) 21:32:24 euca2ools 1.1 is in updates-testing now. 21:32:37 woo! 21:32:50 And I just blogged for folks to go give it karma, so maybe that'll help a bit. 21:32:50 I pushed 1.2 ten minutes ago, so look for it next time repos are composed. 21:33:28 https://admin.fedoraproject.org/updates/euca2ools-1.2-1.fc12 21:33:40 Also https://admin.fedoraproject.org/updates/euca2ools-1.2-1.fc13 21:34:18 Anything we can do to drive people? 21:34:45 Push people to use EC2 and Eycalyptus? 21:34:53 *Eucalyptus 21:35:03 Well, push them to test euca2ools, anyway. :) 21:35:31 Oh, that's easy. Upstream doesn't have Fedora RPMs for it so there really isn't a choice. :) 21:35:35 I'm likely to start using euca2ools myself. 21:35:43 LOL 21:36:00 All right. We'll just advertise them and hopefully that'll get the packages the needed karma. 21:36:07 I install ec2-api-tools alongside euca2ools and use euca-* whenever I can. 21:36:18 Good tip. 21:36:51 Do you have good / recent docs about what euca-* don't work at this point? 21:37:37 Things that are specific to EC2, like spot instances and pay-for AMIs, don't work. 21:37:57 The bug with euca-register is fixed with the version of python-boto from updates-testing. 21:38:19 Oh, so this is python based rather than java based, like ec2-api-tools? Win! 21:38:43 * gregdek still hasn't gotten upgraded from F11, lolfail 21:38:50 I can't even test until I upgrade. Moron. 21:39:08 Anyway, I guess no updates there. 21:39:25 Unless you want to use spot instances on EC2 you should try using euca2ools to do your instance management. 21:39:44 gholms, I will once I get upgraded to F12. Hopefully this weekend. 21:39:48 :D 21:39:59 All right, that's our opens. 21:40:05 Has anyone else here tried euca2ools out yet? 21:40:10 Anyone? 21:40:13 I have a bit. 21:40:21 IS IT NOT AWESUM?? 21:40:26 Against EC2 and Eucalyptus. 21:40:31 * gholms smacks gregdek with a large trout 21:40:36 Well; it does what it says it does :-) 21:40:45 ewan, have you tried the actual F12-testing packages? 21:40:56 I haven't tested all (or even most) of the tools as yet though. 21:40:57 There are no other packages, at least on Fedora. 21:41:23 gregdek: Yes. And I've just grabbed that latest one from Koji, so I'll give that a go too. 21:41:33 Things looking okay so far, at least? 21:41:36 ewan, rock on. Please karma if appropriate. :) 21:41:53 Please karma if not appropriate. We need bug reports for problems. 21:42:08 Yup. Haven't tried registering a new image (on account of the know python-boto prob) but starting, stopping, new keypairs.... 21:42:13 Oh, true. Karma + or - either way. 21:42:20 Yup. Will do. 21:42:31 ewan: Grab python-boto from updates-testing and that should work. 21:42:31 gholms, anything else for euca2ools? 21:42:43 That's it for me. Anyone else have anything for that? 21:43:11 #info euca2ools-1.2 going into bodhi RSN, ewan will test, gregdek will test 21:43:34 I'm using it for some research work, so I'll obviously be testing it too. :) 21:43:59 #action ewan, gholms, gregdek will test euca2ools-1.2 from bodhi 21:44:12 What's next? 21:44:13 I guess that's it. Are we ready to move to open floor? 21:44:23 Anything IBM-related? 21:44:28 Oh, right. 21:44:34 That didn't get on our list. 21:44:42 #topic IBM cloud stuff 21:45:09 I'm not actually sure what's actionable here, besides folks "playing with stuff". 21:45:13 I guess here's the question: 21:45:44 Do we want to take the IBM "Fedora cloud images" on while also working on the EC2 images? 21:46:10 Are the images similar? 21:47:17 I don't know. 21:47:33 their kvm based instead of xen 21:47:37 i dont knwo much more 21:47:55 Basically, someone needs to say "I'm messing with the IBM stuff and I'm interested in driving Fedora to GREAT SUCCESS!" Or... um... put it on the back burner. 21:48:02 My $0.02. 21:48:34 Anyone here interested in finding out more info on the IBM cloud? 21:48:36 I mean, let's face it: bazillions of people are using EC2 right now, and IBM's stuff is a newly announced beta. 21:48:42 So EC2 is clearly more pressing. 21:49:06 EC2 is also more pressing so we can nuke all the FC4/6/8 images. :) 21:49:08 That said, if someone is Very Interested... 21:49:17 ...but seems like... Not. 21:49:17 didnt SGI also announce a 'cloud' this week.. 21:49:26 and once we have a standard way of building images they should be "simular" 21:49:29 LOL 21:49:34 The SGI cloud? srsly? 21:49:43 yeah.. I think so. 21:49:55 it sounds like cloud has reached that level of ubiquity 21:50:00 They did, but it didn't sound much like a cloud. 21:50:04 its like Staples announcing they do Linux support now 21:50:06 All right, since no one seems to be rushing forward to take IBM... I think it's time for Open Floor time. 21:50:16 I propose we wait for more info to make it to the list; there clearly isn't enough interest or even info about the IBM cloud to do anything yet. 21:50:18 what does taking IBM mean. 21:50:30 that can be open floor 21:50:30 Well, isn't SGI Rackable now? That isn't surprising 21:50:33 gholms, I agree. 21:50:41 #topic Open Floor 21:50:53 Who has questions? 21:51:01 Or topics for the bully pulpit? 21:51:04 Couple of things: 21:51:28 Ubuntu seem to have niceish EC2/Eucalyptus init scripts, 21:51:37 I don't have anything but I did want to mention I did this ticket for FESCo the other day: 21:51:49 we should see if they've got anything we could derive inspiration from/lift wholesale. 21:51:52 https://fedorahosted.org/fedora-engineering-services/ticket/1 21:52:51 * huff has to run ill check the mailing list later or shoot me an email if you need anythign form me 21:53:24 Other thing's a bit of an odd one: 21:53:38 ewan: What sorts of init scripts? 21:53:38 mmcgrath, nice. 21:54:01 mmcgrath: Reminds me of all the VPSs that way they run on "CentOS." 21:54:05 *say they 21:54:14 :) 21:54:52 gholms: Importing SSH keys etc. I haven't examined them too closely, but they're not short, so it might be worth seeing what they're up to. 21:55:20 ewan: Are you okay with taking that on as an action item? 21:55:56 gholms: Yes, I can have a look at them certainly. I'll try to report some impressions back to the list. 21:56:08 #action ewan to look at Ubuntu's EC2 init scripts 21:56:16 It might also be useful to look at what Turnkey Linux is doing, too. 21:56:39 Since they've got, afaict, a whole *library* of images. 21:56:59 All of which are 100% open source, although whether that means they're easy to find, I couldn't say. 21:57:12 ewan: You had another thing to bring up? 21:57:16 http://www.turnkeylinux.org/docs/tklpatch 21:57:32 Other (oddish) thing: Amazon's EC2 control panel offers 'Fedora' as a platform, but most of the things so listed wouldn't meet the trademark guidelines if you burnt them to a CD. Do we want to do anything about that use of the name and logo? 21:58:27 Sounds like a Board question. 21:59:32 Hm. 21:59:41 Well... 21:59:44 It's definitely hmm-worthy. 21:59:54 ...that's definitely the backdrop of basically everything we're doing. 22:00:01 I don't have a strong opinon on this one, but it struck me as worth thinking about. 22:00:09 Well, I've got some opinions. :) 22:00:17 When's the next Board meeting? Should someone bring it up then and see what everyone thinks? 22:00:20 This will *definitely* be an issue. 22:00:32 Well, Paul already knows about it, that's certain. 22:00:59 I'd be hesitant to do anything until we get an official image up. 22:01:00 I myself have deferred talking much about it until we have a good solution for them, since I think it's mostly a question of being able to comply technically. 22:01:05 gholms, exactly so. 22:01:08 Which means: 22:01:15 1. Get our shit together; 22:01:27 2. Work to get Amazon in compliance. 22:02:00 worksforme 22:02:02 +1 22:02:09 "And that's all I have to say about that." 22:02:35 Anything else? 22:02:54 Not from me. 22:03:37 Dinner awaits! 22:04:16 #endmeeting