Re: Official cloud/live images ?

2024-03-26 Thread Jan-Benedict Glaw
On Tue, 2024-03-26 12:37:44 +0100, Enrico Weigelt, metux IT consult 
 wrote:
> On 25.03.24 21:24, Jan-Benedict Glaw wrote:
> 
> > For my own CI builds, I'm cross-building NetBSD from Linux for all
> > port/cpus and use that generated amd64 install ISO to do an autoated
> > installation into Qemu (simple `expect` script.)
> 
> Can you share how exactly you're doing it ?

I'll happily share some scripts, but they're somewhat tied to my CI
setup here and thus not easy to use without the surrounding stuff.
(For example, there's a generic "create a VM" script running Qemu or
SIMH, maybe creating virtual disks or overlays, maybe extracting a
tarball with NetBSD's release directory for getting the Install ISO
etc.) So I kind of hesitate throwing it into the public without docs,
but I'll drop you the scripts with some brief comments so that you'd
easily cut out the "relevant" parts.)

  An actual longer-term goal is to package them to an extend where I
can easily re-install all the CI setup, but I'm not yet there.
However, I'm using that stuff on a day-to-day basis for generic
Linux/GCC/Binutils/GDB/glibc/NetBSD/... CI jobs and it is at least fit
for that job.

MfG, JBG

-- 


signature.asc
Description: PGP signature


Re: Official cloud/live images ?

2024-03-26 Thread Enrico Weigelt, metux IT consult

On 25.03.24 21:24, Jan-Benedict Glaw wrote:


For my own CI builds, I'm cross-building NetBSD from Linux for all
port/cpus and use that generated amd64 install ISO to do an autoated
installation into Qemu (simple `expect` script.)


Can you share how exactly you're doing it ?


--mtx

--
---
Hinweis: unverschlüsselte E-Mails können leicht abgehört und manipuliert
werden ! Für eine vertrauliche Kommunikation senden Sie bitte ihren
GPG/PGP-Schlüssel zu.
---
Enrico Weigelt, metux IT consult
Free software and Linux embedded engineering
i...@metux.net -- +49-151-27565287


Re: Official cloud/live images ?

2024-03-26 Thread Enrico Weigelt, metux IT consult

On 26.03.24 10:33, Rhialto wrote:

On Mon 25 Mar 2024 at 20:53:49 +0100, Enrico Weigelt, metux IT consult wrote:

I'm currently setting up CI jobs for building Xorg on NetBSD, but I've
only found an amd64 live image, where sshd is pretty locked down
(no root login, etc), so I had to manually log in on console and change
sshd config. That's quite unpleasant - I'd rather directly use the
official release images instead.


You can use cloud-init-like data from a metadata service to specify a
login with ssh key. See
/usr/src/distrib/amd64/liveimage/emuimage/rc.conf.emuimage and
/usr/src/distrib/utils/embedded/files/ec2_init


I've seen the init script - but it would be really complicated to make
that work with just a qemu in a docker container available.


--mtx

--
---
Hinweis: unverschlüsselte E-Mails können leicht abgehört und manipuliert
werden ! Für eine vertrauliche Kommunikation senden Sie bitte ihren
GPG/PGP-Schlüssel zu.
---
Enrico Weigelt, metux IT consult
Free software and Linux embedded engineering
i...@metux.net -- +49-151-27565287


Re: Official cloud/live images ?

2024-03-26 Thread Rhialto
On Mon 25 Mar 2024 at 20:53:49 +0100, Enrico Weigelt, metux IT consult wrote:
> I'm currently setting up CI jobs for building Xorg on NetBSD, but I've
> only found an amd64 live image, where sshd is pretty locked down
> (no root login, etc), so I had to manually log in on console and change
> sshd config. That's quite unpleasant - I'd rather directly use the
> official release images instead.

You can use cloud-init-like data from a metadata service to specify a
login with ssh key. See
/usr/src/distrib/amd64/liveimage/emuimage/rc.conf.emuimage and
/usr/src/distrib/utils/embedded/files/ec2_init

-Olaf.
-- 
___ Olaf 'Rhialto' Seibert
\X/ There is no AI. There is just someone else's work.   --I. Rose


signature.asc
Description: PGP signature


Re: Official cloud/live images ?

2024-03-26 Thread Enrico Weigelt, metux IT consult

On 25.03.24 21:24, Jan-Benedict Glaw wrote:


For my own CI builds, I'm cross-building NetBSD from Linux for all
port/cpus and use that generated amd64 install ISO to do an autoated
installation into Qemu (simple `expect` script.)


hmm, sounds a bit complex ... I just wanted to add some more images
to our CI, not bootstrapping a whole OS. And it's probably running
for quite some time (the pipeline is already quite huge)



--mtx

--
---
Hinweis: unverschlüsselte E-Mails können leicht abgehört und manipuliert
werden ! Für eine vertrauliche Kommunikation senden Sie bitte ihren
GPG/PGP-Schlüssel zu.
---
Enrico Weigelt, metux IT consult
Free software and Linux embedded engineering
i...@metux.net -- +49-151-27565287


Re: Official cloud/live images ?

2024-03-26 Thread Enrico Weigelt, metux IT consult

On 25.03.24 17:19, Greg A. Woods wrote:

Hi,


are there any official live images that allow direct login via ssh
(no password), which can directly be used for cloud / continous
integration jobs ?


I would think that would be a very bad idea for a publicly distributed
official OS image!


note that those images are only meant to be used by some cloud
infrastructure that's handling proper security isolation (in those cases
nobody except the host could even reach the ssh port).

FreeBSD does have those images:

https://download.freebsd.org/ftp/releases/CI-IMAGES/

(not sure whether "CI" here stands for continuous integration or cloud
infrastructure)


I would think it should be trivial to take a copy of the official image,
modify it as desired, then use that modified copy for one's own uses.


In context of public infrastructures, it's not that easy. Besides the
need for some appropriate storage place (where ci jobs can fetch it
from) it's also a matter of reproducability and trust.

For example, if I submit my on private image to freedesktop.org, the
whole org needs to trust me I didn't mess something up. And we have to
repeat all steps for each new upstream release.

Having an official image, where I directly can ssh into would skip that
all. (with FreeBSD we're already doing it that way).

It would be easier if I somehow could inject a script (eg. by separate
volume) that's handling my configuration.


--mtx

--
---
Hinweis: unverschlüsselte E-Mails können leicht abgehört und manipuliert
werden ! Für eine vertrauliche Kommunikation senden Sie bitte ihren
GPG/PGP-Schlüssel zu.
---
Enrico Weigelt, metux IT consult
Free software and Linux embedded engineering
i...@metux.net -- +49-151-27565287


Re: Official cloud/live images ?

2024-03-25 Thread Greg A. Woods
At Mon, 25 Mar 2024 20:53:49 +0100, "Enrico Weigelt, metux IT consult" 
 wrote:
Subject: Official cloud/live images ?
>
> are there any official live images that allow direct login via ssh
> (no password), which can directly be used for cloud / continous
> integration jobs ?

I would think that would be a very bad idea for a publicly distributed
official OS image!

> I'm currently setting up CI jobs for building Xorg on NetBSD, but I've
> only found an amd64 live image, where sshd is pretty locked down
> (no root login, etc), so I had to manually log in on console and change
> sshd config. That's quite unpleasant - I'd rather directly use the
> official release images instead.

I would think it should be trivial to take a copy of the official image,
modify it as desired, then use that modified copy for one's own uses.

--
Greg A. Woods 

Kelowna, BC +1 250 762-7675   RoboHack 
Planix, Inc.  Avoncote Farms 


pgpATMipTjTLS.pgp
Description: OpenPGP Digital Signature


Re: Official cloud/live images ?

2024-03-25 Thread Jan-Benedict Glaw
On Mon, 2024-03-25 20:53:49 +0100, Enrico Weigelt, metux IT consult 
 wrote:
> are there any official live images that allow direct login via ssh
> (no password), which can directly be used for cloud / continous
> integration jobs ?
> 
> I'm currently setting up CI jobs for building Xorg on NetBSD, but I've
> only found an amd64 live image, where sshd is pretty locked down
> (no root login, etc), so I had to manually log in on console and change
> sshd config. That's quite unpleasant - I'd rather directly use the
> official release images instead.

For my own CI builds, I'm cross-building NetBSD from Linux for all
port/cpus and use that generated amd64 install ISO to do an autoated
installation into Qemu (simple `expect` script.) I use that generated
image as a r/o image with a writeable overlay (all plain Qemu
functionality) to have "throw-away" instances (different only by MAC
address) that I can easily start and end to do CI builds within a
NetBSD environment.

MfG, JBG

-- 


signature.asc
Description: PGP signature


Official cloud/live images ?

2024-03-25 Thread Enrico Weigelt, metux IT consult

Hello folks,


are there any official live images that allow direct login via ssh
(no password), which can directly be used for cloud / continous
integration jobs ?

I'm currently setting up CI jobs for building Xorg on NetBSD, but I've
only found an amd64 live image, where sshd is pretty locked down
(no root login, etc), so I had to manually log in on console and change
sshd config. That's quite unpleasant - I'd rather directly use the
official release images instead.


thx
--mtx

--
---
Hinweis: unverschlüsselte E-Mails können leicht abgehört und manipuliert
werden ! Für eine vertrauliche Kommunikation senden Sie bitte ihren
GPG/PGP-Schlüssel zu.
---
Enrico Weigelt, metux IT consult
Free software and Linux embedded engineering
i...@metux.net -- +49-151-27565287