Amazon Web Services




Debian 5.0 Lenny (stable) Server

Click for a printer friendly version of this document Printer Friendly Save to del.icio.us
Average Review:

A clean, base install of Debian 5.0 Lenny (stable), built by Eric Hammond as part of the Alestic.com series [update 2009-10-11]

Submitted By: Eric Hammond  
AMI ID: ami-dcf615b5
AMI Manifest: alestic/debian-5.0-lenny-base-20091011.manifest.xml
License: Public
Operating System: Linux/Unix

Pick the Right Release

For a complete list of the Debian and Ubuntu AMIs available in this series including AMIs in the European EC2 region, please see the following web page:

Selecting the correct AMI for your needs will improve your EC2 experience.

Description

This AMI is a clean, base install of Debian 5.0 Lenny (stable), built by Eric Hammond. This 32-bit AMI is for running on the 32-bit instance sizes including: m1.small, c1.medium

Features

Features include:

  • Debian 5.0 Lenny with upgraded packages (as of 2009-10-11)
  • Amazon EC2 AMI tools (1.3-34544 20071010) installed and patched for Debian
  • Uses Amazon's newer 2.6.21 kernel (2.6.21.7-2.fc8xen-ec2-v1.0)

  • Includes 2.6.21 kernel modules

  • openssh-server installed
  • On first boot, runs instance user-data script if it starts with #!
  • Generate new ssh host keys on first boot and output fingerprints
  • ca-certificates installed to support SSL in ec2-bundle-upload
  • libc6-xen installed for performance
  • /etc/apt/sources.list for lenny main contrib non-free
  • /etc/event.d/tty[2-6] removed to avoid error messages in logs
  • Shadow passwords enabled
  • root password locked
  • ssh PasswordAuthentication disabled
  • 10GB root (/) partition
  • Network: DHCP on eth0, loopback on lo, simple /etc/hosts with localhost
  • root ssh public key creditials retrieved from instance parameters or ephemeral store on startup (standard Amazon EC2 ssh access for public AMIs)
  • Added "UseDNS no" to /etc/ssh/sshd_config as recommended by http://docs.amazonwebservices.com/AWSEC2/2007-03-01/DeveloperGuide/public-ami-guidelines.html
  • Comment appended to /etc/motd
  • Locale en_US, Timezone UTC

Support

If you use or are thinking of using this AMI, please subscribe to the ec2debian Google Group where you will find out about updates to the Debian AMIs and tips for running Debian on Amazon EC2.

To subscribe, send an email mesage to ec2debian-subscribe@googlegroups.com

Support is also available through the above forum.

Build Process

Advanced users may consult the following page for information on how this AMI was built and to get instructions for building their own.

History

-

  • Use new 2.6.21 kernel, ramdisk, and kernel modules from Amazon (security fix)
  • Add Alestic PPA to apt sources on Ubuntu
  • Install runurl from Alestic PPA
  • Pin the ec2-ami-tools package version so it does not get downgraded
  • All packages upgraded to latest versions

ami-ff46a796 - alestic/debian-5.0-lenny-base-20090804.manifest.xml

  • Upgrade EC2 AMI tools to 1.3-34544
  • Improve security by running host key regeneration after RNG initialization.
  • All packages upgraded to latest versions

ami-1d729474 - alestic/debian-5.0-lenny-base-20090614.manifest.xml

  • Upgrade EC2 AMI tools to 1.3-31780
  • All packages upgraded to latest versions

ami-e348af8a - alestic/debian-5.0-lenny-base-20090418.manifest.xml

  • Disable ssh PasswordAuthentication by default to improve security
  • Pre-load 2.6.21fc8 XFS kernel module to avoid problems with Amazon's 2.6.21fc8 kernel and XFS.
  • All packages upgraded to latest versions

ami-67fe190e - alestic/debian-5.0-lenny-base-20090215.manifest.xml

  • Lenny 5.0 has been released as "stable".
  • All packages upgraded to latest versions

ami-115db978 - alestic/debian-5.0-lenny-base-20081222.manifest.xml

  • Upgrade EC2 AMI tools to 1.3-34544 20071010 with support for European region eu-west-1
  • All packages upgraded to latest versions

ami-5470943d - alestic/debian-5.0-lenny-base-20081130.manifest.xml

  • New --arch option from patch by Don Spaulding II
  • Upgrade EC2 AMI tools to 1.3-26357 20071010
  • The old 2.6.16 kernel modules are no longer bundled with the image.
  • All packages upgraded to latest versions

ami-10d73379 - alestic/debian-5.0-lenny-base-20080924.manifest.xml

  • bugfix: Mounts /mnt as ephemeral storage with /etc/fstab
  • All packages upgraded to latest versions

ami-3ad43053 - alestic/debian-5.0-lenny-base-20080922.manifest.xml

  • DEFECT: This AMI is missing /etc/fstab and does not mount /mnt as ephemeral storage!
  • bugfix: Only generate ssh host keys on first boot, not on every reboot.
  • All packages upgraded to latest versions

ami-c2fa1eab - alestic/debian-5.0-lenny-base-20080905.manifest.xml

  • All packages upgraded to latest versions

ami-f59e7a9c - alestic/debian-5.0-lenny-desktop-20080803.manifest.xml

  • Build using latest debootstrap v1.0.10
  • Output new ssh host key fingerprints to console log for security.
  • Use newly built kernel modules where fuse supports NFS export.
  • All packages upgraded to latest versions

ami-cfbc58a6 - alestic/debian-5.0-lenny-base-20080629.manifest.xml

  • Original release

Discussion

The 5 most recent discussion messages. View full discussion.

aschildbach
Posts: 4
Registered: 8/22/08
Host Key problem
Posted: Aug 22, 2008 4:48 AM PDT
 
  Click to reply to this thread Reply

With this image, with each reboot, Debian generates a new host key. That means that you are locked out of your SSH account until you delete the old host key reference from your clients .ssh/known_hosts file. Is this intentional?


Eric Hammond
RealName(TM)

Posts: 1,077
Registered: 7/7/07
Re: Host Key problem
Posted: Oct 2, 2008 2:28 AM PDT   in response to: aschildbach
 
  Click to reply to this thread Reply

aschildbach:

Thanks for reporting this.  It should be fixed in recent releases of the AMI.



Reviews
Create Review Write a Review

Great image to build from, Aug 6, 2008 10:12 AM
Reviewer: Lee Azzarello
a great image to build up a custom app server. Small, fast, clean.
Welcome, Guest Help
Login Login