Ubuntu
lxc package

lxc-templates lacks template for ubuntu core

Bug #1514080 reported by Hadmut Danisch
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
lxc (Ubuntu)
Won't Fix
Undecided
Unassigned

Bug Description

Hi,

lxc-templates comes with tamples for ubuntu and ubuntu-cloud, but both are rather large and „complete”, too large for most applications. E.g. it does not make sense to have multiple consoles running in a container or an sshd.

Would be nice to have a template for ubuntu-core as an absolute minimal system.

ProblemType: Bug
DistroRelease: Ubuntu 15.10
Package: lxc-templates 1.1.4-0ubuntu1.1
ProcVersionSignature: Ubuntu 4.2.0-16.19-generic 4.2.3
Uname: Linux 4.2.0-16-generic x86_64
ApportVersion: 2.19.1-0ubuntu4
Architecture: amd64
CurrentDesktop: XFCE
Date: Sat Nov 7 16:04:54 2015
InstallationDate: Installed on 2015-10-08 (29 days ago)
InstallationMedia: Xubuntu 15.10 "Wily Werewolf" - Alpha amd64 (20150924)
SourcePackage: lxc
UpgradeStatus: No upgrade log present (probably fresh install)
defaults.conf:
 lxc.network.type = veth
 lxc.network.link = lxcbr0
 lxc.network.flags = up
 lxc.network.hwaddr = 00:16:3e:xx:xx:xx

Revision history for this message
Hadmut Danisch (hadmut) wrote :
Revision history for this message
Stéphane Graber (stgraber) wrote :

The ubuntu template uses the deb based ubuntu-core image with the addition of vim and sshd.

The new Ubuntu Core product (snappy) cannot be run inside a container at this time and would actually be significantly larger than what the ubuntu template gets you.

Revision history for this message
Hadmut Danisch (hadmut) wrote :

As far as I can see the ubuntu template uses debootstrap and not the core image.

And a plain lxc image created with the ubuntu template takes 379 MB (btrfs file system), while an unpacked ubuntu core has just 145 MB.

So I doubt that this is the same.

It is, btw., not a good idea to include vom and sshd by default. What would a lxc container need a sshd for by default?

On the contrary, it is definitely a severe security problem to install an sshd on y machine , which has a default user ubuntu with default password ubuntu and ability to become root with the same default password.

Who creates such security gaps?

Revision history for this message
Serge Hallyn (serge-hallyn) wrote :

The download template (which is recommended) installs no ssh and no ubuntu password.

Revision history for this message
Christian Brauner (cbrauner) wrote :

LXC 1.1.* is deprecated so marking this as wont fix. Please update to a newer version of LXC. Also, it seems that Serge's and Stéphane's comments make this a valid candidate for invalid.

Changed in lxc (Ubuntu):
status: New → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.