[ec2-beta] Springloops Deployment via SFTP to EC2

[Micah Walter]

Eric,
Thanks for the info. I sort of get it. After looking around on the web  
it seems that SFTP ( which is already a part of openssh on our AMI)  
would be ideal. So now I just need to figure out how to set it up with  
a username and password for Springloops ( I don't think I have a way  
with Springloops to provide a keypair ).  I am guessing this has to do  
with the /etc/ssh/ssh_config file...

I think the ideal setup would be to keep the ssh login with no  
passwords/ssh keypair but perhaps create a special user for sftp with  
a password.. but I'm not really sure.

-micah

On Apr 5, 2009, at 3:07 PM, Eric Hammond wrote:

> Micah:
>
> The ssh key setup on EC2 is a secure way to give access to  an
> individual user for an instance of a public image.  Once you have an
> instance running, you are free to do whatever you want with it just  
> like
> any other server you control.
>
> At this point, the question is not particularly specific to EC2.  It's
> just a general "What's best on an Ubuntu server?".
>
> Using ssh keys is generally more secure than passwords.  Long, random
> passwords are generally more secure than short, human generated
> passwords.  Pull is generally more secure than push (for the  
> destination
> host).  SFTP is generally more secure than FTP.
>
> --
> Eric Hammond
> ehammond at thinksome.com
>
>
>
> Micah Walter wrote:
>> Eric,
>> Sorry for the delay getting back to you. This question about  
>> deploying
>> from Springloops sort of stems from my lack of understanding about
>> security and ssh and how the Ubuntu EC2 logins are set up. So I
>> appologize if this sounds kinda silly..
>>
>> Springloops is a Subversion repository service online. It allows you
>> to set up multiple server destinations which it can deploy your
>> projects to via FTP or SFTP. It's pretty simple actually, but I am
>> curious as to weather or not this is a safe thing to do as it would
>> require setting up an FTP server on my instance.
>>
>> So far I have just been using ssh to login with my keypair, and have
>> been using scp to move files up and down to my local machine... would
>> there be a risk in setting up an FTP server, or maybe a better way to
>> ask this would be, would this be in keeping with the current ssh
>> keypair style login/security model for the server itself?
>> -micah
>>
>>
>>
>>
>> Micah:
>>
>> It's not clear to me what you're trying to accomplish.  Are you  
>> wanting
>> to run the web app on EC2 or on Springloops.com?  Are you trying to
>> access subversion from EC2? or FTP?  What about the key settings
>> concerns you and what key settings are you referring to?
>>
>> If you're still having problems, could you rephrase your question and
>> provide more details?
>>