[ec2-beta] some feedback on the i386 image

[Soren Hansen]

On Mon, Jan 12, 2009 at 05:03:36PM +0000, Mark Shuttleworth wrote:
>> I really like being able to type "ec2intrepid" or "ec2hardy" (custom
>> commands) and within a minute be ssh'd in to a brand new Ubuntu
>> instance on EC2.  Going through extra prompts and having to
>> re-connect gets old, especially if I have to jot down new passwords
>> every time.
> It should be possible to have the password setup so that it's
> consistent across your machines. One would not want to have to store
> the credential itself, but it might be possible to store the passwd
> entry (salted, crypted or hashed) and re-use that across machines.

What I'd really like to do is to disable password based logins and use
an empty password. This allows you to log in, and then gives you the
same experience as the live cd. The problem being that if a malicious
user manages to get hold of a shell somehow (web app compromise or
whatever), they've effectively rooted the box.

-- 
Soren Hansen               | 
Virtualisation specialist  | Ubuntu Server Team
Canonical Ltd.             | http://www.ubuntu.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 315 bytes
Desc: Digital signature
Url : https://lists.ubuntu.com/mailman/private/ec2/attachments/20090114/65522479/attachment-0002.pgp