touch-packages team mailing list archive

[Hadmut Danisch <hadmut@xxxxxxxxxx>]

As far as I can see the ubuntu template uses debootstrap and not the
core image.

And a plain lxc image created with the ubuntu template takes 379 MB
(btrfs file system), while an unpacked ubuntu core has just 145 MB.

So I doubt that this is the same.

It is, btw., not a good idea to include vom and sshd by default. What
would a lxc container need a sshd for by default?

On the contrary, it is definitely a severe security problem to install
an sshd on y machine , which has a default user ubuntu with default
password ubuntu and ability to become root with the same default
password.

Who creates such security gaps?

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1514080

Title:
  lxc-templates lacks template for ubuntu core

Status in lxc package in Ubuntu:
  New

Bug description:
  Hi,

  lxc-templates comes with tamples for ubuntu and ubuntu-cloud, but both
  are rather large and „complete”, too large for most applications. E.g.
  it does not make sense to have multiple consoles running in a
  container or an sshd.

  Would be nice to have a template for ubuntu-core as an absolute
  minimal system.

  ProblemType: Bug
  DistroRelease: Ubuntu 15.10
  Package: lxc-templates 1.1.4-0ubuntu1.1
  ProcVersionSignature: Ubuntu 4.2.0-16.19-generic 4.2.3
  Uname: Linux 4.2.0-16-generic x86_64
  ApportVersion: 2.19.1-0ubuntu4
  Architecture: amd64
  CurrentDesktop: XFCE
  Date: Sat Nov  7 16:04:54 2015
  InstallationDate: Installed on 2015-10-08 (29 days ago)
  InstallationMedia: Xubuntu 15.10 "Wily Werewolf" - Alpha amd64 (20150924)
  SourcePackage: lxc
  UpgradeStatus: No upgrade log present (probably fresh install)
  defaults.conf:
   lxc.network.type = veth
   lxc.network.link = lxcbr0
   lxc.network.flags = up
   lxc.network.hwaddr = 00:16:3e:xx:xx:xx

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1514080/+subscriptions