Re: [lxc-devel] Strawman proposal... Default passwords in templates...

2014-01-03 Thread Serge Hallyn
You can already (with some templates at least) specify an ssh key to inject. I think defaulting to using ~/.ssh/id_rsa.pub is bad, or at least better left for a lxc-create wrapper which can always default to that, though I could be swayed on that. It's not for lxc-create itself to do, since there

Re: [lxc-devel] Strawman proposal... Default passwords in templates...

2014-01-03 Thread Alvaro Miranda Aguilera
Hello, just sharing my 2 cents here. What about 2 separate options? If the user that is running lxc-create have ~/.ssh/id_rsa.pub use that for root. and allow use an external id_rsa.pub as an argument in the command line? In Vagrant, a tool used to create vm's in virtualbox/vmware, they have a

Re: [lxc-devel] Strawman proposal... Default passwords in templates...

2014-01-02 Thread Michael H. Warfield
On Wed, 2014-01-01 at 23:50 -0600, Serge Hallyn wrote: > Quoting Michael H. Warfield ([email protected]): > > > Why not purely random? I also liked the suggestion of putting the > > > password in a file under $lxcpath/$lxcname - though chmod 600 owned > > > by the calling user, not root. I prefe

Re: [lxc-devel] Strawman proposal... Default passwords in templates...

2014-01-01 Thread Serge Hallyn
Quoting Michael H. Warfield ([email protected]): > > Why not purely random? I also liked the suggestion of putting the > > password in a file under $lxcpath/$lxcname - though chmod 600 owned > > by the calling user, not root. I prefer not outputting it in > > stdout during create, but am not *str

Re: [lxc-devel] Strawman proposal... Default passwords in templates...

2014-01-01 Thread Michael H. Warfield
On Wed, 2014-01-01 at 14:26 -0600, Serge Hallyn wrote: > Quoting Michael H. Warfield ([email protected]): > > [Holiday is mostly over... Most of the family has departed to their > > homes or other homes. Grandpa lays back to a late nap - errr - > > E-Mail...] > > > > Ok all, > > > > Serge and

Re: [lxc-devel] Strawman proposal... Default passwords in templates...

2014-01-01 Thread Serge Hallyn
Quoting Michael H. Warfield ([email protected]): > [Holiday is mostly over... Most of the family has departed to their > homes or other homes. Grandpa lays back to a late nap - errr - > E-Mail...] > > Ok all, > > Serge and Stéphane know my background as a security researcher and > expert. This

Re: [lxc-devel] Strawman proposal... Default passwords in templates...

2013-12-26 Thread Dwight Engen
On Wed, 25 Dec 2013 18:54:57 -0500 "Michael H. Warfield" wrote: > [Holiday is mostly over... Most of the family has departed to their > homes or other homes. Grandpa lays back to a late nap - errr - > E-Mail...] > > Ok all, > > Serge and Stéphane know my background as a security researcher an

Re: [lxc-devel] Strawman proposal... Default passwords in templates...

2013-12-26 Thread Michael H. Warfield
On Thu, 2013-12-26 at 13:02 -0500, Dwight Engen wrote: > On Wed, 25 Dec 2013 18:54:57 -0500 > "Michael H. Warfield" wrote: > > > [Holiday is mostly over... Most of the family has departed to their > > homes or other homes. Grandpa lays back to a late nap - errr - > > E-Mail...] > > > > Ok all

[lxc-devel] Strawman proposal... Default passwords in templates...

2013-12-25 Thread Michael H. Warfield
[Holiday is mostly over... Most of the family has departed to their homes or other homes. Grandpa lays back to a late nap - errr - E-Mail...] Ok all, Serge and Stéphane know my background as a security researcher and expert. This has been something that has been bothering me for some time and