[lxc-devel] Download template images default password

[Stéphane Graber]

On Wed, Oct 29, 2014 at 07:51:59PM +0900, TAMUKI Shoichi wrote:
> Hello,
> 
> From: Stephane Graber <stgraber at ubuntu.com>
> Subject: [lxc-devel] Download template images default password
> Date: Tue, 28 Oct 2014 10:56:50 -0400
> 
> > Just wanted to give a heads up to everyone that I'm now working on
> > changing all the download template generated images to stop shipping
> > with default user accounts and passwords.
> > 
> > That means that all the download images will now be much more similar.
> > No distro-specific user accounts and no root password (as in "!", not an
> > empty string). The post-create message will recommend using lxc-attach
> > or changing the password using chroot.
> 
> Thank you for your work.  I am looking forward to that.
> 
> There is one point that I would like the password treatment to have
> the same behavior between the following cases:
> 
>   - using the distro-specific template with '-t' option to lxc-create
>   - using download template (for non-privileged users)

While I'd love for every template maintainer to follow suit and ship
with no users, no root password and no network services by default, I
don't think it'd be very popular to force that upon them.

I think there's still much discussion that need to happen around our
templates and what we want things to look like in the future and I hope
we can make that a main thing for 1.2.

My current view is that we should be extending the download template to
cover some of the remaining use cases of regular templates and then
maybe one day move the templates outside of the main LXC source tree,
instead having them reside in their own branch where people who want to
hand roll their own images can use them. But having our default
experience be around pre-built images offering a consistent and fast
experience to our users.


I however don't expect this to happen overnight and so I think that
first working towards providing a similar feature set across templates
and offer more consistency is a very worthwhile goal in the near future
and indeed something we should spend time on for 1.2.

> 
> Regards,
> TAMUKI Shoichi
> _______________________________________________
> lxc-devel mailing list
> lxc-devel at lists.linuxcontainers.org
> http://lists.linuxcontainers.org/listinfo/lxc-devel

-- 
Stéphane Graber
Ubuntu developer
http://www.ubuntu.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.linuxcontainers.org/pipermail/lxc-devel/attachments/20141029/d4ab4e47/attachment.sig>