euca2ools: requires EC2 certificate from ec2-ami-tools in multiverse

Bug #479836 reported by Eric Hammond
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fix Released
euca2ools (Debian)
Fix Released
euca2ools (Ubuntu)
Dustin Kirkland 

Bug Description

Binary package hint: euca2ools

When running a Karmic AMI on EC2, I tried to bundle the running instance using euca-bundle-vol but ran into a required --ec2cert option.

In order to create this bundle to create a new AMI on EC2, you need to have the EC2 X509 public key certificate which defaults to /etc/ec2/amitools/cert-ec2.pem but this file is only available in the ec2-ami-tools package which is itself in multiverse.

It might be worth seeing if /etc/ec2/amitools/cert-ec2.pem can be added to the euca2ools package in main so that an EC2 instance can be rebundled without adding packages from multiverse.

ProblemType: Bug
Architecture: i386
Date: Tue Nov 10 07:39:09 2009
DistroRelease: Ubuntu 9.10
Ec2AMI: ami-1515f67c
Ec2AMIManifest: ubuntu-images-us/ubuntu-karmic-9.10-i386-server-20091027.1.manifest.xml
Ec2AvailabilityZone: us-east-1a
Ec2InstanceType: m1.small
Ec2Kernel: aki-5f15f636
Ec2Ramdisk: ari-0915f660
Package: euca2ools 1.0+bzr20091007-0ubuntu1
PackageArchitecture: all
ProcVersionSignature: User Name 2.6.31-302.7-ec2
SourcePackage: euca2ools
Tags: ec2-images
Uname: Linux 2.6.31-302-ec2 i686

Revision history for this message
Eric Hammond (esh) wrote :
Erik Kronberg (eakron)
Changed in euca2ools (Ubuntu):
status: New → Confirmed
Thierry Carrez (ttx)
Changed in euca2ools (Ubuntu):
importance: Undecided → Low
status: Confirmed → Triaged
Changed in euca2ools (Ubuntu):
assignee: nobody → Dustin Kirkland (kirkland)
Changed in euca2ools (Ubuntu):
status: Triaged → In Progress
Revision history for this message
Dustin Kirkland  (kirkland) wrote :

Okay, I'm attaching a patch, adding this functionality.

I'm not sure about the feasibility of doing this, though. There may be some legal/political concerns with distributing Amazon's public key within this package. I'm not sure. I'm consulting with the powers that be...

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package euca2ools - 1.1~bzr238-0ubuntu2

euca2ools (1.1~bzr238-0ubuntu2) lucid; urgency=low

  * debian/cert-ec2.pem, bin/euca-bundle-vol, debian/links: add the ec2
    public cert to this package, such that users can build EC2 images
    without installing ec2-ami-tools from multiverse, LP: #479836
 -- Dustin Kirkland <email address hidden> Thu, 07 Jan 2010 20:22:22 -0600

Changed in euca2ools (Ubuntu):
status: In Progress → Fix Released
Revision history for this message
Scott Moser (smoser) wrote :
Changed in euca2ools:
status: New → Fix Committed
Changed in euca2ools:
status: Fix Committed → Fix Released
Revision history for this message
Scott Moser (smoser) wrote :

Some notes...
 * I just forwarded this to debian (
 * this is now the only ubuntu delta
 * the last remnants of the default '--ec2cert' path of /usr/share/euca2tools/cert-ec2.pem were removed with upstream commit aa1b331513c4c73a3075f1512086ee67ad2af0bc [1], which was usefully annotated "A bunch more of the refactoring completed. ".
 * As it stands right now, I think users either have to set EUCALYPTUS_CERT to /usr/share/euca2ools/cert-ec2.pem or use --ec2cert flag.


Changed in euca2ools (Debian):
status: Unknown → New
Changed in euca2ools (Debian):
status: New → Fix Committed
Changed in euca2ools (Debian):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.