From owner-freebsd-cloud@freebsd.org Wed Dec 27 19:16:00 2017 Return-Path: Delivered-To: freebsd-cloud@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B8D43EA79F8 for ; Wed, 27 Dec 2017 19:16:00 +0000 (UTC) (envelope-from 01000160996717b2-70167d82-c887-4e1e-b4a6-924bd8eafd55-000000@amazonses.com) Received: from a8-176.smtp-out.amazonses.com (a8-176.smtp-out.amazonses.com [54.240.8.176]) (using TLSv1 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7E8327220D for ; Wed, 27 Dec 2017 19:16:00 +0000 (UTC) (envelope-from 01000160996717b2-70167d82-c887-4e1e-b4a6-924bd8eafd55-000000@amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ae7m2yrxjw65l2cqdpjxuucyrvy564tn; d=tarsnap.com; t=1514402158; h=Subject:To:References:Cc:From:Message-ID:Date:MIME-Version:In-Reply-To:Content-Type:Content-Transfer-Encoding; bh=A+QQQSfvc4An9zrZL/VVMf+CgPAQO+5sHVhmMMeY1E8=; b=IBy6ROLteH53e+2kf/5z6Tkb6LtjT18kKHXPEUBccptQ1xZlegVP7Ayj/1GtZVOA /b10F55Z54e0JCE2BbwhrWPWowIv92WZmiil1eoP+tumQ4g9Te84flNkAzsYRZ9/gMI Ddk6M5V6AYAe8XC4grsiFQtBy3kZmX+7ZZizYauI= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1514402158; h=Subject:To:References:Cc:From:Message-ID:Date:MIME-Version:In-Reply-To:Content-Type:Content-Transfer-Encoding:Feedback-ID; bh=A+QQQSfvc4An9zrZL/VVMf+CgPAQO+5sHVhmMMeY1E8=; b=cJFDRRagyvxe1nxyXp4c3bb723il5XltTxTMrQKAi+uL3bQc2X5mojShYmifkvo+ KkRmcHJdoANaSQboZlGVWU8OQxkPttgpWxL3pG0BF7LPa8RlyJ6DJNgcC40AN/MrvDX E0pahOv7VZ2h32CqKhLJi72HEx6JE8iZGw4flt/c= Subject: Re: AMI building AMI To: Rafal Lukawiecki References: <085D225B-2E99-4540-B693-223087B14A27@rafal.net> <0100016099578ea7-02da1d5c-997d-47be-9cd8-dc6b75bbeda6-000000@email.amazonses.com> <8BCB67B8-DE56-491A-8E6A-95AFB83F71D6@rafal.net> Cc: freebsd-cloud@freebsd.org From: Colin Percival Message-ID: <01000160996717b2-70167d82-c887-4e1e-b4a6-924bd8eafd55-000000@email.amazonses.com> Date: Wed, 27 Dec 2017 19:15:58 +0000 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.5.1 MIME-Version: 1.0 In-Reply-To: <8BCB67B8-DE56-491A-8E6A-95AFB83F71D6@rafal.net> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-SES-Outgoing: 2017.12.27-54.240.8.176 Feedback-ID: 1.us-east-1.Lv9FVjaNvvR5llaqfLoOVbo2VxOELl7cjN0AOyXnPlk=:AmazonSES X-BeenThere: freebsd-cloud@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "FreeBSD on cloud platforms \(EC2, GCE, Azure, etc.\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Dec 2017 19:16:00 -0000 On 12/27/17 11:02, Rafal Lukawiecki wrote: >> On 27 Dec 2017, at 18:59, Colin Percival wrote: >> I can build an 11.1 AMI Builder AMI tomorrow if you'd like. Using this will >> be better than trying to clean a "live" instance, since even if you delete >> all the files you don't want to include, they'll still be lingering in the >> free disk space. If this includes AWS keys, this could have very bad results. > > Thank you, Colin. Yes, it would be useful, but it can wait till you return from your Japanese conference. You don't want to wait that long -- AsiaBSDCon isn't until March! > Will I be able to use it in eu-west-1 or do I need to build in us-east-1, > save to s3 and import into eu? I've only built the AMI Builders in us-east-1 in the past. But it's very easy to copy AMIs between regions -- you don't need to save to S3 and then re-import them, just use the "copy AMI" command (available as an API call or via the AWS Console). -- Colin Percival Security Officer Emeritus, FreeBSD | The power to serve Founder, Tarsnap | www.tarsnap.com | Online backups for the truly paranoid