Duplicate SSH Keys Everywhere

Re:Duplicate SSH Keys Everywhere by superuser2 on Tuesday February 17, 2015 @04:58PM (#9065358)

On the same topic, what are the other pitfalls of re-using OS images?

I can think of:

- Hostname conflicts

- SSH key duplication

- Driver issues if the hardware is not the same

Are there more?

This seems like a compelling argument for bootstrapping new instances with configuration management, rather than trying to re-use OS images.

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by achillean on Tuesday February 17, 2015 @05:00PM (#9065375)

Speaking of hostname conflicts: an ISP in Vietnam has configured all their devices to have a reverse DNS name of "localhost"

https://www.shodan.io/search?query=hostname%3Alocalhost

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by JonRB on Tuesday February 17, 2015 @05:35PM (#9065603)

I've experienced this too - I seem to get a few people joining my gameserver from that ISP and I notice the DNS appeared as 'localhost'. Not ideal and I imagine it could break certain things. I always assumed it was a misconfigured internet cafe or something. 'Nice' to know it's a wider issue

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by emmelaich on Wednesday February 18, 2015 @12:14AM (#9067094)

MAC addresses. HP-UX saves them in its startup configs for some reason. A place I worked at used a sample build for its 'gold' build. All builds had the same MAC. Hilarity ensued.

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by Xylakant on Tuesday February 17, 2015 @05:01PM (#9065379)

MAC Address duplication on virtual interfaces for VMs started from a template.

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by shitloadofbooks on Tuesday February 17, 2015 @08:43PM (#9066522)

No (mainstream) Hypervisor does this and you'd run into networking problems pretty quickly if any of those VMs share a network.

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by devicenull on Wednesday February 18, 2015 @02:53PM (#9070573)

Libvirt has serious issues with this https://www.redhat.com/archives/libvirt-users/2014-November/...

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by warrenm on Tuesday February 17, 2015 @05:45PM (#9065663)

Never seen this in years of using VMs

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by icebraining on Tuesday February 17, 2015 @05:42PM (#9065644)

An alternative to typical configuration management (puppet, ansible, etc) is making your own OS installer. I've adapted the Ubuntu installer to turn a blank machine into a running instance of our app in just a couple of days. The client just has to pop-in the CD or flash drive, answer a couple of questions, and go grab a cup of tea while it installs.

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by warrenm on Tuesday February 17, 2015 @05:45PM (#9065662)

>in just a couple of days

Days?! That is a crazy-long deploy time.

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by icebraining on Tuesday February 17, 2015 @05:46PM (#9065673)

No, I meant it took me a couple of days to make the installer :-)

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by jamiesonbecker on Tuesday February 17, 2015 @11:22PM (#9066975)

.. here I thought you were talking about the normal speed of cloudformation to boot up EC2 instances..

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by icebraining on Wednesday February 18, 2015 @03:54AM (#9067597)

You jest, but our previous "cloud" provider (which we used in 2012/13) took more than that to provision a bog standard Linux VPS - and they often got the distro wrong!

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by daurnimator on Tuesday February 17, 2015 @06:28PM (#9065909)

Even things like /etc/machine-id

[ Parent | on HN ]

Re:Duplicate SSH Keys Everywhere by elij on Wednesday February 18, 2015 @04:42AM (#9067704)

shared inode number

[ Parent | on HN ]