Wednesday Apr 20, 2011

The Latest with Solaris on Amazon EC2

We've gone quite for a while on this blog;  if you're a reader of this blog, you know that the Oracle acquisition of Sun had a big impact on the status and direction of Solaris and OpenSolaris.  The Amazon EC2 AMIs that we provided to this point have been based on OpenSolaris, which is no longer a focus of Oracle / Sun.

We still have those OpenSolaris AMIs on EC2, but we have been investigating what it would take to create Solaris 11-based AMIs (whether from the currently shipping Solaris 11 Express, or the shipping-sometime-in-the-future Solaris 11 release).

We have some details to work out so watch this space for more info.  Meanwhile, if you're eager to get your hands on Solaris 11 Express in an EC2 environment, please drop us a message at ec2-solaris-support-AT-sun-DOT-com .

If you want to know more about technologies in Solaris 11, please check this out.


Friday Aug 14, 2009

Hardened OpenSolaris 2009.06 on Amazon EC2 Released

AMI ID: ami-e56e8f8c
AMI Manifest: sun-opensolaris-2009-06/hardened_opensolaris_2009.06_32_1.2.img.manifest.xml
AKI/ARI ID:
aki-1783627e / ari-9d6889f4
License: Public

Description:

Sun Microsystems Inc. is pleased to announce the release of Hardened OpenSolaris 2009.06 on Amazon EC2's cloud computing service. This 32-bit AMI gives you the power and security of OpenSolaris combined with the flexibility of Amazon's cloud computing service, and is optimized for Amazon EC2's cloud computing environment.

The OpenSolaris system configuration has been adjusted to comply with the recommendations published by Sun and the Center for Internet Security, a non-profit organization chartered to develop and encourage widespread use of security configuration benchmarks developed through a global consensus process involving participants from academia, industry and government. 

Working together for more than six years, Sun and the Center for Internet Security have consistently developed best-in-class, supportable and complete security hardening guidance for the Solaris operating system.

The latest version developed for the Solaris 10 operating system was completed with substantial contributions from Sun, CIS, the U.S. National Security Agency (NSA), as well as the U.S. Defense Information Systems Agency (DISA).

Building upon this foundation, Sun and the Center for Internet Security collaborated to adapt the security recommendations published in the Solaris 10 Benchmark to the OpenSolaris operating system and document those changes specific to virtual machine images such as those available on Amazon EC2. 

All of the specific changes made to the base OpenSolaris 2009.06 AMI are discussed on the Sun OpenSolaris AMI Hardening Wiki : http://wikis.sun.com/display/ISC/OpenSolaris+Security+Hardening

For more information on the Center for Internet Security's Solaris 10 Benchmark, see:
http://www.cisecurity.org/bench_solaris.html

New features introduced with this latest release of Hardened Security AMI are "Encrypted swap memory" and "auditing".

More information on "Encrypted Swap Memory" feature is available at
http://blogs.sun.com/gbrunett/entry/encrypted_swap_in_opensolaris_2009 


This project is affiliated with the Immutable Service Container project whose goal is to develop security reinforced virtual machine images. The Immutable Service Container project developed the code used by this AMI to implement hardening, encrypted swap and auditing.  Additional information regarding Immutable Service Containers can be found at:
http://kenai.com/projects/isc/pages/OpenSolaris


The root file system is ZFS in this AMI and includes the pre-installed packages and tools necessary to get started with using OpenSolaris on Amazon EC2. You can obtain more details about the OpenSolaris project at http://www.opensolaris.org.

Also, just like in our previous AMIs, the "pkg image-update" command updates the kernel and ramdisk which is not allowed in Amazon EC2. Therefore, in order to prevent your instances from becoming non-compatible with the Amazon EC2 environment, we have disabled this command.

More details including re-bundling instructions can be found in the Getting Started Guide.

Rebundling Changes:

 You must disable auditing during re-bundling. You can execute following commands in your clean up tasks before executing "ec2-bundle-image" command.

bash # audit -t
bash # > /var/log/auditlog
bash # rm -f /var/audit/\*

 As you can see we have introduced the new ARI (ari-9d6889f4) with this AMI, make sure you use the correct ARI with the "ec2-bundle-image" command as given below.

bash # ec2-bundle-image -c $EC2_CERT -k $EC2_PRIVATE_KEY \\
 --kernel aki-1783627e --ramdisk ari-9d6889f4 \\
 --block-device-mapping "root=rpool/56@0,ami=0,ephemeral0=1" \\
 --user <userid> --arch i386 \\
 -i $DIRECTORY/$IMAGE -d $DIRECTORY/parts

You can restart the audit daemon on the instance where you disabled it temporarily for re-bundling with following command.

bash # audit -s


Support:

Sunday May 31, 2009

Hardened OpenSolaris 2008.11 on Amazon EC2 Released

AMI ID: ami-35ac4a5c
AMI Manifest: sun-opensolaris-2008-11-hardened/hardened_2008.11_32_4.0.img.manifest.xml
AKI/ARI ID:
aki-6552b60c / ari-6452b60d
License: Public

Description:

Sun Microsystems Inc. is pleased to announce the release of Hardened OpenSolaris 2008.11 on Amazon EC2's cloud computing service. This 32-bit AMI gives you the power and security of OpenSolaris combined with the flexibility of Amazon's cloud computing service, and is optimized for for Amazon EC2's cloud computing environment.

The OpenSolaris system configuration has been adjusted to comply with the recommendations published by Sun and the Center for Internet Security, a non-profit organization charted to develop and encourage widespread use of security configuration benchmarks developed through a global consensus process involving participants from academia, industry and government. 

Working together for more than six years, Sun and the Center for Internet Security have consistently developed best-in-class, supportable and complete security hardening guidance for the Solaris operating system.

The latest version developed for the Solaris 10 operating system was completed with substantial contributions from Sun, CIS, the U.S. National Security Agency (NSA), as well as the U.S. Defense Information Systems Agency (DISA).

Building upon this foundation, Sun and the Center for Internet Security collaborated to adapt the security recommendations published in the Solaris 10 Benchmark to the OpenSolaris operating system and document those changes specific to virtual machine images such as those available on Amazon EC2. 

All of the specific changes made to the base OpenSolaris 2008.11 AMI are discussed on the Sun OpenSolaris AMI Hardening Wiki : http://wikis.sun.com/display/ISC/OpenSolaris+AMI+Hardening

For more information on the Center for Internet Security's Solaris 10 Benchmark, see:
http://www.cisecurity.org/bench_solaris.html

The root file system is ZFS in this AMI and includes the pre-installed packages and tools necessary to get started with using OpenSolaris on Amazon EC2. You can obtain more details about the OpenSolaris project at http://www.opensolaris.org.

Also, just like in our previous AMIs, the "pkg image-update" command updates the kernel and ramdisk which is not allowed in Amazon EC2. Therefore, in order to prevent your instances from becoming non-compatible with the Amazon EC2 environment, we have disabled this command.

More details including re-bundling instructions can be found in the Getting Started Guide.


Support:

For technical support during the Beta period, please contact ec2­-solaris­-support[AT]SUN[DOT]COM.

Please check OpenSolaris on Amazon EC2 blog for latest updates and new information about OpenSolaris AMIs.

The "OpenSolaris on Amazon EC2 Getting Started Guide" is located at:
http://www.sun.com/third-party/global/amazon/Sun_AmazonEC2_GettingStartedGuide.pdf


Register for OpenSolaris AMIs here.

Tuesday Jan 13, 2009

OpenSolaris 2008.11 on Amazon EC2 Released

AMI ID: ami-7db75014
AMI Manifest: sun-osol-2008-11/2008.11_32_1.0.img.manifest.xml
AKI/ARI ID:
aki-6552b60c/ari-6452b60d
License: Public

Description:

Sun Microsystems Inc. is pleased to announce the release of OpenSolaris 2008.11 on Amazon EC2's cloud computing service. This 32-bit AMI gives you the power and security of OpenSolaris combined with the flexibility of Amazon's cloud computing service, and is optimised for for EC2's cloud computing environment.

This image contains Image Packaging System (IPS),ZFS, DTrace and more. For details, please visit http://www.opensolaris.com/learn/features/whats-new/200811.

The Image Packaging System, IPS, has continued to evolve since its first appearance in OpenSolaris 2008.05. IPS now supports improved search, mirroring of network repositories, and the addition of the first phase of a client API. Developers can download additional software from the repository. The root file system is ZFS in this AMI and includes the pre-installed packages and tools necessary to get started with using OpenSolaris on Amazon EC2. You can obtain more details about the OpenSolaris project at http://www.opensolaris.org.


Also, just like in our previous AMIs, the "pkg image-update" command updates the kernel and ramdisk which is not allowed in EC2. Therefore, in order to prevent your instances from becoming non-compatible with the Amazon EC2 environment, we have disabled this command. More details including re-bundling instructions can be found in the Getting Started Guide.

The "Getting Started Guide" has been updated with instructions on Re-bundling OpenSolaris 2008.11 based 32-bit AMI on Amazon EC2. The re-bundling process has been automated with the addition of rebundle.sh script located at /opt/ec2/sbin reducing the time and complexity involved in creating new images over this base image.

There is a lot of work in progress in developing pre-packaged software stacks, like  the AMP stack and Ruby on Rails framework, targeting specific developer's needs.  Keep checking the "Open Solaris on EC2" web-page for availability of these AMIs.

Support:

For technical support during Beta period, please contact ec2­-solaris­-support[AT]SUN[DOT]COM.

Please check OpenSolaris on Amazon EC2 blog for latest updates and new information about OpenSolaris AMIs.

The "OpenSolaris on Amazon EC2 Getting Started Guide" is located at:

http://www.sun.com/third-party/global/amazon/Sun_AmazonEC2_GettingStartedGuide.pdf

Register for OpenSolaris AMIs here.

Wednesday May 07, 2008

Launch of OpenSolaris on Amazon EC2

On may 5th, we announced the availability of OpenSolaris (2008.05) on Amazon EC2. Announcements were covered by GigaOm and Amazon's official announcement is here. We / MySQl also announced Amazon EC2 as one of the supported platforms, which meas if you already have purchased a support contract from MySQl, you can now deploy MySQl on EC2 and get same production level support from MySQL. These are two huge milestones which proves Sun's leadership in Cloud Computing space.

OpenSolaris

MySQL

So, what did this collaboration between Amazon Web services and Sun do? It offers choice, choice to developers and startups in two ways-

1) OpenSolaris provides ZFS filesystem, first 128-bit filesystem which offer 64-bit checksum capability to maintain data integrity and Rollback functionality to be able to quickly rollback changes to the last known stable state in case of data corruption of instability in the fileysytsem. Secondly, OpenSolaris is the only OS which offers Dtrace - a observability and tracing tool which helps developers and administrators to debug and trace issues and bottlenecks right from the hardware level (OS level in case of EC2) to their application code and middleware in between. Most importantly, developers and EC2 users can now have choice of multiple OSes other than various variants of Linux.

2) Freedom to run MySQL on Cloud. MySQl is most critical component of any web applications and MySQL's commitment to support Cloud such as EC2 as supported platform, opens the doors for startups to leverage the cloud infrastructure to further reduce the cost and capex investment towards the infrastructure build-out at early stages of the company.
 

We are excited to be working with Amazon Web services and providing choice to developers, startups and students who wish to use EC2 cloud for their development and deployment use.

About

Information about Solaris and OpenSolaris on Amazon Web Services (AWS) EC2. Look here for the latest information on the program and any late breaking information on (Open)Solaris on EC2.

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today