3:23 a.m.
Hai there,
Finally, there is A livecd based on the Fedora Core 5 Test 3 available
for download.
ftp://ftp.dead.li/
Thanks to JonFautley.
About the Live CD
The liveCD is gnome-based only.
Language & Keyboard settings : french (fr)
ISO size: 694.2 MB
License: same as Fedora Core 5 Test 3
why french? because i had already an iso for a French project and to
promote FC5 as well.
Ill replace the iso during the weekend by an ENGLISH version.
username = root
password = fedora
If your favorite packages are not in the livecd or it does not support
your language, you can still create your own Fedora Core 5 Test 3 live
cd with Kadischi.
Support for writing a release note during the enhancement of this
livecd is welcome. ;)
Chitlesh GOORAH
--
http://clunixchit.blogspot.com
5:57 a.m.
Chitlesh GOORAH wrote:
username = root
password = fedora
If your favorite packages are not in the livecd or it does not support
your language, you can still create your own Fedora Core 5 Test 3 live
cd with Kadischi.
We need a standard guest account, someone who isn't UID/GID 0.
I'm also curious, is this "Official" Fedora Core media?
I was unaware anything test would be used for anything, as it is for
developers and testers or bug trackers only.
Can you elaborate.
J. Hartline
6:02 a.m.
J. Hartline wrote:
We need a standard guest account, someone who isn't UID/GID 0.
I have suggested this already at
http://fedoraproject.org/wiki/Kadischi/Schedule
I'm also curious, is this "Official" Fedora Core media?
Not sure what you mean by that but it is just something Chitlesh has
produced. Not a formal project level effort. There isnt much need to
differentiate between these now though. Once a suitable version for
general users is released we can endorse the effort as a formal one if
required.
I was unaware anything test would be used for anything, as it is for
developers and testers or bug trackers only.
Can you elaborate.
A test version of the current development tree as a live CD.
--
Rahul
6:18 a.m.
We need a standard guest account, someone who isn't UID/GID 0.
I'm also curious, is this "Official" Fedora Core media?
I was unaware anything test would be used for anything, as it is for
developers and testers or bug trackers only.
As I said before, my aim to build an OFFICIAL Livecd for the Fedora Project.
But still, we have a long way to go.
My test releases are meant for giving us some directions which we need
to give a close look at.
It is not ready yet for stable usage. As Rahul said, it hasnt yet be a
formal project level.
This is what Im trying to do. With my test releases, step by step Im
starting to attract attention to this project and prepare ground for
the Official media.
E.g:
having a server to allow downloads
keeping our slow development in the right track
preparing promotional material for the Official media
etc
it is also a way for brainstorming.
--
http://clunixchit.blogspot.com
7:43 a.m.
Rahul Sundaram wrote:
J. Hartline wrote:
> We need a standard guest account, someone who isn't UID/GID 0.
I have suggested this already at
http://fedoraproject.org/wiki/Kadischi/Schedule
Excellent.
J. Hartline
1:55 a.m.
2006/3/2, Chitlesh GOORAH <chitlesh(a)fedoraproject.org>:
snip
Finally, there is A livecd based on the Fedora Core 5 Test 3
available
snip
Ill replace the iso during the weekend by an ENGLISH version.
Nice! How is the ENG version going? I'm so busy these days, I'll try
to find some time to build one of my own and I'll host it on a web
server.
--
Cheers,
Filip
2:12 a.m.
Filip Tsachev wrote:
2006/3/2, Chitlesh GOORAH <chitlesh(a)fedoraproject.org>:
snip
>Finally, there is A livecd based on the Fedora Core 5 Test 3 available
>
>
snip
>Ill replace the iso during the weekend by an ENGLISH version.
>
>
Nice! How is the ENG version going? I'm so busy these days, I'll try
to find some time to build one of my own and I'll host it on a web
server.
If the images are a combination of packages only from the Fedora Core
and Fedora Extras repositories, there might be some space available
within fedoraproject.org. Write to fedora-websites list about getting
some storage space if you are interested in that.
--
Rahul
4:06 a.m.
> Ill replace the iso during the weekend by an ENGLISH version.
Nice! How is the ENG version going? I'm so busy these days, I'll try
to find some time to build one of my own and I'll host it on a web
server.
I have the english version ready, but I dont have any server for upload :(
--
http://clunixchit.blogspot.com
4:08 a.m.
If the images are a combination of packages only from the Fedora
Core
and Fedora Extras repositories, there might be some space available
within fedoraproject.org. Write to fedora-websites list about getting
some storage space if you are interested in that.
I have contacted Greg, Sopwith and SethVidal.
Yet I havent any space :(
greg last night asked me what happened
Seth said he is willing to put the livecd on the fp.org but there must
be a server where he can pull the livecd
--
http://clunixchit.blogspot.com
4:10 a.m.
Chitlesh GOORAH wrote:
>>Ill replace the iso during the weekend by an ENGLISH version.
>>
>>
>Nice! How is the ENG version going? I'm so busy these days, I'll try
>to find some time to build one of my own and I'll host it on a web
>server.
>
>
I have the english version ready, but I dont have any server for upload :(
I believe you would be offered disk space to upload if you ask in
fedora-websites list.
--
Rahul
4:11 a.m.
I believe you would be offered disk space to upload if you ask in
fedora-websites list.
ok ill ask again.
--
http://clunixchit.blogspot.com
5:16 a.m.
Hello,
2006/3/8, Chitlesh GOORAH <chitlesh(a)fedoraproject.org>:
I have the english version ready, but I dont have any server for
upload :(
I can offer my services but the download speed for others from my
hosting won;t be too great, but it's a start and Seth could pull it...
tell me if you'd like this and I'll create an account for you
--
Cheers,
Filip
7:29 a.m.
Chitlesh GOORAH wrote:
I have the english version ready, but I dont have any server for
upload :(
--
http://clunixchit.blogspot.com
When did you build a LiveCD?
Did you send out any email asking if anyone had anything to contribute,
or is this -your- LiveCD?
I think before a LiveCD is produced for the Fedora Project (Even if it
employs test packages, from FC5 Test 3)
we need to have these taken care of:
Auto login into Fedora with fedora as the default user name.
Provide fedora and root usernames with blank passwords. Security is not
a concern for a Live CD
Add some good introductory and promotional material in a desktop folder
by default
provide a Fedora introduction in the bootup prompt by default
Among other things.
If these are already finished please update the Kadischi/Schedule.
J. Hartline
11:01 a.m.
When did you build a LiveCD?
Did you send out any email asking if anyone had anything to contribute,
or is this -your- LiveCD?
Yes for the moment it is my livecd.
Jasper you are working on squashfs integration.
On my part, Im trying to push forward to get the "logistics" done and
see what is lacking with our kadischi.
I think before a LiveCD is produced for the Fedora Project (Even if
it
employs test packages, from FC5 Test 3)
we need to have these taken care of:
If we will be an official live cd then, it will be with the
community's contribution.
Auto login into Fedora with fedora as the default user name.
Provide fedora and root usernames with blank passwords. Security is not
a concern for a Live CD
Im stuck here.
Add some good introductory and promotional material in a desktop
folder
by default
im working on it and partly completed too
provide a Fedora introduction in the bootup prompt by default
done
Among other things.
If these are already finished please update the Kadischi/Schedule.
ok, I will,
but since im having tar error messages coming, I prefer to
troubleshoot it first.
--
http://clunixchit.blogspot.com
11:54 a.m.
On Wed, 2006-03-08 at 08:29 -0500, J. Hartline wrote:
Provide fedora and root usernames with blank passwords. Security is
not
a concern for a Live CD
No! Security is very much a concern here. We need to make sure we
don't start a spread of worms from our live CD.
This will mean some hard choices between a very strict network lock down
or doing some sort of password set up at boot time.
Jeremy
11:56 a.m.
Jeremy Katz wrote:
On Wed, 2006-03-08 at 08:29 -0500, J. Hartline wrote:
>Provide fedora and root usernames with blank passwords. Security is not
>a concern for a Live CD
>
>
No! Security is very much a concern here. We need to make sure we
don't start a spread of worms from our live CD.
Auto login to a non administrative user called Fedora. How is that bad
for security?
--
Rahul
12:22 p.m.
On Wed, 2006-03-08 at 23:26 +0530, Rahul Sundaram wrote:
Jeremy Katz wrote:
>On Wed, 2006-03-08 at 08:29 -0500, J. Hartline wrote:
>>Provide fedora and root usernames with blank passwords. Security is not
>>a concern for a Live CD
>
>No! Security is very much a concern here. We need to make sure we
>don't start a spread of worms from our live CD.
>
Auto login to a non administrative user called Fedora. How is that bad
for security?
If you have ways to log in remotely, then it could allow for people to
log in and start running, eg, eggbots or any of a number of other things
if there's a blank password.
So it's not necessarily that auto-login to a non-administrative account
is bad (it probably does make sense). But just that thinking "oh,
security isn't a concern for a live cd" is not wise.
Jeremy
3:46 p.m.
Chitlesh GOORAH wrote:
Yes for the moment it is my livecd.
Jasper you are working on squashfs integration.
On my part, Im trying to push forward to get the "logistics" done and
see what is lacking with our kadischi.
Ok. I was unaware fedoraproject.org allocated webspace for users.
Can you show me where I can sign up for that?
J. Hartline
4 p.m.
Jeremy Katz wrote:
On Wed, 2006-03-08 at 23:26 +0530, Rahul Sundaram wrote:
>Jeremy Katz wrote:
>
>
>>On Wed, 2006-03-08 at 08:29 -0500, J. Hartline wrote:
>>
>>
>>>Provide fedora and root usernames with blank passwords. Security is not
>>>a concern for a Live CD
>>>
>>>
>>No! Security is very much a concern here. We need to make sure we
>>don't start a spread of worms from our live CD.
>>
>>
>>
>Auto login to a non administrative user called Fedora. How is that bad
>for security?
>
>
If you have ways to log in remotely, then it could allow for people to
log in and start running, eg, eggbots or any of a number of other things
if there's a blank password.
So it's not necessarily that auto-login to a non-administrative account
is bad (it probably does make sense). But just that thinking "oh,
security isn't a concern for a live cd" is not wise.
I am not a fan of blank root passwords, or blank passwords altogether, I
am just quoting what is
in the Kadischi/Schedule as of when the email was written. I personally
am more interested in
SquashFS and am waiting to see if busybox can be rebuilt with losetup
since 1.10 emplys this feature
and busybox-anaconda-1.01 is the last update available.
Really.. I mean when I first talked to Elliot Lee about maintaining an
RPM of Kadischi
(On my own time or even a package that could eventually go into Extras)
he asked me
certainly I wasn't patching Anaconda from the RPM %post scripts, of
course not.
In this same sense I don't see how a community project benefits without
several inputs
like second person points of view.. will the "Unofficial" CD Chitlesh is
putting out
have sshd started by default.. blank root passwords? This certainly
doesn't spell anything good.
My point is I don't believe non-input is the way to go about getting
_something_ out to the public.
Personally I'm confused, I started into this project wanting to see the
fedora-livecd-list in the already
established mailing lists, list. Now we are (going to?) pushing out
insecure, non-community driven
CDs. I've obviously missed something since August.
J. Hartline
4:23 p.m.
I just really think it is goofy to try and push out a LiveCD that
deploys
FC5t3 packages when FC5 is due in about a week and a half.
J. Hartline
JesseKeating proposed me to ping him when the release date approaches.
Is this proposal still standing ?
--
http://clunixchit.blogspot.com
4:24 p.m.
Ok. I was unaware fedoraproject.org allocated webspace for users.
Can you show me where I can sign up for that?
J. Hartline
is there a place to sign in for webspace?
--
http://clunixchit.blogspot.com
1:04 a.m.
Jeremy Katz wrote:
On Wed, 2006-03-08 at 23:26 +0530, Rahul Sundaram wrote:
>Jeremy Katz wrote:
>
>
>>On Wed, 2006-03-08 at 08:29 -0500, J. Hartline wrote:
>>
>>
>>>Provide fedora and root usernames with blank passwords. Security is not
>>>a concern for a Live CD
>>>
>>>
>>No! Security is very much a concern here. We need to make sure we
>>don't start a spread of worms from our live CD.
>>
>>
>>
>Auto login to a non administrative user called Fedora. How is that bad
>for security?
>
>
If you have ways to log in remotely, then it could allow for people to
log in and start running, eg, eggbots or any of a number of other things
if there's a blank password.
So it's not necessarily that auto-login to a non-administrative account
is bad (it probably does make sense). But just that thinking "oh,
security isn't a concern for a live cd" is not wise.
In this particular specific scenario, it isnt much of a concern. Please
put things into context.
--
Rahul
1:05 a.m.
J. Hartline wrote:
Chitlesh GOORAH wrote:
> Yes for the moment it is my livecd.
> Jasper you are working on squashfs integration.
> On my part, Im trying to push forward to get the "logistics" done and
> see what is lacking with our kadischi.
>
>
Ok. I was unaware fedoraproject.org allocated webspace for users.
Can you show me where I can sign up for that?
Not users but contributors. We dont have a process for this yet but you
can ask in fedora-websites list if there is a requirement.
--
Rahul
1:05 a.m.
Chitlesh GOORAH wrote:
>I just really think it is goofy to try and push out a LiveCD that
deploys
>FC5t3 packages when FC5 is due in about a week and a half.
>
>J. Hartline
>
>
JesseKeating proposed me to ping him when the release date approaches.
Is this proposal still standing ?
Might be better to handle this off list.
--
Rahul
1:06 a.m.
Chitlesh GOORAH wrote:
>Ok. I was unaware fedoraproject.org allocated webspace for users.
>Can you show me where I can sign up for that?
>
>J. Hartline
>
>
is there a place to sign in for webspace?
--
No but you have already asked in fedora-websites list. Lets deal with
this there.
--
Rahul
1:08 a.m.
J. Hartline wrote:
My point is I don't believe non-input is the way to go about getting
_something_ out to the public.
Personally I'm confused, I started into this project wanting to see
the fedora-livecd-list in the already
established mailing lists, list.
What do you mean by an established list?.
Now we are (going to?) pushing out insecure, non-community driven
CDs. I've obviously missed something since August.
What is non community driven here? Chitlesh is trying to get a Live CD
and we can evaluate and fix any issues after testing it out. If there
are security concerns help by providing feedback and patches.
--
Rahul
6:38 a.m.
Rahul Sundaram wrote:
What is non community driven here? Chitlesh is trying to get a Live
CD
and we can evaluate and fix any issues after testing it out. If there
are security concerns help by providing feedback and patches.
Ok. It just seemed a bit akward you know, Chitlesh having an English CD
"ready" and
I don't remember seeing anything on the list about it. I read the thread
about the French CD.
Thanks.
J. Hartline
7:04 a.m.
Ok. It just seemed a bit akward you know, Chitlesh having an English
CD
"ready" and
I don't remember seeing anything on the list about it. I read the thread
about the French CD.
An english version means an english equivalent to the french livecd.
Im not advertising too much about it right now, since I dont have a
server to upload it.
--
http://clunixchit.blogspot.com
7:09 a.m.
J. Hartline wrote:
Rahul Sundaram wrote:
> What is non community driven here? Chitlesh is trying to get a Live
> CD and we can evaluate and fix any issues after testing it out. If
> there are security concerns help by providing feedback and patches.
>
>
Ok. It just seemed a bit akward you know, Chitlesh having an English
CD "ready" and
I don't remember seeing anything on the list about it. I read the
thread about the French CD.
When he created a French language CD, many people including me asked
for a English language CD since it would appeal to larger audience. We
discussed this in #fedora-mktg channel. Not all discussions happen in
the list. I dont think thats awkward at all. What is the issue here?
--
Rahul
7:15 a.m.
When he created a French language CD, many people including me
asked
for a English language CD since it would appeal to larger audience. We
discussed this in #fedora-mktg channel. Not all discussions happen in
the list. I dont think thats awkward at all. What is the issue here?
Why I created a French Live CD ?
Because in my programming classes (here in france), we are going to
use linux based systems.
So being a Fedora ambassador, Ive seized the opportunity to market
Fedora among my mates.
A livecd in the local language has more success, doesn't it?
After sending a mail to the marketing list about my marketing idea, it
turns out that there is a demand for an english version.
That is why Im building an English version :)
--
http://clunixchit.blogspot.com
8:23 a.m.
Rahul Sundaram wrote:
>
When he created a French language CD, many people including me asked
for a English language CD since it would appeal to larger audience. We
discussed this in #fedora-mktg channel. Not all discussions happen in
the list. I dont think thats awkward at all. What is the issue here?
There is no issue.
If the outlook on the Kadischi and Fedora Core LiveCD and DVD projects
has changed, I am all for it. +1 for Fedora Core.
Thanks.
J. Hartline
3:18 p.m.
On 3/8/06, Jeremy Katz <katzj(a)redhat.com> wrote:
On Wed, 2006-03-08 at 23:26 +0530, Rahul Sundaram wrote:
> Jeremy Katz wrote:
> >On Wed, 2006-03-08 at 08:29 -0500, J. Hartline wrote:
> >>Provide fedora and root usernames with blank passwords. Security is not
> >>a concern for a Live CD
> >
> >No! Security is very much a concern here. We need to make sure we
> >don't start a spread of worms from our live CD.
> >
> Auto login to a non administrative user called Fedora. How is that bad
> for security?
If you have ways to log in remotely, then it could allow for people to
log in and start running, eg, eggbots or any of a number of other things
if there's a blank password.
So it's not necessarily that auto-login to a non-administrative account
is bad (it probably does make sense). But just that thinking "oh,
security isn't a concern for a live cd" is not wise.
Jeremy
I have a working script for autologin.
So should I include this feature in my next build or not ?
in /usr/share/gdm/defaults.conf, I've only set
AutomaticLoginEnable=true
AutomaticLogin=fedora
So is remote login still a problem for security if i have
AllowRemoteAutoLogin=false
Chitlesh
--
http://clunixchit.blogspot.com
3:33 p.m.
On Mon, 2006-03-13 at 22:18 +0100, Chitlesh GOORAH wrote:
On 3/8/06, Jeremy Katz <katzj(a)redhat.com> wrote:
> On Wed, 2006-03-08 at 23:26 +0530, Rahul Sundaram wrote:
> > Jeremy Katz wrote:
> > >On Wed, 2006-03-08 at 08:29 -0500, J. Hartline wrote:
> > >>Provide fedora and root usernames with blank passwords. Security is
not
> > >>a concern for a Live CD
> > >
> > >No! Security is very much a concern here. We need to make sure we
> > >don't start a spread of worms from our live CD.
> > >
> > Auto login to a non administrative user called Fedora. How is that bad
> > for security?
>
> If you have ways to log in remotely, then it could allow for people to
> log in and start running, eg, eggbots or any of a number of other things
> if there's a blank password.
>
> So it's not necessarily that auto-login to a non-administrative account
> is bad (it probably does make sense). But just that thinking "oh,
> security isn't a concern for a live cd" is not wise.
>
I have a working script for autologin.
So should I include this feature in my next build or not ?
in /usr/share/gdm/defaults.conf, I've only set
AutomaticLoginEnable=true
AutomaticLogin=fedora
So is remote login still a problem for security if i have
AllowRemoteAutoLogin=false
Yes, sshd is almost certainly still installed and running.
Jeremy
3:36 p.m.
Yes, sshd is almost certainly still installed and running.
Jeremy
To decrease boot time, sshd is turned off.
So should I still be worrying ?
--
http://clunixchit.blogspot.com
3:38 p.m.
On Mon, 2006-03-13 at 22:36 +0100, Chitlesh GOORAH wrote:
> Yes, sshd is almost certainly still installed and running.
>
To decrease boot time, sshd is turned off.
So should I still be worrying ?
As long as it's present and can be enabled, I would be seriously worried
about any blank passwords
Jeremy
3:45 p.m.
On 3/13/06, Jeremy Katz <katzj(a)redhat.com> wrote:
On Mon, 2006-03-13 at 22:36 +0100, Chitlesh GOORAH wrote:
> > Yes, sshd is almost certainly still installed and running.
> >
>
> To decrease boot time, sshd is turned off.
> So should I still be worrying ?
As long as it's present and can be enabled, I would be seriously worried
about any blank passwords
Jeremy
To enabled it we need root access right. What if root has a password
and the user "fedora" doesn't ?
Sorry to be a pain in the ass :)
--
http://clunixchit.blogspot.com
3:56 p.m.
On Mon, 2006-03-13 at 22:45 +0100, Chitlesh GOORAH wrote:
On 3/13/06, Jeremy Katz <katzj(a)redhat.com> wrote:
> On Mon, 2006-03-13 at 22:36 +0100, Chitlesh GOORAH wrote:
> > > Yes, sshd is almost certainly still installed and running.
> > >
> >
> > To decrease boot time, sshd is turned off.
> > So should I still be worrying ?
>
> As long as it's present and can be enabled, I would be seriously worried
> about any blank passwords
To enabled it we need root access right. What if root has a password
and the user "fedora" doesn't ?
Does the root user have a password that's stable or do we prompt on
boot? If it's something that's standard, then it is "known" and just
as
(not) useful as having it be blank.
If we're doing auto-login for the fedora user, then we almost certainly
want to also have the account locked so there's no password. Then we
don't have to worry about logins from the fedora user remotely. It does
mean they also can't log in from the console, though, and we have to
ensure that the screensaver never asks for a password.
Jeremy
6:28 a.m.
We could exclude fedora user from ssh access right?
2. and btw: when you want to re-enable sshd service, where's the
change going to be saved? on mounted hdd like in knoppix possibly?
--
Cheers,
Filip
11:16 a.m.
Filip Tsachev wrote:
2. and btw: when you want to re-enable sshd service, where's the
change going to be saved? on mounted hdd like in knoppix possibly?
fedora-livecd-list
For now nothing will be saved to any disks or storage.
You would just run service sshd start, as you would in a standard Fedora
system.
J. Hartline
12:22 p.m.
J. Hartline wrote:
Filip Tsachev wrote:
> 2. and btw: when you want to re-enable sshd service, where's the
> change going to be saved? on mounted hdd like in knoppix possibly?
>
> fedora-livecd-list
For now nothing will be saved to any disks or storage.
You would just run service sshd start, as you would in a standard
Fedora system.
J. Hartline
Also don't forget, you are welcome to check the Linux4all site and
scripts, and
see what can be done with it and see about getting Kadischi to use it.
This is one step in the right direction for saving stuff like user settings.
J. Hartline
12:34 p.m.
On 14/03/06, J. Hartline <jasperhartline(a)adelphia.net> wrote:
For now nothing will be saved to any disks or storage.
You would just run service sshd start, as you would in a standard Fedora
system.
We can consider after finishing up for FC5, to include such
functionality.. to save somewhere - online/offline user preferences.
What other think about passwordless fedora user which is excluded from
ssh access?
--
Cheers,
Filip
6642
days inactive
6654
days old
livecd@lists.fedoraproject.org
42 comments
6 participants
participants (6)
-
Chitlesh GOORAH -
Filip Tsachev -
Filip Tsachev -
J. Hartline -
Jeremy Katz -
Rahul Sundaram