split os image into separate repo

[nlf]

if we have, for example dhyve and dhyve-os into separate repos, then it's possible to update one without impacting the other or having to create an artificial release that copies the same binaries or script as the previous release.

[nlf]

created dhyve-os so closing this

[A.I.]

@nlf You can use https://github.com/ailispaw/rancheros-lite, the smallest and faster OS for Docker.
If you need it, I can customize it for dhyve.

[nlf]

interesting. what's different between it and something like boot2docker, or plain rancheros?

if it supports the same features that we use in boot2docker, namely the auto formatting of the persistent storage partition and ability to easily inject ssh keys, i'd definitely consider it.

[A.I.]

RancherOS and RancherOS-Lite uses buildroot and busybox instead of TinyCoreLinux in boot2docker.
RancherOS has several system-containers but RancherOS-Lite runs just Docker as PID 1.

It doesn't have the auto formatting, but I can add it easily.
And it doesn't have the ssh keys, because I believe that we don't need TLS for local development.

[nlf]

i can certainly concede that we don't need to put docker behind TLS, but having ssh keys injected to allow passwordless logins is pretty important to me.

so rancheros-lite is basically just rancher with the system-docker services disabled? does it still allow the use of the ros tool? or is all that removed?

[nlf]

also rancheros allows some cloud-config compatible stuff, is that removed from rancheros-lite?

[A.I.]

I mean TLS for Docker, but SSH.

[A.I.]

I have removed all system-docker containers including cloud-config from RancherOS, but it has just them as normal services except cloud-config.

[nlf]

would you mind providing me a kernel and initrd somehow so i can boot it up and mess with it?

[A.I.]

You can follow the instruction https://github.com/ailispaw/rancheros-lite/tree/master/contrib/xhyve .
But I've forgotten to mention that it needs VBoxManage to convert VMDK to raw image.
If you need compressed raw image for HDD, please let me know and I can make it for you.

[nlf]

hmm.. i'd definitely want to look into changing the build system to use docker containers instead of vagrant+packer, but i do kind of like the idea of using buildroot and busybox. i'll play with it over the weekend.

[A.I.]

Thanks. And also I create the prototype of dhyve with rancheros-lite.
https://github.com/ailispaw/dhyve/tree/rancheros-lite

[A.I.]

I understand how important the autoformat and userdata are for dhyve script and boot2docker is better for now.

[A.I.]

@nlf I'm sorry for this.
I have been informed a vulnerability without TLS, even if it's on a local environment.
We may have to consider TLS back.

[CVE-2014-5280] Cross-site request forgery attack possible against Docker daemon
https://groups.google.com/forum/#!topic/docker-announce/aQoVmQlcE0A

[A.I.]

I'm sorry for bothering you.

I'm trying to reproduce the CSRF, but it seems that Docker has been patched for CSRF since v1.3.0.
Add checks for app/json - issue #2515 by duglin · Pull Request #8235 · docker/docker
moby/moby#8235

I will continue to investigate it.
Thanks.