I agree with your comments. OpenSsh is available on windows platforms, I've sure I've used it before. I certainly wouldn't rely on cygwin in production.
> On 15 Feb 2014, at 17:42, "John Kinsella" <j...@stratosec.co> wrote: > > Interesting idea…I wouldn’t use it but I wish you good luck in your journey. > ;) As Alex mentioned, would be curious to see the demand. > > I try to avoid cygwin in production environments…it’s great for desktops, but > just feels like a hack for production use, IMHO. > > The ssh part caught my attention, as that affects the security of the > secondary storage VM. > > Putty doesn’t really want to be used for command-line key generation[1]. > > Take a look at libssh[2] - from a glance, that looks like it might be the > best approach. > > I’d recommend against taking crypto code from another project and adding into > ACS - at that point we have to monitor the origin project for patches and > apply as appropriate. > > John > 1: > http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/puttygen-batch.html > 2: http://www.libssh.org/ > > On Feb 14, 2014, at 3:55 AM, Rajesh Battala > <rajesh.batt...@citrix.com<mailto:rajesh.batt...@citrix.com>> wrote: > > Below are my findings and suggestions. > > Dependencies for mgmt server to run on windows. > > 1. ssh-keygen tool ( default available on linux. Its required to generate > id_rsa_cloud keys) > 2. mount cmd ( this is used by vmware/hyperv to mount sec storage on mgmt > server to copy the systemvm.iso to copy to Hosts) > 3. injectkeys.sh ( this is binary file executes on mgmt server to inject the > dynamically generated sshkeys to systemvm.iso. its bash file) > 4. there is some code part in mgmt. server where "sudo" cmd is uses to > execute the bash files. We have to rewrite those parts to handle it for > windows. > 5. Mkisofs this is used to generate the systemvm.iso > > My thought for the dependencies > 1. we can generate ssh-keygen binary from c source or use the putty keygen > utility to generate the keys. > 2. Mount ( we have to rewrite the code in mgmt. server to handle how to copy > in nfs or cifs remote path by referencing them locally) > 3. For injectkeys.sh We have to write a new to bat file /python which will do > the similar job. > 4. There is already windows binary mkisofs is available we can use it. > > Thanks > Rajesh Battala > > -----Original Message----- > From: Damoder Reddy [mailto:damoder.re...@citrix.com] > Sent: Friday, February 14, 2014 2:27 PM > To: dev@cloudstack.apache.org<mailto:dev@cloudstack.apache.org> > Subject: [PROPOSAL] Windowsfication Of ACS > > Hi, > > The current ACS management server runs only on linux based operating systems. > Though it runs on windows under Cygwin terminal with some effort, I'd like to > introduce this feature to make sure that the management server runs on > windows without any dependencies on Cygwin etc. > > The Jira Ticket : https://issues.apache.org/jira/browse/CLOUDSTACK-6105 > FS : > https://cwiki.apache.org/confluence/display/CLOUDSTACK/Cloudstack+Windowsfication > > Feedback/comments are welcome. > > Thanks & Regards > Damodar/ > > > Stratosec<http://stratosec.co/> - Compliance as a Service > o: 415.315.9385 > @johnlkinsella<http://twitter.com/johnlkinsella> > Need Enterprise Grade Support for Apache CloudStack? Our CloudStack Infrastructure Support<http://shapeblue.com/cloudstack-infrastructure-support/> offers the best 24/7 SLA for CloudStack Environments. Apache CloudStack Bootcamp training courses **NEW!** CloudStack 4.2.1 training<http://shapeblue.com/cloudstack-training/> 18th-19th February 2014, Brazil. Classroom<http://shapeblue.com/cloudstack-training/> 17th-23rd March 2014, Region A. Instructor led, On-line<http://shapeblue.com/cloudstack-training/> 24th-28th March 2014, Region B. Instructor led, On-line<http://shapeblue.com/cloudstack-training/> 16th-20th June 2014, Region A. Instructor led, On-line<http://shapeblue.com/cloudstack-training/> 23rd-27th June 2014, Region B. Instructor led, On-line<http://shapeblue.com/cloudstack-training/> This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
