$ defaults write ch.sudo.cyberduck s3.bucket.acl.default private
FATAL: Encoding::UndefinedConversionError: "\x8B" from ASCII-8BIT to UTF-8
lib/chef/node.rb
# Serialize this object as a hash
def to_json(*a)
result = {
"name" => name,
"chef_environment" => chef_environment,
'json_class' => self.class.name,
"automatic" => automatic_attrs,
"normal" => normal_attrs,
"chef_type" => "node",
"default" => default_attrs,
"override" => override_attrs,
#Render correctly for run_list items so malformed json does not result
"run_list" => run_list.run_list.map { |item| item.to_s }
}
result["_rev"] = couchdb_rev if couchdb_rev
result.to_json(*a)
end
result の中身で "\x8B" が入っているところを探すと、userdata の部分にありました。{ ... "userdata"=>"\x1F\x8B ... }
$ cat cloud-config.txt -------------------------------------- #cloud-config hostname: myhostname -------------------------------------- $ ec2-run-instances ami-4e6cd34f -g [GROUP] -k [KEYPAIR] -t [INSTANCE_TYPE] -f cloud-config.txt
For your question as to why setting the hostname isn't working, it is because the version of cloud-init found in the Amazon Linux AMI does not currently support those options.
#cloud-config runcmd: - [ echo, 'Setting custom hostname' ] - [ sed, -i, 's/^HOSTNAME=[a-zA-Z0-9\.\-]*$/HOSTNAME=MyName/g', /etc/sysconfig/network ] - [ hostname, 'MyName' ]
{
"Version": "2008-10-17",
"Id": "S3PolicyId1",
"Statement": [
{
"Sid": "IPAllow",
"Effect": "Allow",
"Principal": {
"AWS": "*"
},
"Action": "s3:*",
"Resource": "arn:aws:s3:::bucket/*",
"Condition" : {
"IpAddress" : {
"aws:SourceIp": "192.168.143.0/24"
},
"NotIpAddress" : {
"aws:SourceIp": "192.168.143.188/32"
}
}
}
]
}
この例では、192.168.143.* からのアクセスを許可しますが、例外として 192.168.143.188 からの アクセスは拒否されます。$ as-create-launch-config --help
…
--group VALUE1,VALUE2,VALUE3...
Security groups with which to associate the Amazon EC2 instances. Note
that Amazon VPC security groups and Amazon EC2 security groups are
mutually exclusive and can't be used together. Either all group names or
all group ids are acceptable, but not both.
SecurityGroups.member.N The names of the security groups with which to associate Amazon EC2 or Amazon VPC instances. Specify Amazon EC2 security groups using security group names, such as websrv. Specify Amazon VPC security groups using security group IDs, such as sg-12345678.
$ elb-describe-lbs [LoadBalancerName] --show-long --headers
... ,"{owner-alias=example-elb,group-name=example-elb-sg}", ...
次に ELB 配下のインスタンスが所属する Security Group に、確認した名前を設定します。$ ec2-authorize [group_name] -u example-elb -o example-elb-sgもし、より制限の低いルールが設定されていた場合は、そのルールを削除します。
$ ec2-revoke [group_name] -P tcp -p 80 -s 0.0.0.0/0
>>> from boto.s3.connection import S3Connection
>>> conn = S3Connection()
>>> bucket = conn.get_bucket('mybucket')
>>> k = Key(bucket)
>>> k.set_contents_from_filename('myfile')
---------------------------------------------------------------------------
error Traceback (most recent call last)
...
857 raise BotoServerError(response.status, response.reason, body)
858 elif e:
--> 859 raise e
860 else:
861 msg = 'Please report this exception as a Boto Issue!'
error: [Errno 32] Broken pipe
しかも、50KBぐらいのファイルだと問題ないのに、500KBくらいになるとダメ。東京リージョンのサーバから実行してるから、US の方が距離的に遠いし、時間がかかってタイムアウトとは考えにくい。しかも、500KBってそんなに大きいサイズではないし。
>>> from boto.s3.connection import S3Connection >>> conn = S3Connection(host='s3-ap-northeast-1.amazonaws.com')