Presently the official fedora AWS AMIs are classed as "Community AMIs".
When you search for the AMI, e.g. ami-0757331d089cc9cbe, it shows in standard format. Clearly if I search for the AMI ID there is arguably minimal risk, but many people might search by the name directly from the AWS UI instead.
Therefore I urge fedora to make use of the ability to obtain "verified" status from AWS.
This means a big green "Verified provider" box will appear next to the official fedora AMIs.
Look at, for example, the Microsoft or Cisco "community AMIs", it is easy to see you are looking at an official Microsoft AMI, for example because of the big green box next to it.
See side-by-side screenshot attached.
<img alt="fedora_screenshot.jpg" src="/cloud-sig/issue/raw/files/092b423b6a9729acafb242e532fb89dfa0238eb044032a9302dc859154b83ce2-fedora_screenshot.jpg" />
We have it. The naming convention is used to identify the "verified" images today. 1) When the cloud-image-uploader was made. The people making it changed the naming convention. The images were no longer discoverable by the routines used at Amazon to identify that the official images for publication were available. 2) We are working on a new method of discovery based on metadata tagging which makes pushing on the Pungi rules that finally got us off of the imagefactory less important. We are working with the Amazon EC2 team members to ensure they have our use cases as they are.
If the naming convention previously used with the Fedora 3(x) verions, the images will repopulate in the AWS Console as "verified". Once the metadata tagging is completed, we can add that to the images and they will be introduced as the official images once again.
The AWS Marketplace works differently and requires additional support. I can provide details related to that, but not here.
Metadata Update from @davdunc: - Issue assigned to davdunc
Metadata Update from @davdunc: - Issue tagged with: AWS, meeting
Thanks for the clarification @davdunc
@davdunc - what metadata can we add to the FCOS images to get the verified status?
@dustymabe I'll figure that out today as to exactly when they are going to begin that initiative.
Log in to comment on this ticket.