Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix IMDSv2 token handling and docker permissions #12

Merged
merged 3 commits into from
Jan 13, 2025

Conversation

dpdornseifer
Copy link
Contributor

  • Made blueprint IMDSv2 compatible and extended hop_limit to 3
  • Updated cdk and crypto libraries to current stable versions
  • Added extended persissions to inbound TCP proxy running on EC2 parent instance due to changed docker security model
  • Made blueprint ARM build compatible by adding LINUX_AMD64 as target platform
  • Added troubleshooting section about buildx/arm related build issues

Issue #, if available:

Description of changes:

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

* Made blueprint IMDSv2 compatible and extended hop_limit to 3
* Updated cdk and crypto libraries to current stable versions
* Added extended persissions to inbound TCP proxy running on EC2 parent instance due to changed docker security model
* Made blueprint ARM build compatible by adding LINUX_AMD64 as target platform
* Added troubleshooting section about `buildx/arm` related build issues
Copy link

@wgr2017 wgr2017 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR reviewed, good to merge.

* added missing region statements in key creation
* fixed e2e_test bash script, added central env file and cleanup script
@dpdornseifer dpdornseifer force-pushed the feature/IMDSv2_enablement branch from dfb160a to 9250413 Compare January 10, 2025 16:08
* Extended PCR0 generation script to ensure PCR0 cannot be empty
* Added Web3Signer init-flag validation to e2e script
* Removed deprecated API call for Amazon Linux 2 AMI
* Removed unnecessary `sudo` statement from user-data script
@dpdornseifer dpdornseifer force-pushed the feature/IMDSv2_enablement branch from 7b1dd03 to eba38b2 Compare January 13, 2025 19:05
@dpdornseifer dpdornseifer merged commit faefac0 into main Jan 13, 2025
@dpdornseifer dpdornseifer deleted the feature/IMDSv2_enablement branch January 13, 2025 19:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants