Image Builder places files in /tmp folder and tries to execute them

0
  1. As part of Image hardening we add noexec option to /tmp partition as part of the build step.

  2. After that when Imagebuilder runs tests by launching the hardened image it is unable to initiate since it places executable files in /tmp.

Error Message:
/tmp/**/TaskOrchestratorAndExecutor/bootstrap.sh: Permission denied

Is there a workaround for this ? (we need the noexec option to build a compliant image)

Edited by: anany on Sep 11, 2020 4:46 AM

anany
質問済み 4年前1051ビュー
1回答
0

Found the solution in the docs
https://docs.aws.amazon.com/imagebuilder/latest/userguide/image-builder-troubleshooting.html
Solution:
Possible cause: The /tmp directory is classified as noexec, which can cause Image Builder to fail.

Resolution: Choose a different location to use as the working directory in the workingDirectory field of the image recipe. For more information, see the ImageRecipe data type description.

anany
回答済み 4年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ