1. As part of Image hardening we add noexec option to /tmp partition as part of the build step. 2. After that when Imagebuilder runs tests by launching the hardened image it is unable to initiate since it places executable files in /tmp. Error Message: /tmp/**/TaskOrchestratorAndExecutor/bootstrap.sh: Permission denied Is there a workaround for this ? (we need the noexec option to build a compliant image) Edited by: anany on Sep 11, 2020 4:46 AM

Image Builder places files in /tmp folder and tries to execute them

As part of Image hardening we add noexec option to /tmp partition as part of the build step.
After that when Imagebuilder runs tests by launching the hardened image it is unable to initiate since it places executable files in /tmp.

Error Message:
/tmp/**/TaskOrchestratorAndExecutor/bootstrap.sh: Permission denied

Is there a workaround for this ? (we need the noexec option to build a compliant image)

Edited by: anany on Sep 11, 2020 4:46 AM

주제

컴퓨팅

태그

아마존 EC2

언어

English

anany

질문됨 4년 전1051회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

이 답변이 도움이 되었나요?커뮤니티가 여러분의 지식을 활용할 수 있도록 정답을 찬성하세요.

Found the solution in the docs
https://docs.aws.amazon.com/imagebuilder/latest/userguide/image-builder-troubleshooting.html
Solution:
Possible cause: The /tmp directory is classified as noexec, which can cause Image Builder to fail.

Resolution: Choose a different location to use as the working directory in the workingDirectory field of the image recipe. For more information, see the ImageRecipe data type description.

anany

답변함 4년 전

Image Builder places files in /tmp folder and tries to execute them

관련 콘텐츠