Questions tagged with EC2 Image Builder

I'm trying to make a custom Ubuntu 20.04 image from a .iso file that I have uploaded to Amazon S3. I've went through all the steps to create an image pipeline, but when I get to the end and hit create pipeline it just says `Error message: InvalidParameter: The service role role-name provided does not exist or does not have sufficient permissions`. I've made a role specifically for this pipeline, and even when I attach a policy that has all permissions to all resources I still get this error that says it doesn't have permission. Any help here?

I need to run an earlier version of Visio in my AppStream. https://support.microsoft.com/en-us/topic/how-to-revert-to-an-earlier-version-of-office-2bd5c457-a917-d57e-35a1-f709e3dda841 Tells how to do this and I have successfully done it on my local system. When I attempt in ImageBuilder, it pretends to work but doesn't. Is there a way to do this?

Hi. I have two EC2 instances running linux which I use as a web/database server and a mail server. I occasionally want to back-up both of these as AMI images. What I now do is "Stop Instance", then I select "Create Image". I then wait until the images have finished creating ( I watch the progress under Elastic Block Store>Snapshots). When the images show 100% completion, I start my instances again and my backup is finished. I would like to know, is it ok to start the EC2 instances up before the image creation is complete? I am trying to minimize my downtime, which currently is about 15 minutes.

I have installed al2022-ami-2022.0.20220419.0-kernel-5.15-x86_64 on a m5.2x. I went to install a user cron and the crontab binary is missing. This is a default linux binary. The system cron seems to be fine (though I haven't tested it) but user crons are not working. ``` ec2-user $ crontab -l -bash: crontab: command not found ec2-user $ which crontab /usr/bin/which: no crontab in ... ec2-user $ ls /usr/bin/crontab ls: cannot access '/usr/bin/crontab': No such file or directory ``` This is fine in previous versions with the default install. Here it is with a default version of amzn2-ami-kernel-5.10-hvm-2.0.20220406.1-x86_64-gp2 also installed on an m5.2x ``` ec2-user $ which crontab /usr/bin/crontab ```

Hello, I created my OVA file for my VM via VirtualBox and loaded it to S3. After importing it to Image Builder to create an AMI, I get the 'ClientError: Unsupported kernel version 5.10.0-10-amd64' error after some time during the import, the operation aborts. I selected the Amazon Linux 2 OS and I was under the impression that this OS was upgraded to 5.10 back in November 2021 per this post: https://aws.amazon.com/about-aws/whats-new/2021/11/amazon-linux-2-ami-kernel-5-10/ Can someone point out how this issue can be resolved? Or is there no solution at the moment to resolve this issue. Thanks for any feedback and let me know if you need any further information.

Hi Team, After deleting the pipeline and all related dependencies, e.g. recipe/components/instances etc. I can't delete the image itself. There is the following error: "aws imagebuilder delete-image --image-build-version-arn arn:aws:imagebuilder:us-east-1:355181800198:image/test/1.0.0/1 An error occurred (ResourceDependencyException) when calling the DeleteImage operation: Resource dependency error: The resource ARN 'arn:aws:imagebuilder:us-east-1:355181800198:image/test/1.0.0/1' has a running workflow" From the AWS console, I can see that the version of the created image is still building. Considering the circumstances, it seems that it's an improper state and should be failed. Could you please help me with this? Thanks!

Is there a recommended Docker image / Dockerfile starting point for running R scripts in AWS Batch? I have looked at a few here, and the starting image is could be any of the following: `rocker`, `python:3.6`, `ubuntu:16.04` or `r-base`: - (FROM rocker) https://github.com/aws-samples/aws-fargate-with-rstudio-open-source/blob/main/docimage-rstudio/Dockerfile - (FROM rocker) https://github.com/aws-samples/aws-fargate-with-rstudio-open-source/blob/main/docimage-shiny/Dockerfile - (FROM python:3.6) https://github.com/aws-samples/sagemaker-studio-custom-image-samples/blob/main/examples/r-image/Dockerfile - (FROM ubuntu:16.04) https://github.com/aws/amazon-sagemaker-examples/blob/main/hyperparameter_tuning/r_bring_your_own/Dockerfile - (FROM r-base) https://github.com/aws-samples/reinvent2020-aim404-productionize-r-using-amazon-sagemaker/blob/main/Dockerfile What are the key points to consider in choosing a good starting point for a Dockerfile for R jobs? For this particular workload, my main R packages are `data.table` and the tidyverse packages (no need for RStudio / Shiny server).

Hello, I have a problem and I don't know how to solve it, I don't have much experience with aws, I haven't done the configuration and neither has the web, I tell you, when creating an image of an ec2 the web returns 502 bad gateway, the web uses s3 could it be that when creating the image the s3 bucket was unlinked from ec2? the ec2 instance appears to have been rebooted while creating the image. Now the free space is larger than before the image was created.

We have an automated codepipeline that builds packer images based on amazon linux AMI updates. This pipeline has worked flawlessly for several years. Yesterday however it broke with : ==> amazon-ebs: Waiting for instance (xxxxxxx) to become ready... ==> amazon-ebs: Using ssh communicator to connect: xx.xx.xx.xx ==> amazon-ebs: Waiting for SSH to become available... ==> amazon-ebs: Error waiting for SSH: ssh: handshake failed: ssh: unable to authenticate, attempted methods [publickey none], no supported methods remain We have changed nothing , something in the base AWS Li2 image has broken this we think.

I have created an image builder pipeline via cloud formation stack and when the pipeline is still running I terminated the EC2 instance then deleted the stack after I realized there is some configuration errors in my settings and I want to do it again. However all the resources get deleted except the "image version" resource and it is showing "building" status. Till 1 day later the status is still "building" and when I used the AWS Cli try to delete it I get the below error: > An error occurred (ResourceDependencyException) when calling the DeleteImage operation: Resource dependency error: The resource ARN 'arn:aws:imagebuilder:ap-southeast-1:XXXXX:image/amazon-linux-2-with-latest-ssm-agent/0.0.1/1' has a running workflow. I have stopped the pipeline and there is no "running workflow". How to proceed to delete that image with versioning in such a case? Thank you.

Hi I tried to setup an Image Builder Pipeline with **a private subnet without internet connection** in a VPC. It failed with failure message = '**Unable to bootstrap TOE**'. I searched the AWS documentation and the TOE installation clearly needs a HTTPS connection to an internet address. Has anyone run image builder in a private subnet without internet access successfully here? I have enabled the "VPC network interface" so the instance in my VPC can communicate with Image builder, SSM, S3 and Cloudwatch in a private connection but not with AWS TOE installation HTTP URL. Thanks.

Help please, I can't seem to get cron jobs to run. I've always done `crontab -e` to schedule jobs but it doesn't seem to work on my EC2 instance running Ubuntu. I also tried `sudo vi /etc/crontab` and that doens't work either. I tried to schedule the job `/usr/bin/echo "test" > /home/ubuntu/crontest.txt` in `/etc/crontab` as `root` and as `ubuntu` but I never see the test file written. I googled and there are a few StackOverflow posts from people who had trouble with cron. But it seems many of them are able to get it to work after editing the `/etc/crontab` file. Can someone help me figure out why I can't get my jobs to run in cron? Any help or pointers would be greatly appreciated. Thank you.

I'm trying to standup a Ubuntu 20.04 based AMI with 2 NICs connected to 2 different subnets and have those NICs configured automatically. I've read the guidance about creating file in /etc/netplan to define the NIC interface but have been reading through cloud-init python scripts, since EC2 is using it to init the NICs, to figure out why this isn't done automatically and I think I found the root cause ... it seems cloud-init starts out properly configuring both NICs but then deletes the config for the primary NIC meaning that in order to SSH I would need to go over the secondary NIC. I managed to get cloud-init to initialize both NICs correctly by editing the following file and commenting out the following lines of code ``` /usr/lib/python3/dist-packages/cloudinit/net/__init__.py ``` ``` def _bringup_device(self): .... #self.cleanup_cmds.append( # ['ip', '-family', 'inet', 'link', 'set', 'dev', self.interface, # 'down']) #self.cleanup_cmds.append( # ['ip', '-family', 'inet', 'addr', 'del', cidr, 'dev', # self.interface]) def _bringup_router(self): ... #self.cleanup_cmds.insert( # 0, # ['ip', '-4', 'route', 'del', self.router, 'dev', self.interface, # 'src', self.ip]) .... #self.cleanup_cmds.insert( # 0, ['ip', '-4', 'route', 'del', 'default', 'dev', self.interface]) ``` To confirm that the solution works I delete all the cloud-init collateral and reboot to force it to restart. I also created a new custom AMI from the EC2 instance after deleting the files and confirmed that a new EC2 comes up with both NICs properly configured too ``` rm -rf /var/lib/cloud/* ``` Having to modify + maintain a custom copy of cloud-init is probably not a sustainable long term solution ... would this be a cloud-init issue or an EC2 cloud-init config issue? What's the best course of action to have this as an available long term solution? I think having cloud-init handle the NIC initialization vs. having to hand craft a file in /etc/netplan/ is probably a more sustainable long term solution. Thanks

Hi everyone, I have a Marketplace subscription for a pre-hardened image from CIS. I need to upgrade to the latest version, whenever a new release is available on the Marketplace. Can I use the Image Builder? Does the Image Builder supports a Marketplace AMI as base image? I have tried and got error. Thanks

Hello! We've read about the new Launch Speed Optimizations for Windows Server (https://aws.amazon.com/about-aws/whats-new/2022/01/aws-speed-optimizations-windows-instances-ec2/ ) and wanted to try it out, as it really fits our use-case. However, on every Image we enable the optimizations spins up several t3 instances for like half an hour and then ends up in an **enabling-failed** state. Our image is Windows Server based and usually runs on g5. Greetings Dominique

My design is consumes ~55% LUTs. The RAM and DSP utilization is pretty low < 10%. When I try add more logic it runs into congestion issues. So, I am trying to reduce some bus widths. However, I would like to know if there is a good rule of thumb on what LUT utilization can be target without hitting congestion issues. I am hoping you guys have such data from various customer datapoints. Thanks

Hi, I need TigerVNC 1.12.0 to fix a [clipboard issue](https://github.com/TigerVNC/tigervnc/releases). Currently AML2 support up to TigerVNC 1.8.0 only. Manual installation is not possible due to AML2 support to selinux-policy is 3.13.1-192 only (3.13.1-268 required). Is there a plan to upgrade TigerVNC to the latest or workaround available? The new release also bring performance enhancements that helps when remoting into a EC2.

Hello, Is there a way to ask Amazon to optimize t4g.nano instances? The issue is that it's not possible to log in using an SSH key after instance initialization and the only solution is to reboot the instance and try again. Sometimes one reboot isn't enough. I suppose this happens due to the lack of memory (512MB) for ARM64 architecture (as memory page size is bigger for aarch64) and the instance should be initialized with SWAP (256-512MB) by default.

I am trying to send a request to an API which is having cloudflare configured, i am getting this result - [https://i.stack.imgur.com/Reeqt.png](Screenshot of error) I tried all things like CURL, HTTP_Request2, file_get_contents() function but not working, this script is working on other servers/hosting providers and also working through postman but not on my AWS EC2 instance, it is telling me to enable cookies but am not sure how to do that. Please help me fix this problem. Here is my CURL code - ``` <?php $curl = curl_init(); curl_setopt_array($curl, array( CURLOPT_URL => 'https://smmpython.com/api/v2?key=xxxxxxxxxxxxxx&action=balance', CURLOPT_RETURNTRANSFER => true, CURLOPT_ENCODING => '', CURLOPT_MAXREDIRS => 10, CURLOPT_TIMEOUT => 0, CURLOPT_FOLLOWLOCATION => true, CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1, CURLOPT_CUSTOMREQUEST => 'POST', )); $response = curl_exec($curl); curl_close($curl); echo $response; ```

Hi, We are using the amazonlinux2 as base image for one of our application and this image has security vulnerability in cronie1.4.11, so the recommended version is cronie1.5.2. I tried to update the cronie package but it says **No packages marked for update**. can anyone guide how to update to the recommended version or can this to be upgraded in amazonlinux2 base image itself. Thanks, Noor Kumar

I am using **EC2 Ubuntu 20.04 VM**. Due to **[CVE-2021-3177][1]**, Python needs to be upgraded to the latest version of Python3.9 which would be 3.9.5 currently. I did that using the `apt install` option as per the steps mentioned below: sudo apt update sudo apt upgrade -y sudo apt install python3.9 The above ensures that Python3.9.5 is now available. But now python3.8 & python3.9 is available. So next we will use the update-alternatives command to make python3.9 as the default version. sudo update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.8 1 sudo update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.9 2 Now that alternatives are defined, we will switch to Option 2 as the default option i.e. Python3.9 sudo update-alternatives --config python3 Once done, the following command would point to the latest version. sudo python3 -V However, if you use the `sudo apt update` command, you will see an error stating that Traceback (most recent call last): File "/usr/lib/cnf-update-db", line 8, in <module> from CommandNotFound.db.creator import DbCreator File "/usr/lib/python3/dist-packages/CommandNotFound/db/creator.py", line 11, in <module> import apt_pkg ModuleNotFoundError: No module named 'apt_pkg' Reading package lists... Done E: Problem executing scripts APT::Update::Post-Invoke-Success 'if /usr/bin/test -w /var/lib/command-not-found/ -a -e /usr/lib/cnf-update-db; then /usr/lib/cnf-update-db > /dev/null; fi' E: Sub-process returned an error code To fix this we will have to add a link using the following command cd /usr/lib/python3/dist-packages/ sudo ln -s apt-pkg.cpython-{38m,39m}-x86_64-linux-gnu.so Next, I tried used the following commands apt purge python3-apt apt install python3-apt sudo apt install python3.9-distutils python3.9-dev Once done following command will now not result in any errors sudo apt update This means that the issue is fixed. **I can use this machine & use it after reboot too. ** **But for some reason, If I create an AMI and launch an instance then that instance is unreachable.** Appreciate your help. [1]: https://nvd.nist.gov/vuln/detail/CVE-2021-3177

Hi, I have been trying to run hardware system image in AWS f1.2x large instance. I am successfully able to run sw_emu. However, when I try to create the hardware image, I keep getting the following error. This is strange because the same code was able to be synthesized 2 days ago. ``` ERROR: [v++ 60-773] In '/home/centos/<cwd>/_x/runOnfpga/runOnfpga/vitis_hls.log', caught Tcl error: ERROR: '2201012237' is an invalid argument. Please specify an integer value. ``` Note: The ERROR number is observed to change as I run the hw synthesis each time. And in the vitis_hls.log, the following info is being displayed ``` INFO: [IP_Flow 19-1686] Generating 'Simulation' target for IP 'runOnfpga_sitodp_32ns_64_4_no_dsp_1_ip'... ERROR: '2201012237' is an invalid argument. Please specify an integer value. while executing "rdi::set_property core_revision 2201012237 {component component_1}" invoked from within "set_property core_revision $Revision $core" (file "run_ippack.tcl" line 1515) INFO: [Common 17-206] Exiting Vivado at Sat Jan 1 22:37:40 2022... ERROR: [IMPL 213-28] Failed to generate IP. INFO: [HLS 200-111] Finished Command export_design CPU user time: 55.92 seconds. CPU system time: 2.62 seconds. Elapsed time: 55.3 seconds; current allocated memory: 1.956 GB. command 'ap_source' returned error code while executing "source runOnfpga.tcl" ("uplevel" body line 1) invoked from within "uplevel \#0 [list source $arg] " ``` Update: It seems like even the Xilinx examples are giving out the same problem when we run on F1 instance. I tried to clone the [Vitis Accel Examples](https://github.com/Xilinx/Vitis_Accel_Examples.git) and it gave the same problem as above. ``` INFO: [v++ 200-789] **** Estimated Fmax: 339.33 MHz ERROR: [v++ 213-28] Failed to generate IP. ERROR: [v++ 60-300] Failed to build kernel(ip) vadd, see log for details: /home/centos/Vitis_Accel_Examples/sys_opt/multiple_devices/_x.hw.xilinx_aws-vu9p-f1_shell-v04261818_201920_2/vadd/vadd/vitis_hls.log ERROR: [v++ 60-773] In '/home/centos/Vitis_Accel_Examples/sys_opt/multiple_devices/_x.hw.xilinx_aws-vu9p-f1_shell-v04261818_201920_2/vadd/vadd/vitis_hls.log', caught Tcl error: ERROR: '2201020036' is an invalid argument. Please specify an integer value. ERROR: [v++ 60-773] In '/home/centos/Vitis_Accel_Examples/sys_opt/multiple_devices/_x.hw.xilinx_aws-vu9p-f1_shell-v04261818_201920_2/vadd/vadd/vitis_hls.log', caught Tcl error: ERROR: [IMPL 213-28] Failed to generate IP. ERROR: [v++ 60-599] Kernel compilation failed to complete ERROR: [v++ 60-592] Failed to finish compilation INFO: [v++ 60-1653] Closing dispatch client. make: *** [_x.hw.xilinx_aws-vu9p-f1_shell-v04261818_201920_2/vadd.xo] Error 1 ``` Please suggest ways to debug this problem.

Hi fellow AWS techs have a strange issue with AppStream 2.0 aftre setting up and then assigning a stack to a user. the workflow sennds out Welcome Email - no issues, then send another which requests user login from link and aos forces a password chaneg. This all works dandy, however, when I try and resend - email not sent when fleet re-assigned to user -

I have a pretty simple Launch Template that launches an instance with a root volume defined by the AMI, and a data volume that comes from a snapshot. Lets say this snapshot includes data that cannot be recreated within the context of the EC2 Image Builder, but also doesn't have to be mounted during the Image Builder run. I'd like for the end result of the EC2 Image Builder to update the Launch Template to - Update the Root volume with the new AMI snapshot - Preserve the secondary volume to have the extant snapshot If I don't specify the mounting of any secondary volume during the Image Builder run - the Snapshot specification in the Launch Template is wiped when the new Launch Template version is automatically created. If I manually update the Launch Template with the new AMI - the Snapshot specification is preserved. From playing around with mounting the snapshot during Image Creation - I can see new snapshots being made from the Build process. However - part of the builder process involves a modification to that secondary volume - I'd like for that to not persist and for the new image to use a "clean" slate in the launch template. The changes made are not trivial to undo, so a straight up `rm -rf` on the secondary volume is not really an option. Is there a way for me to preserve the original snapshot usage on the secondary volume when updating the Launch Template?