- 最新
- 投票最多
- 评论最多
Hi chadawagner, thanks for the report.
Switching your instances to IMDSv2-only will not break yum, since this is an optional code path that has a fallback.
If you want, you can disable this code by setting
report_instanceid=no
in /etc/yum.repos.d/amzn2-core.repo, which should cause yum to avoid making requests without tokens. We'll work on an update to yum to fix this.
Thanks for using Amazon Linux!
Thanks! I won't worry about it then, good to know. I'll turn off the instance reporting so that I can continue to monitor the MetadataNoToken metric in CloudWatch.
Hi,
Unfortunately the "report_instanceid=no" setting doesn't seem to be disabling it. I'll go ahead and patch my local yumRepo.py file to disable the tokenless queries.
Edit: oops, I had missed the amzn2-graphics.repo config file on GPU instance. That ought to do it...
Edited by: chadawagner on Aug 12, 2020 10:05 PM