bottlerocket-os / bottlerocket-control-container Goto Github PK
View Code? Open in Web Editor NEWA container for remote control of Bottlerocket
License: Other
A container for remote control of Bottlerocket
License: Other
Image I'm using:
Issue or Feature Request:
In our setup, we need to set VPC endpoints for aws ssm agent, and not pass all the communication via proxy. It will be nice, when there will be possible to set vpc endpointf for ssm agent / push own content of amazon-ssm-agent.json using bottlerocket settings.
Issue or Feature Request:
With the current control container, there isn't any type of enforcement on passwords, inactive accounts, historical password storage, lock outs, etc. We could increase the security of the admin container by enforcing some of this through policies. A good example of what the policy should enforce is as follows:
We should update SSM agent to 3.x
https://github.com/aws/amazon-ssm-agent/releases/
What I'd like:
To have script
installed such that the SSM logging works.
Currently I get this message ending up in the log bucket:
unable to generate log data: Failed to generate transcript with the following errors:
exec: "script": executable file not found in $PATH:
exec: "script": executable file not found in $PATH:
For example, I run:
aws ssm start-session --target i-xyz
I am now connected to the instance. I should expect to see logs in the log bucket which is configured as part of SSM, however I only see a stderr
file with the logs shown above.
Any alternatives you've considered:
Not sure there is another option, I assume it depends on what the SSM agent expects is available on the node where it's running.
Image I'm using:
n/a
Issue or Feature Request:
It would be nice to have the value of settings.motd
from the host displayed prominently when a user does a login, in addition to the container's own motd.
Image I'm using:
Issue or Feature Request:
This is how Facebook has their cgroup limits set for production https://youtu.be/cSJFLBJusVY?t=2222
How should they be set for this container? How should the build be modified to add one for ssh users?
In order for maintenance scripts to be able to parse the output of apiclient
, it would be useful to install jq
to provide for easy field extraction.
See bottlerocket-os/bottlerocket#1165 for additional details.
In Bottlerocket, we're adding the ability to jump between host containers using apiclient, so it'd be useful to set the PS1 variable in the control container's bash configuration to identify where you are.
Image I'm using:
Issue or Feature Request:
Is it possible to have a control container that is independent of AWS?
Is there any documentation on how to achieve this? That is, the functionality and integration points the container provides/respects.
I assume such a container would be associated with a new variant?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.