Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hardened Source Image throws: cannot stat ‘/tmp/worker/configure-clocksource.service’: No such file or directory #1765

Open
mebays opened this issue Apr 16, 2024 · 0 comments

Comments

@mebays
Copy link
Contributor

mebays commented Apr 16, 2024

What happened:

When using make 1.28 enable_fips=true source_ami_filter_name=<CIS STIG HARDENED Image> source_ami_owners=<OWNERID> aws_region=$AWS_REGION the packer build errors off on the install-worker.sh after the reboot for fips with the following error.

2024-04-16T11:18:22-04:00:     amazon-ebs: mv: cannot stat ‘/tmp/worker/configure-clocksource.service’: No such file or directory

What you expected to happen:

The image to build without any issues.

Anything else we need to know?:

I have been watching other hardened issues and have not seen a reference to this specific issue. I will have a PR with a suggested fix. The assumed problem is around the ordering the provisioners. Specifically the order for creating the /tmp/worker and mounting of all the scripts before the reboot. While running the packer output in -debug and connecting to the image it was seen that /tmp/worker did not exist after reboot it did exist before reboot. Reordering the creation of the /tmp/worker directory and the file provisioners after the reboot fixes this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant