generate bottlerocket rpm inventory file to share with host containers #1996
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
jpculp
force-pushed
the
app-inventory
branch
2 times, most recently
from
3e30dbf
to
0dd5256
Compare
|
Do you mind sharing an example inventory file as a gist? |
cbgbt
approved these changes
Mar 21, 2022
bcressey
reviewed
Mar 22, 2022
webern
approved these changes
Mar 23, 2022
|
Out of curiosity, is there any chance that this might be a way to make some progress toward: #848 ? |
|
This particular PR is to help support SSM inventories, but the file is generic enough to be used elsewhere. Separately, we are working with AWS Inspector to add support for Bottlerocket. |
This adds logic to `rpm2img` to generate an inventory of the installed rpms to `/usr/share/bottlerocket/application-inventory.json`.
|
bcressey
approved these changes
Mar 23, 2022
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description of changes:
This grants host containers context to the underlying Bottlerocket OS packages by generating a JSON-formatted inventory file at the time of RPM install and mounting it as read-only to
/var/lib/bottlerocket/inventory/application.json.Testing done:
aws-k8s-1.21instance.catmounted file in both the control and admin host containers.Example output:
https://gist.github.com/jpculp/c1aa3142ce8917eeec47fc170f74873d
Terms of contribution:
By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.