alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity
nixpkgs/nixos/modules/virtualisation/openstack-metadata-fetcher.nix

22 lines
770 B
Nix
Raw Normal View History

nixos: openstack: have its own metadata fetcher expression These two APIs have diverged over time and are no longer compatible.
2020-11-18 16:42:32 +00:00
{ targetRoot, wgetExtraOptions }:
{ec2,openstack}-metadata-fetcher: unconditionally fetch metadata The metadata fetcher scripts run each time an instance starts, and it is not safe to assume that responses from the instance metadata service (IMDS) will be as they were on first boot. Example: an EC2 instance can have its user data changed while the instance is stopped. When the instance is restarted, we want to see the new user data applied.
2020-11-21 01:44:25 +00:00
# OpenStack's metadata service aims to be EC2-compatible. Where
# possible, try to keep the set of fetched metadata in sync with
# ./ec2-metadata-fetcher.nix .
nixos: openstack: have its own metadata fetcher expression These two APIs have diverged over time and are no longer compatible.
2020-11-18 16:42:32 +00:00
''
metaDir=${targetRoot}etc/ec2-metadata
mkdir -m 0755 -p "$metaDir"
{ec2,openstack}-metadata-fetcher: unconditionally fetch metadata The metadata fetcher scripts run each time an instance starts, and it is not safe to assume that responses from the instance metadata service (IMDS) will be as they were on first boot. Example: an EC2 instance can have its user data changed while the instance is stopped. When the instance is restarted, we want to see the new user data applied.
2020-11-21 01:44:25 +00:00
rm -f "$metaDir/*"
nixos: openstack: have its own metadata fetcher expression These two APIs have diverged over time and are no longer compatible.
2020-11-18 16:42:32 +00:00
openstack-metadata-fetcher: stop lying in log message
2020-11-21 00:53:32 +00:00
echo "getting instance metadata..."
nixos: openstack: have its own metadata fetcher expression These two APIs have diverged over time and are no longer compatible.
2020-11-18 16:42:32 +00:00
{ec2,openstack}-metadata-fetcher: introduce wget_imds function
2020-11-21 01:40:38 +00:00
wget_imds() {
wget ${wgetExtraOptions} "$@"
}
{ec2,openstack}-metadata-fetcher: unconditionally fetch metadata The metadata fetcher scripts run each time an instance starts, and it is not safe to assume that responses from the instance metadata service (IMDS) will be as they were on first boot. Example: an EC2 instance can have its user data changed while the instance is stopped. When the instance is restarted, we want to see the new user data applied.
2020-11-21 01:44:25 +00:00
wget_imds -O "$metaDir/ami-manifest-path" http://169.254.169.254/1.0/meta-data/ami-manifest-path
metadata fetchers: use umask instead of fetch-and-chmod
2021-05-01 23:28:59 +01:00
(umask 077 && wget_imds -O "$metaDir/user-data" http://169.254.169.254/1.0/user-data)
{ec2,openstack}-metadata-fetcher: unconditionally fetch metadata The metadata fetcher scripts run each time an instance starts, and it is not safe to assume that responses from the instance metadata service (IMDS) will be as they were on first boot. Example: an EC2 instance can have its user data changed while the instance is stopped. When the instance is restarted, we want to see the new user data applied.
2020-11-21 01:44:25 +00:00
wget_imds -O "$metaDir/hostname" http://169.254.169.254/1.0/meta-data/hostname
wget_imds -O "$metaDir/public-keys-0-openssh-key" http://169.254.169.254/1.0/meta-data/public-keys/0/openssh-key
nixos: openstack: have its own metadata fetcher expression These two APIs have diverged over time and are no longer compatible.
2020-11-18 16:42:32 +00:00
''
Copy permalink