Skip to content

fix: harden user-data bootstrap script#20

Draft
ianaya89 wants to merge 1 commit into
masterfrom
fix/user-data-hardening
Draft

fix: harden user-data bootstrap script#20
ianaya89 wants to merge 1 commit into
masterfrom
fix/user-data-hardening

Conversation

@ianaya89

Copy link
Copy Markdown
Member

Summary

  • Add logging via exec/tee to /var/log/user-data.log for debugging bootstrap failures
  • chmod 600 on PEM file immediately after download
  • Verify cloud-connect container is running (up to 30s) before completing lifecycle hook

Test plan

  • Deploy new instance and verify /var/log/user-data.log is populated
  • Verify PEM file permissions are 600
  • Simulate container crash during bootstrap and confirm lifecycle hook returns ABANDON

- Add logging via exec/tee to /var/log/user-data.log
- chmod 600 on PEM file after download
- Verify cloud-connect container is running before completing lifecycle hook
@ianaya89 ianaya89 marked this pull request as draft March 25, 2026 02:45
@ianaya89 ianaya89 force-pushed the master branch 2 times, most recently from d853d83 to f85e992 Compare June 16, 2026 21:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant