amazon-linux-cis icon indicating copy to clipboard operation
amazon-linux-cis copied to clipboard

Published 20 hours ago • verified publisher icon nozaq

The script is breaking ARM instances so they will not boot

Open jwwerpy opened this issue 4 years ago • 2 comments

The bit in the script that checks the fstab seems to be incompatible with ARM instances. It seems to be removing a mount point necessary for booting ARM instances.

jwwerpy avatar Dec 17 '20 14:12 jwwerpy

There is also a problem in the disable_unused_filesystems script that disables mounting vfat which is needed for the ARM efi filesystem.

jwwerpy avatar Dec 17 '20 16:12 jwwerpy

@jwwerpy Thanks for reporting this. I guess thorough check would be needed since the CIS benchmark itself was not created with ARM instances in mind... :/

nozaq avatar Dec 29 '20 18:12 nozaq