Martin Harriman

The discussion in #3953 summarized: * @jpculp responded with the list of endpoints that Bottlerocket requires: ECR, EKS, IMDS, and SSM. * These were not sufficient to unblock @soura49, but...

This command will execute in a bootstrap container, and it does create the expected file in the host's `/run`: ``` touch /.bottlerocket/rootfs/run/my_test_file ``` Thus `touch` in the bootstrap container does...

Thanks for opening this issue. I appreciate your summary of why, exactly, the script to write configuration into /etc will not work for Bottlerocket. It would be a reasonable approach...

Thanks for the report (and thanks for the very clear reproduction instructions, in particular).

Initial triage says: * Yes, this reproduces as advertised on our latest release. Not a big surprise, since this code hasn't changed recently, but worth noting. * We may not...

The segfault occurs because the caller has passed a null registryConfig pointer to the victim `withDynamicResolver` function. The solution seems simple enough (i.e., don't dereference the null pointer). Thanks again...

A little more context: the host-ctr executable is invoked by systemd services (see the boot-containers@ and host-containers@ services in `package/os`). In those service files the service supplies the `registry-config` option,...

I have verified that `settings.host-containers.control.source` can be a public ECR URI. For production, you can set this via user data on your worker instances.

I have a fix progressing through the pipeline. I'll keep this issue updated.