Noah Meyerhans

Yes, IRSA is "IAM Roles for Service Accounts". It lets an application obtain temporary IAM role credentials based on a token obtained from some OIDC provider. You can read about...

`~/.aws/credentials` is used to store static credentials. There's no provision for providing expiration times for the creds in that file, as they don't typically expire, and the contents of the...

Current versions pick firecracker from PATH, unless overridden on the commandline. We could come up with default values for kernel and rootfs locations and hardcode them, leaving the commandline options...

A per-VM config file would be useful. We could also define a global config file containing overridable defaults (e.g. for options that are often, but not always, identical between MicroVMs,...

@yihuaf That's a super interesting idea. I think it speaks to the larger question of the scope of the firectl project. Initially, it was written to provide a simple interface...

> If I'm understanding it correctly, we want firectl to become more docker like in terms of user friendliness and scope? Not necessarily. The goal of [firecracker-containerd](/firecracker-microvm/firecracker-containerd) is to allow...

It's probably reasonable for this sort of thing to be settable via environment variables.

What config?

Right. That's exactly why I think we should use environment variables. That structure comes from the client application, meaning that if we require these settings to come from there, then...

I'd start with environment variables, since that functionality will address the use cases we know about now and is simple to implement. If at a later time it makes sense...