[ECS/Fargate] [request]: ECS Exec : support readonlyRootFilesystem containers
- Dominant language
- Shell
- Stars
- 5.4k
- Forks
- 334
- PR merge metrics
- No merged PRs in 30d
Description
### Community Note
* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment
**Tell us about your request**
I would like to use the ECS Exec feature with readonlyRootFilesystem enabled containers.
**Which service(s) is this request for?**
ECS/Fargate
**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
Currently readonlyRootFilesystem enabled containers are not supported, the AWS managed agent crash soon after launch.
**Are you currently working around this issue?**
Yes. I've managed to get it working with `readonlyRootFilesystem: true` by mounting `/managed-agents`, `/var/lib/amazon/ssm` and `/var/log/amazon/ssm` as writable volumes inside.
**Additional context**
https://github.com/aws-containers/amazon-ecs-exec-checker/issues/21
Contributor guide
Research direction
The issue names no repository files or tests. Start with the linked amazon-ecs-exec-checker issue and the reported readonlyRootFilesystem workaround; done would mean ECS Exec works with readonly root filesystems without requiring those writable volume mounts.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud, infrastructure
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100