aws / aws/containers-roadmap

[ECS/Fargate] [request]: ECS Exec : support readonlyRootFilesystem containers

Open
#1,359 16 comments 88 reactions 0 assignees View on GitHub
ECS Proposed
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment

**Tell us about your request**

I would like to use the ECS Exec feature with readonlyRootFilesystem enabled containers.

**Which service(s) is this request for?**

ECS/Fargate

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**

Currently readonlyRootFilesystem enabled containers are not supported, the AWS managed agent crash soon after launch.

**Are you currently working around this issue?**

Yes. I've managed to get it working with `readonlyRootFilesystem: true` by mounting `/managed-agents`, `/var/lib/amazon/ssm` and `/var/log/amazon/ssm` as writable volumes inside.

**Additional context**

https://github.com/aws-containers/amazon-ecs-exec-checker/issues/21

Contributor guide

Open the contributing guide

Research direction

The issue names no repository files or tests. Start with the linked amazon-ecs-exec-checker issue and the reported readonlyRootFilesystem workaround; done would mean ECS Exec works with readonly root filesystems without requiring those writable volume mounts.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.