4.7. Creating AMI images by using bootc-image-builder and uploading them to AWS

Procedure

1. Create a disk image from the bootc image.

   • Configure the user details in the Containerfile. Make sure that you assign it with sudo access.
   • Build a customized operating system image with the configured user from the Containerfile. It creates a default user with passwordless sudo access.

2. Optional: Configure the machine image with cloud-init. See Users and groups configuration - Injecting users and SSH keys by using cloud-init. The following is an example:

   FROM registry.redhat.io/rhel10/rhel-bootc:latest
   
   RUN dnf -y install cloud-init && \
       ln -s ../cloud-init.target /usr/lib/systemd/system/default.target.wants && \
       rm -rf /var/{cache,log} /var/lib/{dnf,rhsm}

   注意

   You can also use cloud-init to add users and additional configuration by using instance metadata.

3. Build the bootc image. For example, to deploy the image to an x86_64 AWS machine, use the following commands:

   $ podman build -t quay.io/<namespace>/<image>:<tag> .
   $ podman push quay.io/<namespace>/<image>:<tag> .

4. Use the bootc-image-builder tool to create a public AMI image from the bootc container image. The image must be accessible from a registry, such as registry.redhat.io/rhel10/bootc-image-builder:latest.

   $ sudo podman run \
     --rm \
     --privileged \
     --pull=newer \
     -v $HOME/.aws:/root/.aws:ro \
     -v /var/lib/containers/storage:/var/lib/containers/storage \
     --env AWS_PROFILE=default \
     registry.redhat.io/rhel10/bootc-image-builder:latest \
     --type ami \
     --config /config.toml \
     --aws-ami-name rhel-bootc-x86 \
     --aws-bucket rhel-bootc-bucket \
     --aws-region us-east-1 \
   quay.io/<namespace>/<image>:<tag>

   注意

   The following flags must be specified all together. If you do not specify any flag, the AMI is exported to your output directory.

   • --aws-ami-name - The name of the AMI image in AWS
   • --aws-bucket - The target S3 bucket name for intermediate storage when you are creating the AMI

   • --aws-region - The target region for AWS uploads

     The bootc-image-builder tool builds an AMI image and uploads it to your AWS S3 bucket by using your AWS credentials to push and register an AMI image after building it.