| 14 Sep 2024 |
 commiterate | though it seems like the repo's kind of abandoned | 08:12:58 |
 Arian | https://github.com/NixOS/amis/pull/114 | 08:13:41 |
| commiterate | I'm meeting with some AWS TAMs on Tuesday to go over a few feature requests. I need to drag some AWS PM and engineer aliases out of them so the feature requests don't get lost in the system | 08:13:45 |
| commiterate | oh huh | 08:13:51 |
| Arian | We also have TAMs here so if we can bundle forces to get something roadmapped that helps us lemme know | 08:14:25 |
| commiterate | ah they're relying on the fixup phase patching | 08:14:36 |
| Arian | Though I'm on PTO until 23rd :) | 08:14:39 |
| commiterate | I was going to try that at first and then just thought it would somehow be easier to rewrite | 08:14:50 |
| commiterate | extremely wrong with the crypto stuff and the undocumented IMDS endpoints for instance connect | 08:15:05 |
| commiterate | * that was extremely wrong with the crypto stuff and the undocumented IMDS endpoints for instance connect | 08:15:11 |
| Arian | It uses buildFHSEnv which basically makes the binary think it's running on a normal distro | 08:15:43 |
| Arian | It's hacky | 08:15:51 |
| Arian | But works :) | 08:15:55 |
| commiterate | * that was extremely wrong with the cryptography stuff and the undocumented IMDS endpoints for instance connect | 08:17:23 |
| Arian | Just didn't have time to test it. But if it works we can add it to nixpkgs | 08:17:40 |
| commiterate | that'll probably happen faster than them taking ownership of the Go reimplementation | 08:18:10 |
| commiterate | I don't know how understaffed the instance connect distributed API side is (I think they own the library. The Nitro side definitely doesn't since I was on the sister team) | 08:19:22 |
| commiterate | * I don't know how understaffed the instance connect distributed API side is (I think they own the library. The Nitro side definitely doesn't from what I know being on the sister team) | 08:20:10 |
| commiterate | * I don't know how understaffed the instance connect distributed API side is (I think they own the library. The Nitro side definitely doesn't from what I know having been on the sister team) | 08:20:48 |
| Arian | Must say I'm not super impressed with the quality of both eic or ssm.
But eic is definitely conceptually simpler.
The ssm codebase is really massive which kind of freaks me out sometimes.
| 08:21:31 |
| Arian | Also ssm doesn't integrate with PAM. Whilst ssh gets all these things right | 08:22:00 |
| commiterate | yeah the quality of all the agents is...questionable | 08:22:42 |
| Arian | So you get those things for free :) | 08:22:43 |
| commiterate | it doesn't help that basically the only part of Amazon that uses Go on the regular is Twitch | 08:23:28 |
| Arian | Yeh it seems to be a recurring theme. Cloud watch agent can't log journal logs and doesn't work out of the box on Amazon Linux 2023 etc. | 08:23:45 |
| commiterate | not that the codebases in the other languages are much better, but that's par for the course at most companies | 08:23:51 |
| Arian | But I just use big hammer until it works | 08:24:38 |
| commiterate | is the main thing we need EIC and Image Builder expanding ImportVmImage + distribution-only image pipelines?
I have those 2 as the highest priority requests right now. Instance Refresh from Cfn is slightly lower in priority for my use case specifically.
I can push all 3 though since they're all owned by different divisions. | 08:26:31 |
| Arian | I'm not very interested in the image builder stuff unless I can make a pipeline that just does CopySnapshot + RegisterImage | 08:28:02 |
| Arian | Because then I can use it for GC | 08:28:07 |
