121 lines
3.2 KiB
Bash
121 lines
3.2 KiB
Bash
|
#!/bin/bash
|
||
|
|
|
||
|
|
source_ami="$1"
|
||
|
|
source_region="$2"
|
||
|
|
|
||
|
|
if [[ -z $source_ami || -z $source_region ]]; then
|
||
|
|
echo "usage: $0 source_ami source_region"
|
||
|
|
exit 2
|
||
|
|
fi
|
||
|
|
|
||
|
|
RESF_AMI_ACCOUNT_ID=792107900819
|
||
|
|
|
||
|
|
REGIONS=$(aws --profile resf-ami ec2 describe-regions \
|
||
|
|
--all-regions \
|
||
|
|
--query "Regions[].{Name:RegionName}" \
|
||
|
|
--output text | grep -vE "$source_region")
|
||
|
|
|
||
|
|
SOURCE_AMI_NAME=$(aws --profile resf-ami ec2 describe-images \
|
||
|
|
--region "$source_region" --image-ids "$source_ami" --query 'Images[0].Name'\
|
||
|
|
--output text )
|
||
|
|
|
||
|
|
# Enforce a name structure
|
||
|
|
# Rocky-8-ec2-8.6-20220515.0.x86_64
|
||
|
|
if [[ ! "${SOURCE_AMI_NAME}" =~ Rocky-[89]-ec2-[89]\.[0-9]-[0-9]+\.[0-9]+\.((aarch|x86_)64|ppc64le|s390x) ]]; then
|
||
|
|
echo "Bad source ami (${SOURCE_AMI_NAME}). Exiting."
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
function copy(){
|
||
|
|
for region in $REGIONS; do
|
||
|
|
echo -n "Creating copy job for $region..."
|
||
|
|
ami_id=$(aws --profile resf-ami ec2 copy-image \
|
||
|
|
--region $region \
|
||
|
|
--name "${SOURCE_AMI_NAME}" \
|
||
|
|
--source-image-id "${source_ami}" \
|
||
|
|
--source-region "${source_region}" \
|
||
|
|
--output text 2>&1)
|
||
|
|
if [[ $? -eq 0 ]]; then
|
||
|
|
unset ami_ids[$region]
|
||
|
|
echo ". $ami_id"
|
||
|
|
if [[ ! -z "$ami_id" ]]; then
|
||
|
|
ami_ids[$region]="$ami_id"
|
||
|
|
fi
|
||
|
|
continue
|
||
|
|
fi
|
||
|
|
echo ".an error occurred (likely region is not signed up). Skipping."
|
||
|
|
done
|
||
|
|
}
|
||
|
|
|
||
|
|
function change_privacy(){
|
||
|
|
local status="$1"
|
||
|
|
local launch_permission
|
||
|
|
case $status in
|
||
|
|
Private)
|
||
|
|
launch_permission="Remove=[{Group=all}]"
|
||
|
|
;;
|
||
|
|
Public)
|
||
|
|
launch_permission="Add=[{Group=all}]"
|
||
|
|
;;
|
||
|
|
esac
|
||
|
|
local finished=false
|
||
|
|
while ! $finished; do
|
||
|
|
for region in "${!ami_ids[@]}"; do
|
||
|
|
echo -n "Making ${ami_ids[$region]} in $region $status..."
|
||
|
|
aws --profile resf-ami ec2 modify-image-attribute \
|
||
|
|
--region $region \
|
||
|
|
--image-id "${ami_ids[$region]}" \
|
||
|
|
--launch-permission "${launch_permission}"
|
||
|
|
if [[ $? -eq 0 ]]; then
|
||
|
|
unset ami_ids[$region]
|
||
|
|
echo ". Done"
|
||
|
|
continue
|
||
|
|
fi
|
||
|
|
echo ". Still pending"
|
||
|
|
done
|
||
|
|
if [[ ${#ami_ids[@]} -gt 0 ]]; then
|
||
|
|
echo -n "Sleeping for one minute... "
|
||
|
|
for (( i=0; i<60; i++ )); do
|
||
|
|
if [[ $((i%10)) -eq 0 ]]; then
|
||
|
|
echo -n "$i"
|
||
|
|
else
|
||
|
|
echo -n "."
|
||
|
|
fi
|
||
|
|
sleep 1
|
||
|
|
done
|
||
|
|
echo ""
|
||
|
|
else
|
||
|
|
finished=true
|
||
|
|
break
|
||
|
|
fi
|
||
|
|
done
|
||
|
|
echo "Completed!"
|
||
|
|
}
|
||
|
|
|
||
|
|
function find_image_by_name(){
|
||
|
|
# ami_ids[region]=ami_id
|
||
|
|
for region in $REGIONS; do
|
||
|
|
expected_name="Copy of ${source_ami} from ${source_region}"
|
||
|
|
# ami-id "name"
|
||
|
|
local query="$(printf 'Images[?Name==`%s`]|[?Public==`true`].[ImageId,Name][]' "${expected_name}")"
|
||
|
|
mapfile -t res < <(
|
||
|
|
aws --profile resf-ami ec2 describe-images --region $region --owners $RESF_AMI_ACCOUNT_ID \
|
||
|
|
--query "${query}" 2>/dev/null \
|
||
|
|
| jq -r '.|@sh'# | tr "'" '"'
|
||
|
|
)
|
||
|
|
res=($res)
|
||
|
|
if [[ ${#res[@]} -eq 0 ]]; then
|
||
|
|
# Skip empty results
|
||
|
|
continue
|
||
|
|
fi
|
||
|
|
id=${res[0]//\"}
|
||
|
|
name=${res[@]/$id}
|
||
|
|
printf "Found public image: %s in %s with name '%s'\n" "$id" "$region" "${name//\"}"
|
||
|
|
ami_ids[$region]=$id
|
||
|
|
done
|
||
|
|
}
|
||
|
|
|
||
|
|
declare -A ami_ids
|
||
|
|
copy
|
||
|
|
change_privacy Public # uses ami_ids
|