From 56ae6fc4dc6419afe860f97d4a9cd8c4ee7fc3b5 Mon Sep 17 00:00:00 2001 From: Neil Hanlon Date: Sun, 22 May 2022 16:06:31 -0400 Subject: [PATCH] Add script to propagate images --- sync/propagate-image.sh | 120 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 120 insertions(+) create mode 100644 sync/propagate-image.sh diff --git a/sync/propagate-image.sh b/sync/propagate-image.sh new file mode 100644 index 0000000..9b71bc5 --- /dev/null +++ b/sync/propagate-image.sh @@ -0,0 +1,120 @@ +#!/bin/bash + +source_ami="$1" +source_region="$2" + +if [[ -z $source_ami || -z $source_region ]]; then + echo "usage: $0 source_ami source_region" + exit 2 +fi + +RESF_AMI_ACCOUNT_ID=792107900819 + +REGIONS=$(aws --profile resf-ami ec2 describe-regions \ + --all-regions \ + --query "Regions[].{Name:RegionName}" \ + --output text | grep -vE "$source_region") + +SOURCE_AMI_NAME=$(aws --profile resf-ami ec2 describe-images \ + --region "$source_region" --image-ids "$source_ami" --query 'Images[0].Name'\ + --output text ) + +# Enforce a name structure +# Rocky-8-ec2-8.6-20220515.0.x86_64 +if [[ ! "${SOURCE_AMI_NAME}" =~ Rocky-[89]-ec2-[89]\.[0-9]-[0-9]+\.[0-9]+\.((aarch|x86_)64|ppc64le|s390x) ]]; then + echo "Bad source ami (${SOURCE_AMI_NAME}). Exiting." + exit 1 +fi + +function copy(){ + for region in $REGIONS; do + echo -n "Creating copy job for $region..." + ami_id=$(aws --profile resf-ami ec2 copy-image \ + --region $region \ + --name "${SOURCE_AMI_NAME}" \ + --source-image-id "${source_ami}" \ + --source-region "${source_region}" \ + --output text 2>&1) + if [[ $? -eq 0 ]]; then + unset ami_ids[$region] + echo ". $ami_id" + if [[ ! -z "$ami_id" ]]; then + ami_ids[$region]="$ami_id" + fi + continue + fi + echo ".an error occurred (likely region is not signed up). Skipping." + done +} + +function change_privacy(){ + local status="$1" + local launch_permission + case $status in + Private) + launch_permission="Remove=[{Group=all}]" + ;; + Public) + launch_permission="Add=[{Group=all}]" + ;; + esac + local finished=false + while ! $finished; do + for region in "${!ami_ids[@]}"; do + echo -n "Making ${ami_ids[$region]} in $region $status..." + aws --profile resf-ami ec2 modify-image-attribute \ + --region $region \ + --image-id "${ami_ids[$region]}" \ + --launch-permission "${launch_permission}" + if [[ $? -eq 0 ]]; then + unset ami_ids[$region] + echo ". Done" + continue + fi + echo ". Still pending" + done + if [[ ${#ami_ids[@]} -gt 0 ]]; then + echo -n "Sleeping for one minute... " + for (( i=0; i<60; i++ )); do + if [[ $((i%10)) -eq 0 ]]; then + echo -n "$i" + else + echo -n "." + fi + sleep 1 + done + echo "" + else + finished=true + break + fi + done + echo "Completed!" +} + +function find_image_by_name(){ + # ami_ids[region]=ami_id + for region in $REGIONS; do + expected_name="Copy of ${source_ami} from ${source_region}" + # ami-id "name" + local query="$(printf 'Images[?Name==`%s`]|[?Public==`true`].[ImageId,Name][]' "${expected_name}")" + mapfile -t res < <( + aws --profile resf-ami ec2 describe-images --region $region --owners $RESF_AMI_ACCOUNT_ID \ + --query "${query}" 2>/dev/null \ + | jq -r '.|@sh'# | tr "'" '"' + ) + res=($res) + if [[ ${#res[@]} -eq 0 ]]; then + # Skip empty results + continue + fi + id=${res[0]//\"} + name=${res[@]/$id} + printf "Found public image: %s in %s with name '%s'\n" "$id" "$region" "${name//\"}" + ami_ids[$region]=$id + done +} + +declare -A ami_ids +copy +change_privacy Public # uses ami_ids