al/tiny-cloud
al/tiny-cloud
1
0
Fork 0
mirror of https://gitlab.alpinelinux.org/alpine/cloud/tiny-cloud.git synced 2026-05-06 15:50:47 +03:00
Code Packages Wiki

Merge branch 'aws_custom' into 'main'

Browse Source 
Allow to override default IMDS endpoint

See merge request alpine/cloud/tiny-cloud!147
This commit is contained in:
Leonardo Arena 2026-03-25 19:12:14 +00:00
commit 545763d8c1
4 changed files with 56 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
README.md
View File

@ -105,6 +105,36 @@ Alternatively, you can add `tinycloud=cloud=<cloud>` (preferred) or `ds=<cloud>`
`/sys/class/dmi/id/product_serial` (QEMU hack) is another way to explicitly
choose a cloud provider.
### Custom Metadata Service Endpoint
For custom or non-standard metadata services, you can
override the default IMDS endpoint by setting `IMDS_ENDPOINT` in
`/etc/tiny-cloud.conf`:
```sh
# For Tinkerbell or other custom metadata services
IMDS_ENDPOINT=192.0.2.1:50061
```
The default endpoint is `169.254.169.254` for most cloud providers. This
setting allows you to specify a custom IP address and optional port for the
metadata service.
### AWS Metadata API Version
For AWS-compatible metadata services that don't support IMDSv2 tokens (like
Tinkerbell's Hegel), you can specify the API version in `/etc/tiny-cloud.conf`:
```sh
# Use IMDSv1 (2009-04-04) without tokens for Tinkerbell
CLOUD=aws
IMDS_ENDPOINT=192.0.2.1:50061
IMDS_URI=2009-04-04
```
The default is `latest` which uses IMDSv2 with token authentication. Setting
`IMDS_URI=2009-04-04` uses the older IMDSv1 API without tokens.
## Operation
The first time an instance boots -- either freshly instantiated from an image,

3
bin/imds
View File

@ -52,7 +52,8 @@ unset -f \
### default variables/functions
# Common to many clouds
IMDS_ENDPOINT="169.254.169.254"
# Can be overridden in /etc/tiny-cloud.conf
: "${IMDS_ENDPOINT:=169.254.169.254}"
# Common to AWS and NoCloud(ish)
IMDS_HOSTNAME="meta-data/hostname"

12
lib/tiny-cloud/cloud/aws/imds
View File

@ -5,14 +5,22 @@
IMDS_HEADER="X-aws-ec2-metadata-token"
IMDS_TOKEN_TTL_HEADER="X-aws-ec2-metadata-token-ttl-seconds"
: "${IMDS_TOKEN_TTL:=5}"
IMDS_URI="latest"
# Allow override of IMDS API version (default: latest, can use 2009-04-04 for IMDSv1)
: "${IMDS_URI:=latest}"
_imds_token() {
# Only try to get token if using 'latest' API version (IMDSv2)
# Older versions like 2009-04-04 don't support tokens (IMDSv1)
if [ "$IMDS_URI" = "latest" ]; then
printf "PUT /latest/api/token HTTP/1.0\r\n%s: %s\r\n\r\n" \
"$IMDS_TOKEN_TTL_HEADER" "$IMDS_TOKEN_TTL" \
| nc -w 1 "$IMDS_ENDPOINT" 80 | tail -n 1
fi
}
_imds_header() {
echo "$IMDS_HEADER: $(_imds_token)"
local token="$(_imds_token)"
if [ -n "$token" ]; then
echo "$IMDS_HEADER: $token"
fi
}

12
lib/tiny-cloud/tiny-cloud.conf
View File

@ -8,7 +8,17 @@
# User account where instance SSH keys are installed
#CLOUD_USER=alpine
# IMDS token validity, in seconds (AWS only)
# IMDS endpoint override (IP:PORT or IP)
# Defaults to 169.254.169.254 for most clouds
# Useful for custom metadata services
#IMDS_ENDPOINT=169.254.169.254
# IMDS API version (AWS only)
# Defaults to 'latest' (IMDSv2 with tokens)
# Use '2009-04-04' for IMDSv1 without tokens (e.g., Tinkerbell)
#IMDS_URI=latest
# IMDS token validity, in seconds (AWS only, IMDSv2)
#IMDS_TOKEN_TTL=5
# Location of var directory