SSM Agent on NixOS AMI

mmport80 · January 6, 2022, 11:31am

I created an EC2 instance with the latest image from here:

NixOS/nixpkgs/blob/7a3a6811562634ddea7a86ca0358897065e113aa/nixos/modules/virtualisation/amazon-ec2-amis.nix

let self = {
  "14.04".ap-northeast-1.x86_64-linux.hvm-ebs = "ami-71c6f470";
  "14.04".ap-northeast-1.x86_64-linux.pv-ebs = "ami-4dcbf84c";
  "14.04".ap-northeast-1.x86_64-linux.pv-s3 = "ami-8fc4f68e";
  "14.04".ap-southeast-1.x86_64-linux.hvm-ebs = "ami-da280888";
  "14.04".ap-southeast-1.x86_64-linux.pv-ebs = "ami-7a9dbc28";
  "14.04".ap-southeast-1.x86_64-linux.pv-s3 = "ami-c4290996";
  "14.04".ap-southeast-2.x86_64-linux.hvm-ebs = "ami-ab523e91";
  "14.04".ap-southeast-2.x86_64-linux.pv-ebs = "ami-6769055d";
  "14.04".ap-southeast-2.x86_64-linux.pv-s3 = "ami-15533f2f";
  "14.04".eu-central-1.x86_64-linux.hvm-ebs = "ami-ba0234a7";
  "14.04".eu-west-1.x86_64-linux.hvm-ebs = "ami-96cb63e1";
  "14.04".eu-west-1.x86_64-linux.pv-ebs = "ami-b48c25c3";
  "14.04".eu-west-1.x86_64-linux.pv-s3 = "ami-06cd6571";
  "14.04".sa-east-1.x86_64-linux.hvm-ebs = "ami-01b90e1c";
  "14.04".sa-east-1.x86_64-linux.pv-ebs = "ami-69e35474";
  "14.04".sa-east-1.x86_64-linux.pv-s3 = "ami-61b90e7c";
  "14.04".us-east-1.x86_64-linux.hvm-ebs = "ami-58ba3a30";
  "14.04".us-east-1.x86_64-linux.pv-ebs = "ami-9e0583f6";
  "14.04".us-east-1.x86_64-linux.pv-s3 = "ami-9cbe3ef4";

This file has been truncated. show original

But no SSM Agent installed (it would be nice to have it by default, if possible).

We use it to securely SSH into private subnets etc.

Then again, perhaps I just need to look into using the “deploy NixOS” Terraform module. And make the customisation myself.

Any tips / thoughts would be appreciated!

mmport80 · January 6, 2022, 12:17pm

OK, looks like the deploy NixOS module depends on SSH, which is not accessible without the SSM agent running… Hmm