Upgrade GLIBC > 2.34 on ARM64 image to support IAM Roles Anywhere Credential Helper

estar-platform-team commented 1 week ago

Describe the feature

IAM Roles Anywhere Credential Helper requires GLIBC version 2.34 or above. The AMD image works ok but ARM64/v8 needs to be updated or signing helper does not work throwing error:

Error when retrieving credentials from custom-process: /root/.aws/aws_signing_helper: /lib64/libc.so.6: version `GLIBC_2.32' not found (required by /root/.aws/aws_signing_helper)
/root/.aws/aws_signing_helper: /lib64/libc.so.6: version `GLIBC_2.34' not found (required by /root/.aws/aws_signing_helper)

Use Case

When using IAM Roles anywhere one can pass the required certificates and the signing helper to the container so that using a custom config you can use aws signing helper to authenticate using the certificates.

Proposed Solution

Upgrade GLIBC to > 2.34 on the ARM64 image.

Other Information

No response

Acknowledgements

[ ] I may be able to implement this feature request
[ ] This feature might incur a breaking change

CLI version used

2.16.11

Environment details (OS name and version, etc.)

ARM64/V8 image

tim-finnigan commented 1 week ago

Thanks for reaching out. glibc is at the OS layer and so it would need to be provided by whichever distribution you're using. For amazonlinux please consider opening an issue here: https://github.com/amazonlinux. On our end we do have an open feature request for moving to the CLI Docker image to AL2023: https://github.com/aws/aws-cli/issues/8331

github-actions[bot] commented 1 week ago

This issue is now closed. Comments on closed issues are hard for our team to see. If you need more assistance, please open a new issue that references this one.

aws / aws-cli