search

cisagov / kali-packer

This project can be used to create AMIs based on Kali Linux, a penetration testing distribution.
Creative Commons Zero v1.0 Universal
14 stars 6 forks source link

Use the latest Kali base AMI #132

Closed jsf9k closed 1 year ago

jsf9k commented 1 year ago

💡 Summary

The 2022.4 version of the Kali AMI has been released. We should look at using it, although we will have to be careful that the issues from #127 do not resurface.

Motivation and context

Kali is a rolling release, but when we build from the latest base AMI we don't need to upgrade as many packages and there is less churn when building the AMI.

Implementation notes

Take care that the issues from #127 do not resurface. Depending on exactly what kernel version is used in the new Kali base AMI, it may not be possible to switch to it until #131 can also be taken care of.

jsf9k commented 1 year ago

While working on this I noticed that the device /dev/sda1 no longer exists on Kali Linux, and /dev/xvda is now symlinked to the appropriate /dev/nvme* device. I couldn't find the exact change that caused this, but I assume it is due to an upstream udev rules change. This is something to watch out for with other distributions.

What caused me to notice this was that after booting from the base AMI I had two /dev/nvme* devices. The root disk was the size of the base AMI disk and the other was a blank disk of the size specified in the packer.pkr.hcl config file. Obviously, there should have only been one disk.