cisagov / kali-packer

This project can be used to create AMIs based on Kali Linux, a penetration testing distribution.
Creative Commons Zero v1.0 Universal
14 stars 6 forks source link

Remove stale cloud-init cruft #77

Closed jsf9k closed 2 years ago

jsf9k commented 2 years ago

🗣 Description

This pull request adds code to remove some stale cloud-init cruft inherited from the Kali base AMI we are using. It also picks up the bugfix from cisagov/ansible-role-cobalt-strike#44.

💭 Motivation and context

The Kali base AMI we are using does not seem to have run this to clean up after itself. If we don't do it then userdata, for instance, will be ignored and not run when our AMI is started.

Resolves cisagov/cool-system-internal#45.

See also cisagov/ansible-role-cobalt-strike#43.

🧪 Testing

I built and deployed a new AMI to our staging COOL environment and verified that the userdata was being run; in particular, I verified that with these changes the EFS share is being mounted as expected. I also verified that the Cobalt Strike deployment could now be upgraded.

✅ Checklist

jsf9k commented 2 years ago

This trail was a red herring. See #83 for the real solution.