Amazon Linux 2023 Release อย่างเป็นทางการแล้วครับ
Amazon Linux ถึงเวลาต้องอัพเดทกันแล้วครับ
นี่เป็นบทความแปล ที่มีเนื้อหามาจากบทความภาษาญี่ปุ่นของ Classmethod, Inc. ในหัวข้อ「Amazon Linux 2023がGAされました」 หากผู้อ่านสนใจอ่านเนื้อหาต้นฉบับสามารถอ่านได้ที่ลิ้งค์ "บทความต้นฉบับ" ด้านล่าง เนื้อหาในบทความนี้การอธิบายบางอย่างจะถูกปรับให้เข้าใจง่ายขึ้นทำให้แตกต่างจากต้นฉบับในบางจุด
ก่อนอื่นอันนี้บทความของ AWS ที่เขียนเกี่ยวกับ Amazon Linux 2023 ครับ
อันนี้เป็น Document ของ AWS ครับ
Amazon Linux 2023 คืออะไร
ภาพรวม
Amazon Linux 2023 คือ Linux Distribution รุ่นที่ 3 ที่ AWS ปรับแต่งให้เหมาะสมกับการใช้งานกับ Cloud ครับ (Amazon Linux คือ รุ่นที่ 1, Amazon Linux2 คือ รุ่นที่ 2)
รุ่นนี้ก็เหมือนรุ่นก่อนๆที่เราไม่จำเป็นต้องจ่ายค่า licence เพิ่มเติมในการใช้งานครับ
โดยแต่ก่อนจะได้ชื่อว่า Amazon Linux 2022 แต่ออกมาไม่ทันปี 2022 เลยกลายเป็น Amazon Linux 2023 แทนครับ
นั่นทำให้ระยะยเวลาการให้การ support ของ Amazon Linux 2 เลยเลื่อนไปเป็น เดือน 6 ปี 2025 แทนครับ
Q. When will support for Amazon Linux 2 end?
Amazon Linux 2 end of support date (End of Life, or EOL) has been extended by two years from 2023-06-30 to 2025-06-30 to provide customers with ample time to migrate to the next version.
Amazon Linux 2 FAQs
และ Amazon Linux 2023 ยัง support ทั้ง CPU Architecture ทั้ง x86_64 และ arm64 เหมือนเดิมครับ
Life Cycle(ระยะเวลาการให้การ Support)
ทุกๆ 2 ปี Amazon Linux จะมีการปล่อย Major version ออกมา แล้วทุกๆไตรมาสจะปล่อย minor version ออกมา โดยจะมีการให้ระยะเวลาการให้การ Support แต่ละ major version อยู่ที่มากสุด 5 ปีครับ
EOL(end of life)ของ Amazon Linux 2023 อยู่ที่ 2028/3/15 ครับ ส่วน EOL ของ รุ่นที่ผ่านๆมาสามารถดูได้จากภาพด้านล่างนี้ครับ
ที่มา: Amazon Linux 2023, a Cloud-Optimized Linux Distribution with Long-Term Support | AWS News Blog
กำหนดาการณ์ Release ของ Amazon Linux เวอร์ชั่นต่อๆไปมีดังตารางด้านล่างนี้ครับ
| Year | Amazon Linux 2023 | Amazon Linux 2025 | Amazon Linux 2027 | Amazon Linux 2029 |
|---|---|---|---|---|
| 2023 | Standard support | |||
| 2024 | Standard support | |||
| 2025 | Maintenance | Standard support | ||
| 2026 | Maintenance | Standard support | ||
| 2027 | Maintenance | Maintenance | Standard support | |
| 2028 | EOL | Maintenance | Standard support | |
| 2029 | EOL | Maintenance | Maintenance | Standard support |
| 2030 | EOL | EOL | Maintenance | Standard support |
| 2031 | EOL | EOL | Maintenance | Maintenance |
ที่มา: Release cadence - Amazon Linux 2023
เนื้อหารายละเอียดของ Major และ minor verison สามารถตรวจสอบได้จาก AWS Official Document ครับ ก่อนจะอัพเกรด ก็อย่าลืมไปตรวจสอบความเข้ากันได้ของเวอร์ชั่นกันก่อนนะครับ ว่าอัพเดทแล้วจะมีปัญหาอะไรไหม
・Major version release— Includes new features and improvements in security and performance across the stack. The improvements might include major changes to the kernel, toolchain, Glib C, OpenSSL, and any other system libraries and utilities. Major releases of Amazon Linux are based in part on the current version of the upstream Fedora Linux distribution. AWS might add or replace specific packages from other non-Fedora upstreams. ・Minor version release— A quarterly update that includes security updates, bug fixes, and new features and packages. Each minor version is a cumulative list of updates that includes security and bug fixes in addition to new features and packages. These releases might include latest language runtimes, such as PHP. They might also include other popular software packages such as Ansible and Docker. Release cadence - Amazon Linux 2023
สำหรับชื่อ minor release จะเป็นแบบด้านล่างนี้ครับ
- 2023.0.20230301
- 2023.1.20230601
- 2023.2.20230901
และสำหรับชื่อ AMI ของแต่ละตัวจะเป็นดังต่อไปนี้ครับ
- al2023-ami-2023.0.20230301.0-kernel-6.1-x86_64
- al2023-ami-2023.1.20230601.0-kernel-6.1-x86_64
- al2023-ami-2023.2.20230901.0-kernel-6.1-x86_64
เราสามารถดู Release note รายละเอียดของแต่ละ release ได้ตามบทความด้านล่างนี้ครับ
version ที่ถูก GA เมื่อวันที่ 15 เดือน 3 ปี 2023 ยังมีปัญหาบางอย่างอยู่ ที่เห็นได้ชัดคือ 2 ข้อต่อไปนี้ครับ
- Systems Manager Patch Manager ยังไม่รองรับ Amazon Linux 2023
- CodeDeploy Agent ยังไม่สามารถทำงานบน Amazon Linux 2023 ได้
ในกรณีที่จำเป็นต้องใช้ 2 อย่างด้านบนนี้ แนะนำให้เลื่อนการใช้ Amazon Linux 2023 ออกไปก่อนครับ
การอัพเดท Package
repository ของ Amazon Linux 2023 จะถูกล็อคไว้ที่บางเวอร์ชั่นครับ
โดยถ้าเป็นการตั้งค่า default Amazon Linux เมื่อก่อน เมื่อ launch instance แล้ว security update จะถูก install ใส่อยู่แล้วครับ
Amazon Linux 2 and the Amazon Linux AMI are updated regularly with security and feature enhancements. If you do not need to preserve data or customizations for your instances, you can simply launch new instances using the current AMI. If you need to preserve data or customizations for your instances, you can maintain those instances through the Amazon Linux package repositories. These repositories contain all the updated packages. You can choose to apply these updates to your running instances. Older versions of the AMI and update packages continue to be available for use, even as new versions are released.
Amazon Linux is configured to download and install critical or important security updates at launch time. We recommend that you make the necessary updates for your use case after launch. For example, you may want to apply all updates (not just security updates) at launch, or evaluate each update and apply only the ones applicable to your system. This is controlled using the following cloud-init setting: repo_upgrade. The following snippet of cloud-init configuration shows how you can change the settings in the user data text you pass to your instance initialization:
Amazon Linux - Amazon Elastic Compute Cloud
แต่ว่า Amazon Linux 2023 ไม่มีการกระทำแบบนั้นแล้ว ถ้า package ของ EC2 instance เป็น AMI เดียวกัน ข้างใน package ก็จะเหมือนกัน ทำให้สามารถสร้าง package version ที่เหมือนกันได้ง่ายขึ้นครับ
ในกรณีที่ต้อง Update จำเป็นจะต้องกำหนด version ของ repository ครับ
# การตรวจสอบ version ของ repository ที่สามารถใช้ได้ $ sudo dnf check-release-update # อัพเดท repository version ที่เรากำหนด $ sudo dnf --releasever=<version> update
สำหรับคนที่ใช้ yum update ผ่าน SSM RunCommand เพื่ออัพเดท ต้องระวังกันหน่อยนะครับ
สำหรับ releasever เราสามารถเลือกเป็น latest หรือวันที่เช่น 2023.0.20230210 ที่เป็นเวอร์ชั่นต่างๆที่ถูกกำหนด
ในกรณีที่ไม่กำหนดจะเป็น version ของ system-release โดยจะเรียงลำดับตามนี้ครับ
- version ที่เรากำหนดใน command line
--releasever=version(ถ้าเรากำหนด) - ค่าที่ถูกกำหนดใน override variable file
/etc/dnf/vars/releasever(ถ้าเราตั้งค่าไว้) - version ของ
system-release
ยกตัวอย่างเช่น ใน command line เรากำหนดเป็น --releasever=version เราไมาใช้ข้อมูลจาก override variable file หรือ version ของ system-release เพราะได้สิทธิที่เหนือกว่า
เราสามารถตรวจสอบเวอร์ชั่น system-release ปัจจุบันได้จาก command ด้านล่างนี้ครับ
$ rpm -q system-release --qf "%{VERSION}\n"
2023.0.20230315
เราสามารถกำหนด override variable file /etc/dnf/vars/releasever ให้เป็น lastest เพื่อตั้งค่าให้เป็นเวอร์ชั่นใหม่ล่าสุดตลอดได้
$ echo latest | sudo tee /etc/dnf/vars/releasever latest
AWS Official Document จะเห็นข้อควรระวังดังที่เขียนตามด้านล่างนี้
If you don't override the releasever variable, it's locked to latest by default.
Deterministic upgrades through versioned repositories usage - Amazon Linux 2023
กรณีที่ไม่ override เหมือว่าจะถูกล็อคให้เป็น lastest ครับ ซึ่งทำให้ผมงงว่าแล่วการอ้างอิงเวอร์ชั่น system-release นั้นมีไว้ทำไมกันครับ โดยถ้าวันหลังมี minor release แล้วจะลองทำการทดสอบอีกทีครับ
รายละเอียดเพิ่มเติมสามารถดูได้ที่ AWS Official Document ด้านล่างนี้ครับ
และสำหรับ bucket manager ได้ถูกเปลี่ยนจาก yum เป็น dnf ครับ สำหรับท่านที่สงสัยความแตกต่างของ yum กับ dnf สามารถดู DNF Document ด้านล่างนี้ได้ครับ
รายการหลักๆที่เปลี่ยนไปจาก Amazon Linux 2
ในช่วงนี้เราจะมาแนะนำสิ่งที่แตกต่างไปจาก Amazon Linux 2 กันครับ
SELinux
ก่อนอื่นเลย SELinux จะถูกเปิดการใช้งานตั้งแต่ Default ครับ
แต่เป็น Permissive mode เลยจะไม่ถูกบังคับจาก SELinux Policy ครับ
รายละเอียดของ SELinux สามารถตรวจสอบได้จาก Official Document ของ SELinux Notebook หรือ Redhat ครับ
OpenSSL
OpenSSL เวอร์ชั่นที่ถูกติดตั้งอยู่ไม่ใช่ 1.0.2 แต่เป็น OpenSSL 3 ครับ
พอเป็น OpenSSL 3 ทำให้สามารถใช้ภาษาเช่น Node.js 18 ที่ Amazon Linux 2 ใช้ไม่ได้
แต่ก็ได้มีเขียนไว้ใน OpenSSL Migration guide ด้านล่างนี้ไว้ว่า การอัพเดทจาก OpenSSL 1.0.2 ให้เป็น OpenSSL 3.0 นั้นจำเป็นต้องใช้ความพยายามสูงอยู๋เหมือนกัน ลองเข้าไปอ่านในบทความด้านล่างนี้ดูครับ
glibc、gcc รวมไปถึง binutils
เวอร์ชั่นของ glibc gcc หรือ binutils ก็ได้ถูกอัพเดทเหมือนกันครับ
| ชื่อ Package | Amazon Linux 2 | Amazon Linux 2023 |
|---|---|---|
| glibc | 2.26 | 2.34 |
| gcc | 7.3 | 11.3 |
| binutils | 2.29 | 2.39 |
glibc กับ gcc มีการอัพเดทเพิ่มเติมมาหลายอย่าง ทำให้สามารถ install package ที่แต่ก่อนทำไม่ได้ด้วย
gp3
Root volume ของ EBS เปลี่ยน Default จาก gp2 เป็น gp3 แล้วครับ
ถือว่าเป็นการอัพเดทที่ดี จะได้ไม่ต้องมาคอยเปลี่ยนเป็นเวอร์ชั่นใหม่ทุกครั้งที่สร้าง instance กันครับ
IMDSv2
มีการปรับใหม่ให้ Default ใช้แต่ IMDSv2 เท่านั้นครับ
ตอนที่ access ไปยัง instance metadata หากไม่ได้รองรับการใช้ IMDSv2 ก็อย่าลืมไปแก้ไขกันด้วยครับ
รายละเอียดเกี่ยวกับ IMDSv2 ดูได้ที่บทความด้านล่างนี้ครับ
kernel live patch
สามารถปรับใช้ patch ของ kernel ได้โดยไม่ต้อง Restart OS แล้วครับ
kernel live patch มีอยู่ 2 ประเภทคือ Security updates กับ bugfixes ครับ
Security updates – Include updates for Linux common vulnerabilities and exposures (CVE). These updates are typically rated as important or critical using the Amazon Linux Security Advisory ratings. They generally map to a Common Vulnerability Scoring System (CVSS) score of 7 and higher. In some cases, AWS might provide updates before a CVE is assigned. In these cases, the patches might appear as bug fixes. Bug fixes – Include fixes for critical bugs and stability issues that aren't associated with CVEs.
Kernel Live Patching on Amazon Linux 2023 - Amazon Linux 2023
ที่กล่าวไปนี่คือ patch เฉยๆนะครับ พวก version update ที่มีการเพิ่มฟังก์ชันต่างๆ ยังทำไม่ได้ครับ
kernel live patch จะมีการให้บริการนานสุด 3 เดือนหลังจาก Release ครับ
การเปิดใช้งาน kernel live patch หรือวิธีการควบคุมต่างๆสามารถตรวจสอบได้ที่ AWS Official Document ด้านล่างนี้ครับ
Kernel Live Patching on Amazon Linux 2023 - Amazon Linux 2023
SSH Server
ใน Amazon Linux 2023 ssh-rsa จะถูกปิด HostKeyAlgorithms ไว้ครับ ในขณะที่เราเชื่อมต่อ SSH นั้น Client จำเป็นต้อง support ssh-ed25519 ecdsa-sha2-nistp256 หรือ rsa-sha2-256 ครับ
ที่ใช้ไม่ได้นั้นมีแค่ ssh-rsa ครับ RSA key pair ที่สร้างจาก Management console ที่ใช้เชื่อม SSH ยังสามารถใช้งานได้ตามปกติครับ เพราะ RSA key pair เป็น 2048-bit SSH-2 RSA เลยสามารถใช้งานได้ตามปกติครับ
Amazon EC2 supports ED25519 and 2048-bit SSH-2 RSA keys for Linux instances.
Amazon EC2 key pairs and Linux instances - Amazon Elastic Compute Cloud
ณ วันที่ 19 เดือน 3 ปี 2023 Tera Term เวอร์ชั่นล่าสุด(4.106) ยังไม่รองรับ rsa-sha2-256 หรือ rsa-sha2-512 ครับ
ดูเหมือนว่าตั้งแต่ 5.0 จะรองรับ rsa-sha2-256 กับ rsa-sha2-512 ครับ แต่ว่าตอนนี้ยังเป็น Beta Version อยู แนะนำให้รอเป็น GA ก่อนครับ
Release Tera Term 5 RC 5.0 beta1 - Tera Term - OSDN
และโดย Default แล้วก็รองรับ KexAlgorithms ตามด้านล่างนี้ด้วยครับ
curve25519-sha256curve25519-sha256@libssh.orgecdh-sha2-nistp256ecdh-sha2-nistp384ecdh-sha2-nistp521diffie-hellman-group-exchange-sha256diffie-hellman-group14-sha256diffie-hellman-group16-sha512diffie-hellman-group18-sha512
ในกรณีที่ Client รองรับแค่ ssh-rsa เราสามารถตั้งค่าฝั่ง EC2 instance ใน crypto-policies ให้รองรับ ssh-rsa ได้ครับ
# ตรวจสอบ crypto-policies ที่เป็น DEFAULT $ update-crypto-policies --show DEFAULT # ตรวจสอบข้อมูล crypto-policies แต่ละชนิด $ cat /etc/crypto-policies/back-ends/opensshserver.config Ciphers aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr MACs hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512 GSSAPIKexAlgorithms gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512- KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512 HostKeyAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com PubkeyAcceptedAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com CASignatureAlgorithms ecdsa-sha2-nistp256,sk-ecdsa-sha2-nistp256@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-256,rsa-sha2-512 # เปลี่ยน crypto-policies ให้เป็น LEGACY $ sudo update-crypto-policies --set LEGACY Setting system policy to LEGACY Note: System-wide crypto policies are applied on application start-up. It is recommended to restart the system for the change of policies to fully take place. # ตรวจสอบว่า crypto-policies เปลี่ยนเป็น LEGACY แล้ว $ update-crypto-policies --show LEGACY # ตรวจสอบข้อมูล crypto-policies แต่ละชนิด $ cat /etc/crypto-policies/back-ends/opensshserver.config Ciphers aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes256-cbc,aes128-gcm@openssh.com,aes128-ctr,aes128-cbc,3des-cbc MACs hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512 GSSAPIKexAlgorithms gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1- KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 HostKeyAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com,ssh-dss,ssh-dss-cert-v01@openssh.com PubkeyAcceptedAlgorithms ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,sk-ssh-ed25519@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com,ssh-dss,ssh-dss-cert-v01@openssh.com CASignatureAlgorithms ecdsa-sha2-nistp256,sk-ecdsa-sha2-nistp256@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,sk-ssh-ed25519@openssh.com,rsa-sha2-256,rsa-sha2-512,ssh-rsa,ssh-dss
ค่า crypto-policies แต่ละชนิดสามารถตรวจสอบได้ที่ /usr/share/crypto-policies/policies/ .pol ครับ
# ไฟล์ .pol ทั้งหมดใน crypto-policies
$ rpm -ql crypto-policies | grep pol$
/etc/crypto-policies/state/CURRENT.pol
/usr/share/crypto-policies/policies/DEFAULT.pol
/usr/share/crypto-policies/policies/EMPTY.pol
/usr/share/crypto-policies/policies/FEDORA38.pol
/usr/share/crypto-policies/policies/FIPS.pol
/usr/share/crypto-policies/policies/FUTURE.pol
/usr/share/crypto-policies/policies/GOST-ONLY.pol
/usr/share/crypto-policies/policies/LEGACY.pol
/usr/share/crypto-policies/policies/NEXT.pol
/usr/share/crypto-policies/policies/TEST-FEDORA39.pol
# ตรวจสอบค่าของการตั้งค่า DEFAULT
$ cat /usr/share/crypto-policies/policies/DEFAULT.pol
# A reasonable default for today's standards. It should provide
# 112-bit security with the exception of SHA1 signatures in DNSSec
# SHA1 is also enabled in HMAC where collision attacks do not matter.
# MACs: all HMAC with SHA1 or better + all modern MACs (Poly1305 etc)
# Curves: all prime >= 255 bits (including Bernstein curves)
# Signature algorithms: with SHA-256 hash or better (no DSA)
# TLS Ciphers: >= 128-bit key, >= 128-bit block (AES, ChaCha20, including AES-CBC)
# non-TLS Ciphers: as TLS Ciphers with added Camellia
# key exchange: ECDHE, RSA, DHE (no DHE-DSS)
# DH params size: >= 2048
# RSA params size: >= 2048
# TLS protocols: TLS >= 1.2, DTLS >= 1.2
mac = AEAD HMAC-SHA2-256 HMAC-SHA1 UMAC-128 HMAC-SHA2-384 HMAC-SHA2-512
group = X25519 X448 SECP256R1 SECP384R1 SECP521R1 \
FFDHE-2048 FFDHE-3072 FFDHE-4096 FFDHE-6144 FFDHE-8192
hash = SHA2-256 SHA2-384 SHA2-512 SHA3-256 SHA3-384 SHA3-512 SHA2-224 SHA3-224 \
SHAKE-256
hash@DNSSec = SHA1+ # SHA1 is still prevalent in DNSSec
sign = ECDSA-SHA3-256 ECDSA-SHA2-256 ECDSA-SHA2-256-FIDO \
ECDSA-SHA3-384 ECDSA-SHA2-384 \
ECDSA-SHA3-512 ECDSA-SHA2-512 \
EDDSA-ED25519 EDDSA-ED25519-FIDO EDDSA-ED448 \
RSA-PSS-SHA3-256 RSA-PSS-SHA2-256 \
RSA-PSS-SHA3-384 RSA-PSS-SHA2-384 \
RSA-PSS-SHA3-512 RSA-PSS-SHA2-512 \
RSA-PSS-RSAE-SHA3-256 RSA-PSS-RSAE-SHA2-256 \
RSA-PSS-RSAE-SHA3-384 RSA-PSS-RSAE-SHA2-384 \
RSA-PSS-RSAE-SHA3-512 RSA-PSS-RSAE-SHA2-512 \
RSA-SHA3-256 RSA-SHA2-256 \
RSA-SHA3-384 RSA-SHA2-384 \
RSA-SHA3-512 RSA-SHA2-512 \
ECDSA-SHA2-224 RSA-PSS-SHA2-224 RSA-SHA2-224 \
ECDSA-SHA3-224 RSA-PSS-SHA3-224 RSA-SHA3-224
sign@DNSSec = RSA-SHA1+ ECDSA-SHA1+ # SHA1 is still prevalent in DNSSec
cipher = AES-256-GCM AES-256-CCM CHACHA20-POLY1305 CAMELLIA-256-GCM \
AES-256-CTR AES-256-CBC CAMELLIA-256-CBC AES-128-GCM AES-128-CCM \
CAMELLIA-128-GCM AES-128-CTR AES-128-CBC CAMELLIA-128-CBC
cipher@TLS = AES-256-GCM AES-256-CCM CHACHA20-POLY1305 AES-256-CBC \
AES-128-GCM AES-128-CCM AES-128-CBC
# CBC ciphers in SSH are considered vulnerable to plaintext recovery attacks
# and disabled in client OpenSSH 7.6 (2017) and server OpenSSH 6.7 (2014).
cipher@SSH = -*-CBC
# 'RSA' is intentionally before DHE ciphersuites, as the DHE ciphersuites have
# interoperability issues in TLS.
key_exchange = ECDHE RSA DHE DHE-RSA PSK DHE-PSK ECDHE-PSK RSA-PSK ECDHE-GSS DHE-GSS
protocol@TLS = TLS1.3 TLS1.2 DTLS1.2
protocol@IKE = IKEv2
# Parameter sizes
min_dh_size = 2048
min_dsa_size = 2048
min_rsa_size = 2048
# GnuTLS only for now
sha1_in_certs = 0
arbitrary_dh_groups = 1
ssh_certs = 1
ssh_etm = 1
EPEL
Amazon Linux 2023 ไม่รองรับ Extra Packages for Enterprise Linux (EPEL) ครับ
Extra Packages for Enterprise Linux (EPEL) is a project in the Fedora community with the objective of creating a large array of packages for enterprise-level Linux operating systems. The project has primarily produced RHEL and CentOS packages. Amazon Linux 2 features a high level of compatibility with CentOS 7. As a result, many EPEL7 packages work on Amazon Linux 2. However, AL2023 doesn't support EPEL or EPEL-like repositories.
Comparing Amazon Linux 2 and Amazon Linux 2023 - Amazon Linux 2023
หากลองทำการเพิ่ม EPEL จะมีข้อความแบบด้านล่างนี้ขึ้นครับ
$ sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm Last metadata expiration check: 0:19:04 ago on Sat Mar 18 22:57:42 2023. epel-release-latest-9.noarch.rpm 275 kB/s | 18 kB 00:00 Error: Problem: conflicting requests - nothing provides redhat-release >= 9 needed by epel-release-9-4.el9.noarch (try to add '--skip-broken' to skip uninstallable packages)
เราอาจจะสงสัยว่า "การ install Nginx ใน Amazon Linux 2 จำเป็นใช้ EPEL งั้นหมายความว่า Amazon Linux 2023 จำเป็นต้องใช้ repository อื่นเหรอ?"
ไม่ต้องห่วงครับ ใน Amazon Linux 2023 นั้น Nginx มี standard repository(amazonlinux.repo) ให้ครับ
Package แต่ละชนิด
ใน Amazon Linux 2023 มีหลาย Package ที่ถูกเพิ่ม ลบ หรือ อัพเดท ครับ
- New packages for Amazon Linux 2023 - Amazon Linux 2023
- Updated packages - Amazon Linux 2023
- Removed packages - Amazon Linux 2023
สิ่งที่ผมคิดว่าน่าสนใจมีอยู่ตามด้านล่างนี้
- Package ที่ถูกเพิ่มเข้ามา
grpcnkfnodejsphp8.1ruby3.2ssmtpstressw3m
- Package ที่ถูกลบ
amazon-linux-extrasansibleawslogsdhcpec2-net-utilsftpgnome-desktop3mysql-connector-odbcNetworkManagernfs4-acl-toolsntppacemakerphppythonpython38rubysquidyum
- Package ที่ถูกอัพเดท
awscli:1.18.147-1.amzn2.0.2->2.9.19-1.amzn2023.0.1bind:9.11.4-26.P2.amzn2.5.2->9.16.27-1.amzn2023.0.2ec2-utils:1.2-47.amzn2->2.0.1-1.amzn2023.0.2gcc:7.3.1-15.amzn2->11.3.1-4.amzn2023.0.2glibc:2.26-62.amzn2->2.34-52.amzn2023.0.2openssh:7.4p1-22.amzn2.0.1->8.7p1-8.amzn2023.0.4openssl:1.0.2k-24.amzn2.0.6->3.0.8-1.amzn2023.0.1postgresql:14.3-2.amzn2.0.1->15.0-1.amzn2023.0.2python3:3.7.16-1.amzn2.0.1->3.9.16-1.amzn2023.0.3
ในกรณีที่เราย้ายจาก Amazon Linux 2 ก็เช็ค Package ที่เราใช้อยู่ว่ามีอยู่หรือไม่กันด้วยนะครับ
นอกจากนี้เราสามารถตรวจสอบ version ของ package ในแต่ละ Release ได้ที่ AWS Official Document ด้านล่างนี้ครับ
เราสามารถตรวจสอบระยะเวลาการ Support ของแต่ละ package ได้ที่ AWS Official Document ด้านล่างนี้ครับ
ความสัมพันธ์กับ Linux distribution อื่น
Amazon Linux 2023 เป็น Linux distribution Fedora base ครับ แตต่ว่า นอกจาก Fedora ก็มี upstream ครับ ยกตัวอย่างเช่น kernel source จะไม่ได้ customise จาก Fedora แต่จะเลือกจาก The Linux Kernel Archives ครับ
The Generally Available (GA) version of AL2023 isn't directly comparable to any specific Fedora release. The AL2023 GA version includes components from Fedora 34, 35, and 36. Some of the components are the same as the components in Fedora and some are modified. Other components more closely resemble the components in CentOS 9 Streams or were developed independently. The Amazon Linux kernel is sourced from the long-term support options that are on kernel.org, chosen independently from Fedora.
Relationship to Fedora - Amazon Linux 2023
ตรวจสอบ AMI
เมื่อเราดูใน EC2 Management console ใน Quick start จะเห็น Amazon Linux 2023 ครับ
เมื่อเราตรวจสอบรายละเอียดของ AMI จะเห็นตามนี้ครับ
$ aws ec2 describe-images \
--image-ids ami-02f3f602d23f1659d
{
"Images": [
{
"Architecture": "x86_64",
"CreationDate": "2023-03-13T23:52:35.000Z",
"ImageId": "ami-02f3f602d23f1659d",
"ImageLocation": "amazon/al2023-ami-2023.0.20230315.0-kernel-6.1-x86_64",
"ImageType": "machine",
"Public": true,
"OwnerId": "137112412989",
"PlatformDetails": "Linux/UNIX",
"UsageOperation": "RunInstances",
"State": "available",
"BlockDeviceMappings": [
{
"DeviceName": "/dev/xvda",
"Ebs": {
"DeleteOnTermination": true,
"Iops": 3000,
"SnapshotId": "snap-07288b20d4d442c83",
"VolumeSize": 8,
"VolumeType": "gp3",
"Throughput": 125,
"Encrypted": false
}
}
],
"Description": "Amazon Linux 2023 AMI 2023.0.20230315.0 x86_64 HVM kernel-6.1",
"EnaSupport": true,
"Hypervisor": "xen",
"ImageOwnerAlias": "amazon",
"Name": "al2023-ami-2023.0.20230315.0-kernel-6.1-x86_64",
"RootDeviceName": "/dev/xvda",
"RootDeviceType": "ebs",
"SriovNetSupport": "simple",
"VirtualizationType": "hvm",
"BootMode": "uefi-preferred",
"DeprecationTime": "2025-03-13T23:52:35.000Z",
"ImdsSupport": "v2.0"
}
]
}
จะเห็นได้ว่า Default Volume เป็น gp3 และ IMDS เป็น v2 ครับ
ต่อไป ไปดู parameter store ครับ
เมื่อเราค้น al2023 จะเห็น 8 parameters แสดงอยู่
/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-6.1-arm64/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-6.1-x86_64/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-arm64/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-6.1-arm64/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-6.1-x86_64/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-arm64/aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64
จะเห็นได้ว่ามี AMI ทั้ง arm64 และ x86-64 architecture ครับ
ความแตกต่างของ minimal กับ default คือ minimal จะมี tools และ utilities พื้นฐานที่จำเป็นเท่านั้นจะถูกติดตั้งใน OS ครับ โดยปกติแล้วเวลาใช้งานจริงน่าจะเลือก default กันครับ
You can choose to use a standard or minimal Amazon Machine Image (AMI) of Amazon Linux 2023 (AL2023). The standard AL2023 AMI is the default Amazon Machine Image (AMI) that you create. This version comes installed with all of the most commonly used applications and tools. We recommend the standard AMI if you want to get started quickly and aren't interested in customizing the AMI. The minimal AL2023 AMI is the basic, streamlined version that contains only the most basic tools and utilities necessary to run the OS. We recommend the minimal AMI if you want to have the smallest possible OS footprint possible. The minimal AMI offers slightly reduced disk space utilization and better long-term cost efficiency. The minimal AMI is suitable if you want a smaller OS and don't mind manually installing tools and applications. For instructions on how to create an Amazon EC2 instance of the standard or minimal AMI type, see Get started with Amazon Linux 2023. Comparing Amazon Linux 2023 standard (default) and minimal AMIs - Amazon Linux 2023
นอกจากนี้ default parameter ของ AMI กับ suffix ก็เหมือนกับ parameter ของ AMI ที่ไม่มีอะไรติดอยู่ครับ
ตรวจสอบ EC2 instance ที่เปิดใช้งานอยู่
งั้นลองเปิดใช้งาน EC2 instance กันดูครับ
EC2 instance ที่เปิดใช้งานอยู่ จะเป็นตามด้านล่างนี้ครับ
$ aws ec2 describe-images --image-ids ami-02f3f602d23f1659d
aws ec2 describe-instances --instance-ids i-08aac655640fd7a9c
{
"Reservations": [
{
"Groups": [],
"Instances": [
{
"AmiLaunchIndex": 0,
"ImageId": "ami-02f3f602d23f1659d",
"InstanceId": "i-08aac655640fd7a9c",
"InstanceType": "t3.micro",
"KeyName": "<key pair name>",
"LaunchTime": "2023-03-15T22:00:40+00:00",
"Monitoring": {
"State": "disabled"
},
"Placement": {
"AvailabilityZone": "us-east-1b",
"GroupName": "",
"Tenancy": "default"
},
"PrivateDnsName": "ip-172-31-7-233.ec2.internal",
"PrivateIpAddress": "172.31.7.233",
"ProductCodes": [],
"PublicDnsName": "ec2-44-192-37-26.compute-1.amazonaws.com",
"PublicIpAddress": "44.192.37.26",
"State": {
"Code": 16,
"Name": "running"
},
"StateTransitionReason": "",
"SubnetId": "subnet-0355def964cb72d89",
"VpcId": "vpc-0e0796981cea634c1",
"Architecture": "x86_64",
"BlockDeviceMappings": [
"GroupName": "launch-wizard-1",
"GroupId": "sg-07ea9d6dc0aa48b2d"
}
],
"Ipv6Addresses": [],
"MacAddress": "02:04:4d:6f:d5:6b",
"NetworkInterfaceId": "eni-01bf04ad7fd8fa1f7",
"OwnerId": "<AWS account ID>",
"PrivateDnsName": "ip-172-31-7-233.ec2.internal",
"PrivateIpAddress": "172.31.7.233",
"PrivateIpAddresses": [
{
"Association": {
"IpOwnerId": "amazon",
"PublicDnsName": "ec2-44-192-37-26.compute-1.amazonaws.com",
"PublicIp": "44.192.37.26"
},
"Primary": true,
"PrivateDnsName": "ip-172-31-7-233.ec2.internal",
"PrivateIpAddress": "172.31.7.233"
}
],
"SourceDestCheck": true,
"Status": "in-use",
"SubnetId": "subnet-0355def964cb72d89",
"VpcId": "vpc-0e0796981cea634c1",
"InterfaceType": "interface"
}
],
"RootDeviceName": "/dev/xvda",
"RootDeviceType": "ebs",
"SecurityGroups": [
{
"GroupName": "launch-wizard-1",
"GroupId": "sg-07ea9d6dc0aa48b2d"
}
],
"SourceDestCheck": true,
"SpotInstanceRequestId": "sir-34cyhnxh",
"Tags": [
{
"Key": "Name",
"Value": "al2023"
}
],
"VirtualizationType": "hvm",
"CpuOptions": {
"CoreCount": 1,
"ThreadsPerCore": 2
},
"CapacityReservationSpecification": {
"CapacityReservationPreference": "open"
},
"HibernationOptions": {
"Configured": false
},
"MetadataOptions": {
"State": "applied",
"HttpTokens": "required",
"HttpPutResponseHopLimit": 2,
"HttpEndpoint": "enabled",
"HttpProtocolIpv6": "disabled",
"InstanceMetadataTags": "disabled"
},
"EnclaveOptions": {
"Enabled": false
},
"BootMode": "uefi-preferred",
"PlatformDetails": "Linux/UNIX",
"UsageOperation": "RunInstances",
"UsageOperationUpdateTime": "2023-03-15T22:00:40+00:00",
"PrivateDnsNameOptions": {
"HostnameType": "ip-name",
"EnableResourceNameDnsARecord": true,
"EnableResourceNameDnsAAAARecord": false
},
"MaintenanceOptions": {
"AutoRecovery": "default"
},
"CurrentInstanceBootMode": "uefi"
}
],
"OwnerId": "<AWS account ID>",
"ReservationId": "r-03d46fb2a23c97dcb"
}
]
}
ตรวจสอบข้อมูล OS
shell
ใช้ SSM session manager เชื่อมไปยัง EC2 Instance แล้วตรวจสอบข้อมูลต่างๆของ OS
# ตรวจสอบ User ปัจจุบัน $ whoami ssm-user # ตรวจสอบ Directory ปัจจุบัน $ pwd /usr/bin # ตรวจสอบ Log shell $ echo $SHELL /bin/bash # ตรวจสอบ shell ที่สามารถใช้ได้ $ cat /etc/shells /bin/sh /bin/bash /usr/bin/sh /usr/bin/bash /bin/csh /bin/tcsh /usr/bin/csh /usr/bin/tcsh
ตรวจสอบ Version ของ OS กับ Kernel
# ตรวจสอบ version ของ OS $ cat /etc/os-release NAME="Amazon Linux" VERSION="2023" ID="amzn" ID_LIKE="fedora" VERSION_ID="2023" PLATFORM_ID="platform:al2023" PRETTY_NAME="Amazon Linux 2023" ANSI_COLOR="0;33" CPE_NAME="cpe:2.3:o:amazon:amazon_linux:2023" HOME_URL="https://aws.amazon.com/linux/" BUG_REPORT_URL="https://github.com/amazonlinux/amazon-linux-2023" SUPPORT_END="2028-03-01" # ตรวจสอบ version ของ Kernel $ uname -r 6.1.15-28.43.amzn2023.x86_64 # ตรวจสอบ รายละเอียดของ Kernel $ rpm -qi kernel Name : kernel Version : 6.1.15 Release : 28.43.amzn2023 Architecture: x86_64 Install Date: Mon Mar 13 23:37:19 2023 Group : System Environment/Kernel Size : 176192488 License : GPLv2 and Redistributable, no modification permitted Signature : RSA/SHA512, Thu Jan 1 00:00:00 1970, Key ID e951904ad832c631 Source RPM : kernel-6.1.15-28.43.amzn2023.src.rpm Build Date : Thu Mar 9 17:16:01 2023 Build Host : ip-10-0-52-220.us-west-2.compute.internal Packager : Amazon Linux Vendor : Amazon Linux URL : http://www.kernel.org/ Summary : The Linux kernel Description : The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc.
SELinux
# SELinux mode $ getenforce Permissive # SELinux status and using SELinux policy $ sestatus SELinux status: enabled SELinuxfs mount: /sys/fs/selinux SELinux root directory: /etc/selinux Loaded policy name: targeted Current mode: permissive Mode from config file: permissive Policy MLS status: enabled Policy deny_unknown status: allowed Memory protection checking: actual (secure) Max kernel policy version: 33 # ตรวจสอบ Audit log file $ sudo ls -l /var/log/audit/audit.log -rw-------. 1 root root 219596 Mar 18 08:45 /var/log/audit/audit.log # ตรวจสอบ Audit log $ sudo head /var/log/audit/audit.log type=DAEMON_START msg=audit(1678917649.599:8216): op=start ver=3.0.6 format=enriched kernel=6.1.15-28.43.amzn2023.x86_64 auid=4294967295 pid=1142 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0res=successAUID="unset" UID="root" type=SYSCALL msg=audit(1678917649.599:77): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffed675b810 a2=3c a3=0 items=0 ppid=1138 pid=1142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditd" exe="/usr/sbin/auditd" subj=system_u:system_r:auditd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1678917649.599:77): proctitle="/sbin/auditd" type=CONFIG_CHANGE msg=audit(1678917649.599:78): op=set audit_pid=1142 old=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=1AUID="unset" type=SYSCALL msg=audit(1678917649.599:78): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffed67594c0 a2=3c a3=0 items=0 ppid=1138 pid=1142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditd" exe="/usr/sbin/auditd" subj=system_u:system_r:auditd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1678917649.599:78): proctitle="/sbin/auditd" type=SERVICE_START msg=audit(1678917649.599:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CONFIG_CHANGE msg=audit(1678917649.709:80): auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 op=add_rule key=(null) list=1 res=1AUID="unset" type=SYSCALL msg=audit(1678917649.709:80): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdd27ed010 a2=420 a3=0 items=0 ppid=1145 pid=1172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1678917649.709:80): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
dnf repository
# รายการ repository $ dnf repolist --all repo id repo name status amazonlinux Amazon Linux 2023 repository enabled amazonlinux-debuginfo Amazon Linux 2023 repository - Debug disabled amazonlinux-source Amazon Linux 2023 repository - Source packages disabled kernel-livepatch Amazon Linux 2023 Kernel Livepatch repository enabled kernel-livepatch-source Amazon Linux 2023 Kernel Livepatch repository - Source packages disabled # ตรวจสอบ ระยะเวลา support ของ package ที่ถูก installed อยู่ $ sudo dnf supportinfo --show installed | sort Last metadata expiration check: 0:26:41 ago on Wed Mar 15 22:01:04 2023. acl 2.3.1-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life acpid 2.0.32-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life alternatives 1.15-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life amazon-cloudwatch-agent 1.247357.0b252275-1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life amazon-ec2-net-utils 2.3.0-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life amazon-linux-repo-s3 2023.0.20230315-1.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life amazon-rpm-config 228-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life amazon-ssm-agent 3.2.582.0-1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life at 3.1.23-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life attr 2.5.1-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life audit 3.0.6-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life audit-libs 3.0.6-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life aws-cfn-bootstrap 2.0-23.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life awscli-2 2.9.19-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life basesystem 11-11.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life bash 5.2.15-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life bash-completion 2.11-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life bc 1.07.1-14.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life bind-libs 9.16.27-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life bind-license 9.16.27-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life bind-utils 9.16.27-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life binutils 2.39-6.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life boost-filesystem 1.75.0-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life boost-system 1.75.0-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life boost-thread 1.75.0-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life bzip2 1.0.8-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life bzip2-libs 1.0.8-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life c-ares 1.17.2-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ca-certificates 2023.2.60-1.0.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life checkpolicy 3.4-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life chkconfig 1.15-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life chrony 4.3-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life cloud-init 22.2.2-1.amzn2023.1.7 installed supported 2028-03-15 Amazon Linux 2023 end-of-life cloud-utils-growpart 0.31-8.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life coreutils 8.32-30.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life coreutils-common 8.32-30.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life cpio 2.13-13.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life cracklib 2.9.6-27.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life cracklib-dicts 2.9.6-27.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life crontabs 1.11-24.20190603git.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life crypto-policies 20220428-1.gitdfb10ea.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life crypto-policies-scripts 20220428-1.gitdfb10ea.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life cryptsetup 2.6.1-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life cryptsetup-libs 2.6.1-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life curl-minimal 7.88.1-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life cyrus-sasl-lib 2.1.27-18.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life cyrus-sasl-plain 2.1.27-18.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dbus 1.12.24-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dbus-broker 32-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dbus-common 1.12.24-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dbus-libs 1.12.24-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life device-mapper 1.02.185-1.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life device-mapper-libs 1.02.185-1.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life diffutils 3.8-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dnf 4.12.0-2.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dnf-data 4.12.0-2.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dnf-plugin-release-notification 1.2-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dnf-plugin-support-info 1.0-2.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dnf-plugins-core 4.1.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dosfstools 4.2-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dracut 055-6.amzn2023.0.6 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dracut-config-ec2 3.0-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dracut-config-generic 055-6.amzn2023.0.6 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dwz 0.14-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life dyninst 10.2.1-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life e2fsprogs 1.46.5-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life e2fsprogs-libs 1.46.5-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ec2-hibinit-agent 1.0.4-0.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ec2-instance-connect 1.1-19.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ec2-instance-connect-selinux 1.1-19.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ec2-utils 2.0.1-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ed 1.14.2-10.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life efi-filesystem 5-4.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life efi-srpm-macros 5-4.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life elfutils-debuginfod-client 0.188-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life elfutils-default-yama-scope 0.188-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life elfutils-libelf 0.188-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life elfutils-libs 0.188-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ethtool 5.15-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life expat 2.5.0-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life file 5.39-7.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life file-libs 5.39-7.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life filesystem 3.14-5.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life findutils 4.8.0-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life fonts-srpm-macros 2.0.5-5.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life fstrm 0.6.1-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life fuse-libs 2.9.9-13.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gawk 5.1.0-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gdbm-libs 1.19-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gdisk 1.0.8-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gettext 0.21-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gettext-libs 0.21-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ghc-srpm-macros 1.5.0-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life glib2 2.73.2-680.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life glibc 2.34-52.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life glibc-all-langpacks 2.34-52.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life glibc-common 2.34-52.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life glibc-gconv-extra 2.34-52.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life glibc-locale-source 2.34-52.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gmp 6.2.1-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gnupg2-minimal 2.3.7-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gnutls 3.7.8-359.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life go-srpm-macros 3.1.0-32.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gpgme 1.15.1-6.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gpm-libs 1.20.7-26.amzn2023.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life grep 3.8-1.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life groff-base 1.22.4-7.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life grub2-common 2.06-61.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life grub2-efi-x64-ec2 2.06-61.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life grub2-pc-modules 2.06-61.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life grub2-tools 2.06-61.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life grub2-tools-minimal 2.06-61.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life grubby 8.40-51.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gssproxy 0.8.4-2.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life gzip 1.12-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life hostname 3.23-4.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life hunspell 1.7.0-9.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life hunspell-en 0.20140811.1-18.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life hunspell-en-GB 0.20140811.1-18.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life hunspell-en-US 0.20140811.1-18.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life hunspell-filesystem 1.7.0-9.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life hwdata 0.353-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life info 6.7-10.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life inih 49-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life initscripts 10.09-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life iproute 5.10.0-2.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life iputils 20210202-2.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life irqbalance 1.9.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life jansson 2.14-0.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life jitterentropy 3.4.1-4.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life json-c 0.14-8.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life kbd 2.4.0-2.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life kbd-misc 2.4.0-2.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life kernel 6.1.15-28.43.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life kernel-livepatch-repo-s3 2023.0.20230315-1.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life kernel-srpm-macros 1.0-14.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life kernel-tools 6.1.15-28.43.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life keyutils 1.6.1-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life keyutils-libs 1.6.1-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life kmod 29-2.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life kmod-libs 29-2.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life kpatch-runtime 0.9.7-8.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life krb5-libs 1.20.1-8.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life less 608-2.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libacl 2.3.1-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libaio 0.3.111-11.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libarchive 3.5.3-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libargon2 20171227-9.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libassuan 2.5.5-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libattr 2.5.1-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libbasicobjects 0.1.1-47.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libblkid 2.37.4-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libcap 2.48-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libcap-ng 0.8.2-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libcbor 0.7.0-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libcollection 0.7.0-47.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libcom_err 1.46.5-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libcomps 0.1.18-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libconfig 1.7.2-7.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libcurl-minimal 7.88.1-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libdb 5.3.28-49.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libdhash 0.5.0-47.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libdnf 0.67.0-1.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libeconf 0.4.0-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libedit 3.1-38.20210714cvs.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libev 4.33-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libevent 2.1.12-3.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libfdisk 2.37.4-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libffi 3.1-28.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libfido2 1.10.0-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libgcc 11.3.1-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libgcrypt 1.10.1-7.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libgomp 11.3.1-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libgpg-error 1.42-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libibverbs 37.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libidn2 2.3.2-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libini_config 1.3.1-47.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libkcapi 1.4.0-105.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libkcapi-hmaccalc 1.4.0-105.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libldb 2.6.1-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libmaxminddb 1.5.2-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libmetalink 0.1.3-14.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libmnl 1.0.4-13.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libmodulemd 2.13.0-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libmount 2.37.4-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libnfsidmap 2.5.4-2.rc3.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libnghttp2 1.51.0-1.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libnl3 3.5.0-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libpath_utils 0.2.1-47.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libpcap 1.10.1-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libpipeline 1.5.3-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libpkgconf 1.8.0-4.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libpsl 0.21.1-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libpwquality 1.4.4-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libref_array 0.1.5-47.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life librepo 1.14.2-1.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libreport-filesystem 2.15.2-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libseccomp 2.5.3-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libselinux 3.4-5.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libselinux-utils 3.4-5.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libsemanage 3.4-5.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libsepol 3.4-3.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libsigsegv 2.13-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libsmartcols 2.37.4-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libsolv 0.7.22-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libss 1.46.5-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libsss_certmap 2.5.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libsss_idmap 2.5.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libsss_nss_idmap 2.5.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libstdc++ 11.3.1-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libstoragemgmt 1.9.4-5.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 libtalloc 2.3.4-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libtasn1 4.19.0-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libtdb 1.4.7-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libtevent 0.13.0-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libtextstyle 0.21-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libtirpc 1.3.3-0.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libunistring 0.9.10-10.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libuser 0.63-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libutempter 1.2.1-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libuuid 2.37.4-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libuv 1.44.1-156.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libverto 0.3.2-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libverto-libev 0.3.2-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libxcrypt 4.4.33-7.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libxml2 2.10.3-2.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libyaml 0.2.5-5.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life libzstd 1.5.2-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life lm_sensors-libs 3.6.0-8.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life lmdb-libs 0.9.29-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life logrotate 3.20.1-2.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life lsof 4.94.0-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life lua-libs 5.4.4-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life lua-srpm-macros 1-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life lz4-libs 1.9.4-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life man-db 2.9.3-3.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life man-pages 5.10-2.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life microcode_ctl 2.1-53.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life mpfr 4.1.0-7.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life nano 5.8-3.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ncurses 6.2-4.20200222.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ncurses-base 6.2-4.20200222.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ncurses-libs 6.2-4.20200222.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life net-tools 2.0-0.59.20160912git.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life nettle 3.8-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life newt 0.52.21-9.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life nfs-utils 2.5.4-2.rc3.amzn2023.0.3 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 npth 1.6-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life nspr 4.35.0-4.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life nss 3.88.1-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life nss-softokn 3.88.1-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life nss-softokn-freebl 3.88.1-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life nss-sysinit 3.88.1-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life nss-util 3.88.1-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ntsysv 1.15-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life numactl-libs 2.0.14-3.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life ocaml-srpm-macros 6-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life openblas-srpm-macros 2-9.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life openldap 2.4.57-6.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life openssh 8.7p1-8.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life openssh-clients 8.7p1-8.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life openssh-server 8.7p1-8.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life openssl 3.0.8-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life openssl-libs 3.0.8-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life openssl-pkcs11 0.4.12-3.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life os-prober 1.77-7.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life p11-kit 0.24.1-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life p11-kit-trust 0.24.1-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life package-notes-srpm-macros 0.4-18.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life pam 1.5.1-8.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life parted 3.4-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life passwd 0.80-10.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life pciutils 3.7.0-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life pciutils-libs 3.7.0-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life pcre2 10.40-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life pcre2-syntax 10.40-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Carp 1.50-458.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Class-Struct 0.66-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-DynaLoader 1.47-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Encode 3.15-462.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Errno 1.30-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Exporter 5.74-459.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Fcntl 1.13-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-File-Basename 2.85-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-File-Path 2.18-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-File-Temp 0.231.100-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-File-stat 1.09-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Getopt-Long 2.52-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Getopt-Std 1.12-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-HTTP-Tiny 0.078-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-IO 1.43-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-IPC-Open3 1.21-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-MIME-Base64 3.16-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-POSIX 1.94-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-PathTools 3.78-459.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Pod-Escapes 1.07-458.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Pod-Perldoc 3.28.01-459.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Pod-Simple 3.42-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Pod-Usage 2.01-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Scalar-List-Utils 1.56-459.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-SelectSaver 1.02-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Socket 2.032-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Storable 3.21-458.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Symbol 1.08-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Term-ANSIColor 5.01-459.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Term-Cap 1.17-458.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Text-ParseWords 3.30-458.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-Time-Local 1.300-5.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-constant 1.33-459.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-if 0.60.800-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-interpreter 5.32.1-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-libs 5.32.1-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-mro 1.23-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-overload 1.31-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-overloading 0.02-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-parent 0.238-458.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-podlators 4.14-458.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-srpm-macros 1-39.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-subs 1.03-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life perl-vars 1.05-477.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life pkgconf 1.8.0-4.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life pkgconf-m4 1.8.0-4.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life pkgconf-pkg-config 1.8.0-4.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life policycoreutils 3.4-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life policycoreutils-python-utils 3.4-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life popt 1.18-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life procps-ng 3.3.17-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life protobuf-c 1.4.1-2.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life psacct 6.6.4-9.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life psmisc 23.4-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life publicsuffix-list-dafsa 20221208-60.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python-chevron 0.13.1-1.amzn2023.0.3 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python-srpm-macros 3.9-41.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3 3.9.16-1.amzn2023.0.3 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-attrs 20.3.0-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-audit 3.0.6-1.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-awscrt 0.16.7-1.amzn2023.0.1 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-babel 2.9.1-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-cffi 1.14.5-1.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-chardet 4.0.0-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-colorama 0.4.4-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-configobj 5.0.6-23.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-cryptography 36.0.1-1.amzn2023.0.3 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-daemon 2.3.0-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-dateutil 2.8.1-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-dbus 1.2.18-1.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-distro 1.5.0-5.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-dnf 4.12.0-2.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-dnf-plugins-core 4.1.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-docutils 0.16-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-gpg 1.15.1-6.amzn2023.0.3 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-hawkey 0.67.0-1.amzn2023.0.5 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-idna 2.10-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-jinja2 2.11.3-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-jmespath 0.10.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-jsonpatch 1.21-14.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-jsonpointer 2.0-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-jsonschema 3.2.0-9.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-libcomps 0.1.18-1.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-libdnf 0.67.0-1.amzn2023.0.5 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-libs 3.9.16-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-libselinux 3.4-5.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-libsemanage 3.4-5.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-libstoragemgmt 1.9.4-5.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-lockfile 0.12.2-5.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-markupsafe 1.1.1-10.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-netifaces 0.10.6-13.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-oauthlib 3.0.2-9.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-pip-wheel 21.3.1-2.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-ply 3.11-11.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-policycoreutils 3.4-6.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-prettytable 0.7.2-25.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-prompt-toolkit 3.0.24-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-pycparser 2.20-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-pyrsistent 0.17.3-6.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-pyserial 3.4-10.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-pysocks 1.7.1-8.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-pytz 2022.7.1-1.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-pyyaml 5.4.1-2.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-requests 2.25.1-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-rpm 4.16.1.3-12.amzn2023.0.5 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-ruamel-yaml 0.16.6-5.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-ruamel-yaml-clib 0.1.2-6.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-setools 4.4.0-9.amzn2023.0.2 installed supported 2028-03-15 Python 3.9 (System Python) has security support until March 2028 python3-setuptools 59.6.0-2.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-setuptools-wheel 59.6.0-2.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-six 1.15.0-5.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-urllib3 1.25.10-5.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life python3-wcwidth 0.2.5-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life quota 4.06-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life quota-nls 4.06-4.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life readline 8.1-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life rng-tools 6.14-1.git.56626083.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life rootfiles 8.1-29.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life rpcbind 1.2.6-0.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life rpm 4.16.1.3-12.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life rpm-build-libs 4.16.1.3-12.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life rpm-libs 4.16.1.3-12.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life rpm-plugin-selinux 4.16.1.3-12.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life rpm-plugin-systemd-inhibit 4.16.1.3-12.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life rpm-sign-libs 4.16.1.3-12.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life rsync 3.2.6-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life rust-srpm-macros 21-42.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life screen 4.8.0-5.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life sed 4.8-7.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life selinux-policy 36.16-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life selinux-policy-targeted 36.16-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life setup 2.13.7-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life shadow-utils 4.9-12.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life slang 2.3.2-9.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life sqlite-libs 3.40.0-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life sssd-client 2.5.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life sssd-common 2.5.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life sssd-kcm 2.5.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life strace 5.16-2.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life sudo 1.9.12-1.p2.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life sysctl-defaults 1.0-3.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life sysstat 12.5.6-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life system-release 2023.0.20230315-1.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life systemd 252.4-1161.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life systemd-libs 252.4-1161.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life systemd-networkd 252.4-1161.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life systemd-pam 252.4-1161.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life systemd-resolved 252.4-1161.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life systemd-udev 252.4-1161.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life systemtap-runtime 4.8-3.amzn2023.0.5 installed supported 2028-03-15 Amazon Linux 2023 end-of-life tar 1.34-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life tbb 2020.3-7.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life tcpdump 4.99.1-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life tcsh 6.24.07-1.amzn2023 installed supported 2028-03-15 Amazon Linux 2023 end-of-life time 1.9-16.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life traceroute 2.1.0-13.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life tzdata 2022g-1.amzn2023.0.1 installed supported 2028-03-15 Amazon Linux 2023 end-of-life unzip 6.0-57.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life update-motd 2.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life userspace-rcu 0.12.1-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life util-linux 2.37.4-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life util-linux-core 2.37.4-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life vim-common 9.0.1314-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life vim-data 9.0.1314-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life vim-enhanced 9.0.1314-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life vim-filesystem 9.0.1314-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life vim-minimal 9.0.1314-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life wget 1.21.3-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life which 2.21-26.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life words 3.0-37.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life xfsdump 3.1.11-2.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life xfsprogs 5.18.0-1.amzn2023.0.3 installed supported 2028-03-15 Amazon Linux 2023 end-of-life xxhash-libs 0.8.0-3.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life xz 5.2.5-9.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life xz-libs 5.2.5-9.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life yum 4.12.0-2.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life zip 3.0-28.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life zlib 1.2.11-33.amzn2023.0.4 installed supported 2028-03-15 Amazon Linux 2023 end-of-life zstd 1.5.2-1.amzn2023.0.2 installed supported 2028-03-15 Amazon Linux 2023 end-of-life
Package กับ version Amazon Linux 2023 ทั้งหมด ที่ Release ในวันที่ 2023/3/15 สามารถตรวจสอบได้ที่ AWS Official Document ด้านล่างนี้ครับ โดยมี package ทั้งหมด 2177 อย่างครับ
รายการ Service
$ systemctl list-unit-files --type=service UNIT FILE STATE PRESET acpid.service disabled disabled amazon-cloudwatch-agent.service disabled disabled amazon-ssm-agent.service enabled enabled arp-ethers.service disabled disabled atd.service enabled enabled auditd.service enabled enabled auth-rpcgss-module.service static - autovt@.service alias - cfn-hup.service generated - chrony-wait.service disabled disabled chronyd.service enabled enabled cloud-config.service enabled disabled cloud-final.service enabled disabled cloud-init-hotplugd.service static - cloud-init-local.service enabled disabled cloud-init.service enabled disabled console-getty.service disabled disabled container-getty@.service static - dbus-broker.service enabled enabled dbus-org.freedesktop.hostname1.service alias - dbus-org.freedesktop.locale1.service alias - dbus-org.freedesktop.login1.service alias - dbus-org.freedesktop.network1.service alias - dbus-org.freedesktop.portable1.service alias - dbus-org.freedesktop.resolve1.service alias - dbus-org.freedesktop.timedate1.service alias - dbus.service alias - debug-shell.service disabled disabled dnf-makecache.service static - dracut-cmdline.service static - dracut-initqueue.service static - dracut-mount.service static - dracut-pre-mount.service static - dracut-pre-pivot.service static - dracut-pre-trigger.service static - dracut-pre-udev.service static - dracut-shutdown.service static - emergency.service static - fstrim.service static - getty@.service enabled enabled grub-boot-indeterminate.service static - grub2-systemd-integration.service static - gssproxy.service disabled disabled hibinit-agent.service enabled enabled import-state.service enabled enabled initrd-cleanup.service static - initrd-parse-etc.service static - initrd-switch-root.service static - initrd-udevadm-cleanup-db.service static - irqbalance.service enabled enabled kmod-static-nodes.service static - kpatch.service disabled disabled ldconfig.service static - libstoragemgmt.service enabled enabled loadmodules.service disabled disabled logrotate.service static - man-db-cache-update.service static - man-db-restart-cache-update.service disabled disabled modprobe@.service static - nfs-blkmap.service disabled disabled nfs-convert.service enabled disabled nfs-idmapd.service static - nfs-mountd.service static - nfs-server.service disabled disabled nfs-utils.service static - nfsdcld.service static - nis-domainname.service disabled disabled pam_namespace.service static - policy-routes@.service static - psacct.service disabled disabled quotaon.service static - rc-local.service static - rdisc.service disabled disabled refresh-policy-routes@.service static - rescue.service static - rngd.service enabled enabled rpc-gssd.service static - rpc-statd-notify.service static - rpc-statd.service static - rpcbind.service disabled disabled rpmdb-rebuild.service enabled enabled selinux-autorelabel-mark.service enabled enabled selinux-autorelabel.service static - selinux-check-proper-disable.service disabled disabled serial-getty@.service indirect disabled sshd-keygen@.service disabled disabled sshd.service enabled enabled sshd@.service static - sssd-autofs.service indirect disabled sssd-kcm.service indirect disabled sssd-nss.service indirect disabled sssd-pac.service indirect disabled sssd-pam.service indirect disabled sssd-ssh.service indirect disabled sssd-sudo.service indirect disabled sssd.service enabled enabled sysstat-collect.service static - sysstat-summary.service static - sysstat.service enabled enabled system-update-cleanup.service static - systemd-ask-password-console.service static - systemd-ask-password-wall.service static - systemd-backlight@.service static - systemd-binfmt.service static - systemd-boot-check-no-failures.service disabled disabled systemd-coredump@.service static - systemd-exit.service static - systemd-firstboot.service static - systemd-fsck-root.service enabled-runtime disabled systemd-fsck@.service static - systemd-halt.service static - systemd-hibernate-resume@.service static - systemd-hibernate.service static - systemd-homed-activate.service disabled disabled systemd-homed.service disabled enabled systemd-hostnamed.service static - systemd-hwdb-update.service static - systemd-hybrid-sleep.service static - systemd-initctl.service static - systemd-journal-catalog-update.service static - systemd-journal-flush.service static - systemd-journald.service static - systemd-journald@.service static - systemd-kexec.service static - systemd-localed.service static - systemd-logind.service static - systemd-machine-id-commit.service static - systemd-modules-load.service static - systemd-network-generator.service enabled enabled systemd-networkd-wait-online.service enabled disabled systemd-networkd-wait-online@.service disabled disabled systemd-networkd.service enabled enabled systemd-oomd.service disabled disabled systemd-portabled.service static - systemd-poweroff.service static - systemd-pstore.service disabled enabled systemd-quotacheck.service static - systemd-random-seed.service static - systemd-reboot.service static - systemd-remount-fs.service enabled-runtime disabled systemd-repart.service static - systemd-resolved.service enabled enabled systemd-rfkill.service static - systemd-suspend-then-hibernate.service static - systemd-suspend.service static - systemd-sysctl.service static - systemd-sysext.service disabled disabled systemd-sysupdate-reboot.service indirect disabled systemd-sysupdate.service indirect disabled systemd-sysusers.service static - systemd-time-wait-sync.service disabled disabled systemd-timedated.service static - systemd-timesyncd.service disabled disabled systemd-tmpfiles-clean.service static - systemd-tmpfiles-setup-dev.service static - systemd-tmpfiles-setup.service static - systemd-udev-settle.service static - systemd-udev-trigger.service static - systemd-udevd.service static - systemd-update-done.service static - systemd-update-utmp-runlevel.service static - systemd-update-utmp.service static - systemd-user-sessions.service static - systemd-userdbd.service indirect disabled systemd-vconsole-setup.service static - systemd-volatile-root.service static - update-motd.service enabled enabled user-runtime-dir@.service static - user@.service static - 169 unit files listed.
รายการ process
$ sudo ps auxf USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 2 0.0 0.0 0 0 ? S 22:00 0:00 [kthreadd] root 3 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [rcu_gp] root 4 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [rcu_par_gp] root 5 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [slub_flushwq] root 6 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [netns] root 8 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [kworker/0:0H-events_highpri] root 10 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [mm_percpu_wq] root 11 0.0 0.0 0 0 ? I 22:00 0:00 \_ [rcu_tasks_kthread] root 12 0.0 0.0 0 0 ? I 22:00 0:00 \_ [rcu_tasks_rude_kthread] root 13 0.0 0.0 0 0 ? I 22:00 0:00 \_ [rcu_tasks_trace_kthread] root 14 0.0 0.0 0 0 ? S 22:00 0:00 \_ [ksoftirqd/0] root 15 0.0 0.0 0 0 ? I 22:00 0:00 \_ [rcu_preempt] root 16 0.0 0.0 0 0 ? S 22:00 0:00 \_ [migration/0] root 18 0.0 0.0 0 0 ? S 22:00 0:00 \_ [cpuhp/0] root 19 0.0 0.0 0 0 ? S 22:00 0:00 \_ [cpuhp/1] root 20 0.0 0.0 0 0 ? S 22:00 0:00 \_ [migration/1] root 21 0.0 0.0 0 0 ? S 22:00 0:00 \_ [ksoftirqd/1] root 23 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [kworker/1:0H-events_highpri] root 25 0.0 0.0 0 0 ? I 22:00 0:00 \_ [kworker/u4:1-events_unbound] root 26 0.0 0.0 0 0 ? S 22:00 0:00 \_ [kdevtmpfs] root 27 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [inet_frag_wq] root 28 0.0 0.0 0 0 ? S 22:00 0:00 \_ [kauditd] root 29 0.0 0.0 0 0 ? S 22:00 0:00 \_ [khungtaskd] root 30 0.0 0.0 0 0 ? S 22:00 0:00 \_ [oom_reaper] root 32 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [writeback] root 33 0.0 0.0 0 0 ? S 22:00 0:00 \_ [kcompactd0] root 34 0.0 0.0 0 0 ? SN 22:00 0:00 \_ [khugepaged] root 35 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [kintegrityd] root 36 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [kblockd] root 37 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [blkcg_punt_bio] root 39 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [tpm_dev_wq] root 40 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [md] root 41 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [edac-poller] root 42 0.0 0.0 0 0 ? S 22:00 0:00 \_ [watchdogd] root 43 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [kworker/1:1H-xfs-log/nvme0n1p1] root 60 0.0 0.0 0 0 ? S 22:00 0:00 \_ [kswapd0] root 63 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [xfsalloc] root 64 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [xfs_mru_cache] root 66 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [kthrotld] root 69 0.0 0.0 0 0 ? I 22:00 0:00 \_ [kworker/1:2-mm_percpu_wq] root 82 0.0 0.0 0 0 ? S 22:00 0:00 \_ [xenbus_probe] root 113 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [nvme-wq] root 115 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [nvme-reset-wq] root 117 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [nvme-delete-wq] root 124 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [mld] root 143 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [ipv6_addrconf] root 162 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [kstrp] root 174 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [zswap-shrink] root 242 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [kworker/u5:0] root 243 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [kworker/0:1H-xfs-log/nvme0n1p1] root 361 0.0 0.0 0 0 ? I 22:00 0:00 \_ [kworker/0:3-cgroup_destroy] root 706 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [xfs-buf/nvme0n1] root 707 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [xfs-conv/nvme0n] root 708 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [xfs-reclaim/nvm] root 709 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [xfs-blockgc/nvm] root 710 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [xfs-inodegc/nvm] root 711 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [xfs-log/nvme0n1] root 712 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [xfs-cil/nvme0n1] root 713 0.0 0.0 0 0 ? S 22:00 0:00 \_ [xfsaild/nvme0n1p1] root 1157 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [ena] root 1179 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [cryptd] root 1340 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [rpciod] root 1341 0.0 0.0 0 0 ? I< 22:00 0:00 \_ [xprtiod] root 2034 0.0 0.0 0 0 ? I 22:06 0:00 \_ [kworker/0:1-mm_percpu_wq] root 2088 0.0 0.0 0 0 ? I 22:06 0:00 \_ [kworker/1:0-events] root 2203 0.0 0.0 0 0 ? I 22:10 0:00 \_ [kworker/u4:0-events_unbound] root 2265 0.0 0.0 0 0 ? I 22:13 0:00 \_ [kworker/1:1-mm_percpu_wq] root 2322 0.0 0.0 0 0 ? I 22:13 0:00 \_ [kworker/0:0-events] root 2329 0.0 0.0 0 0 ? D 22:15 0:00 \_ [kworker/u4:2+events_unbound] root 2454 0.0 0.0 0 0 ? I 22:17 0:00 \_ [kworker/u4:3-events_unbound] root 1 0.2 1.7 105312 16896 ? Ss 22:00 0:02 /usr/lib/systemd/systemd --switched-root --system --deseria root 756 0.0 1.5 42264 14964 ? Ss 22:00 0:00 /usr/lib/systemd/systemd-journald root 1127 0.0 1.1 30288 10460 ? Ss 22:00 0:00 /usr/lib/systemd/systemd-udevd systemd+ 1140 0.0 1.5 21036 14512 ? Ss 22:00 0:00 /usr/lib/systemd/systemd-resolved root 1142 0.0 0.2 36024 2776 ? S<sl 22:00 0:00 /sbin/auditd root 1191 0.0 0.6 15260 6528 ? Ss 22:00 0:00 /usr/bin/systemd-inhibit --what=handle-suspend-key:handle-h root 1358 0.0 0.1 2668 1132 ? S 22:00 0:00 \_ /usr/sbin/acpid -f root 1194 0.0 0.3 81328 2940 ? Ssl 22:00 0:00 /usr/sbin/irqbalance --foreground libstor+ 1195 0.0 0.2 2752 2040 ? Ss 22:00 0:00 /usr/bin/lsmd -d root 1196 3.7 0.7 164768 6868 ? Ssl 22:00 0:37 /usr/sbin/rngd -f -x pkcs11 -x nist root 1197 0.0 1.1 240020 10684 ? Ss 22:00 0:00 /usr/sbin/sssd -i --logger=files root 1263 0.0 1.3 243644 12684 ? S 22:00 0:00 \_ /usr/libexec/sssd/sssd_be --domain implicit_files --uid root 1283 0.0 4.1 267284 39504 ? S 22:00 0:00 \_ /usr/libexec/sssd/sssd_nss --uid 0 --gid 0 --logger=fil dbus 1199 0.0 0.4 8372 3884 ? Ss 22:00 0:00 /usr/bin/dbus-broker-launch --scope system --audit dbus 1217 0.0 0.3 5264 2904 ? S 22:00 0:00 \_ dbus-broker --log 4 --controller 9 --machine-id ec26934 systemd+ 1200 0.0 1.0 235712 9592 ? Ss 22:00 0:00 /usr/lib/systemd/systemd-networkd chrony 1213 0.0 0.4 86864 4152 ? S 22:00 0:00 /usr/sbin/chronyd -F 2 root 1242 0.0 0.3 281008 3532 ? Ssl 22:00 0:00 /usr/sbin/gssproxy -D root 1334 0.0 1.0 17600 9864 ? Ss 22:00 0:00 /usr/lib/systemd/systemd-logind root 1495 0.0 0.2 20544 2624 ? Ss 22:00 0:00 /usr/sbin/atd -f root 1496 0.0 0.1 221344 1068 tty1 Ss+ 22:00 0:00 /sbin/agetty -o -p -- \u --noclear - linux root 1497 0.0 0.1 221388 1064 ttyS0 Ss+ 22:00 0:00 /sbin/agetty -o -p -- \u --keep-baud 115200,57600,38400,960 root 1503 0.0 0.7 29104 7096 ? Ss 22:00 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups root 1840 0.0 1.6 1247744 15776 ? Ssl 22:01 0:00 /usr/bin/amazon-ssm-agent root 1880 0.0 2.8 1484360 26732 ? Sl 22:01 0:00 \_ /usr/bin/ssm-agent-worker root 2009 0.1 2.3 1326884 21740 ? Sl 22:05 0:01 \_ /usr/bin/ssm-session-worker <IAMロール名>-03f3f ssm-user 2029 0.0 0.4 232300 4200 pts/0 Ss 22:05 0:00 \_ sh root 2392 1.0 0.8 260288 8448 pts/0 S+ 22:17 0:00 \_ sudo ps auxf root 2463 0.0 0.3 232680 2912 pts/0 R+ 22:17 0:00 \_ ps auxf root 2395 4.0 0.6 15260 6528 ? Ss 22:17 0:00 /usr/lib/systemd/systemd-userdbd root 2410 0.0 0.8 24876 7684 ? S 22:17 0:00 \_ systemd-userwork root 2412 0.0 0.7 15612 6672 ? S 22:17 0:00 \_ systemd-userwork root 2413 0.0 0.7 15612 6684 ? S 22:17 0:00 \_ systemd-userwork root 2451 6.0 1.3 19836 12912 ? Ss 22:17 0:00 /usr/lib/systemd/systemd --user root 2456 0.0 0.7 115676 6800 ? S 22:17 0:00 \_ (sd-pam)
รายการ Port ที่ใช้งานอยู่
$ sudo ss -antup
Netid State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
udp UNCONN 0 0 172.31.7.233%ens5:68 0.0.0.0:* users:(("systemd-network",pid=1200,fd=17))
udp UNCONN 0 0 127.0.0.1:323 0.0.0.0:* users:(("chronyd",pid=1213,fd=5))
udp UNCONN 0 0 [fe80::4:4dff:fe6f:d56b]%ens5:546 [::]:* users:(("systemd-network",pid=1200,fd=19))
udp UNCONN 0 0 [::1]:323 [::]:* users:(("chronyd",pid=1213,fd=6))
tcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=1503,fd=4))
tcp ESTAB 0 0 172.31.7.233:44510 67.220.240.167:443 users:(("ssm-agent-worke",pid=1880,fd=10))
tcp ESTAB 0 0 172.31.7.233:59786 209.54.182.89:443 users:(("ssm-session-wor",pid=2009,fd=16))
tcp TIME-WAIT 0 0 172.31.7.233:33134 52.119.198.91:443
tcp ESTAB 0 0 172.31.7.233:53100 209.54.181.213:443 users:(("ssm-agent-worke",pid=1880,fd=14))
tcp LISTEN 0 128 [::]:22 [::]:* users:(("sshd",pid=1503,fd=6))
รายการ Disk size
$ df -h Filesystem Size Used Avail Use% Mounted on devtmpfs 4.0M 0 4.0M 0% /dev tmpfs 460M 0 460M 0% /dev/shm tmpfs 184M 384K 184M 1% /run /dev/nvme0n1p1 8.0G 1.8G 6.3G 22% / tmpfs 460M 0 460M 0% /tmp
รายการ File System ที่ถูก mount
$ findmnt TARGET SOURCE FSTYPE OPTIONS / /dev/nvme0n1p1 │ xfs rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,sunit=1024,swidth ├─/proc proc proc rw,nosuid,nodev,noexec,relatime │ └─/proc/sys/fs/binfmt_misc systemd-1 autofs rw,relatime,fd=29,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=1 ├─/sys sysfs sysfs rw,nosuid,nodev,noexec,relatime,seclabel │ ├─/sys/kernel/security securityfs securityfs rw,nosuid,nodev,noexec,relatime │ ├─/sys/fs/cgroup cgroup2 cgroup2 rw,nosuid,nodev,noexec,relatime,seclabel,nsdelegate,memory_recursiveprot │ ├─/sys/fs/pstore pstore pstore rw,nosuid,nodev,noexec,relatime,seclabel │ ├─/sys/firmware/efi/efivars efivarfs efivarfs rw,nosuid,nodev,noexec,relatime │ ├─/sys/fs/bpf bpf bpf rw,nosuid,nodev,noexec,relatime,mode=700 │ ├─/sys/fs/selinux selinuxfs selinuxfs rw,nosuid,noexec,relatime │ ├─/sys/kernel/debug debugfs debugfs rw,nosuid,nodev,noexec,relatime,seclabel │ ├─/sys/kernel/tracing tracefs tracefs rw,nosuid,nodev,noexec,relatime,seclabel │ ├─/sys/kernel/config configfs configfs rw,nosuid,nodev,noexec,relatime │ └─/sys/fs/fuse/connections fusectl fusectl rw,nosuid,nodev,noexec,relatime ├─/dev devtmpfs devtmpfs rw,nosuid,seclabel,size=4096k,nr_inodes=114352,mode=755 │ ├─/dev/shm tmpfs tmpfs rw,nosuid,nodev,seclabel │ ├─/dev/pts devpts devpts rw,nosuid,noexec,relatime,seclabel,gid=5,mode=620,ptmxmode=000 │ ├─/dev/hugepages hugetlbfs hugetlbfs rw,relatime,seclabel,pagesize=2M │ └─/dev/mqueue mqueue mqueue rw,nosuid,nodev,noexec,relatime,seclabel ├─/run tmpfs tmpfs rw,nosuid,nodev,seclabel,size=188280k,nr_inodes=819200,mode=755 │ ├─/run/credentials/systemd-sysctl.service │ │ ramfs ramfs ro,nosuid,nodev,noexec,relatime,seclabel,mode=700 │ ├─/run/credentials/systemd-tmpfiles-setup-dev.service │ │ ramfs ramfs ro,nosuid,nodev,noexec,relatime,seclabel,mode=700 │ └─/run/credentials/systemd-tmpfiles-setup.service │ ramfs ramfs ro,nosuid,nodev,noexec,relatime,seclabel,mode=700 ├─/tmp tmpfs tmpfs rw,nosuid,nodev,seclabel,nr_inodes=1048576 ├─/boot/efi systemd-1 autofs rw,relatime,fd=38,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=1 └─/var/lib/nfs/rpc_pipefs sunrpc rpc_pipefs rw,relatime
รายการ User
$ cat /etc/passwd root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin dbus:x:81:81:System message bus:/:/sbin/nologin systemd-network:x:192:192:systemd Network Management:/:/usr/sbin/nologin systemd-oom:x:999:999:systemd Userspace OOM Killer:/:/usr/sbin/nologin systemd-resolve:x:193:193:systemd Resolver:/:/usr/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/usr/share/empty.sshd:/sbin/nologin rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin libstoragemgmt:x:997:997:daemon account for libstoragemgmt:/:/usr/sbin/nologin systemd-coredump:x:996:996:systemd Core Dumper:/:/usr/sbin/nologin systemd-timesync:x:995:995:systemd Time Synchronization:/:/usr/sbin/nologin ec2-instance-connect:x:994:994::/home/ec2-instance-connect:/sbin/nologin rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin chrony:x:993:993:chrony system user:/var/lib/chrony:/sbin/nologin tcpdump:x:72:72::/:/sbin/nologin ec2-user:x:1000:1000:EC2 Default User:/home/ec2-user:/bin/bash cwagent:x:992:992:Cloudwatch Agent:/home/cwagent:/sbin/nologin ssm-user:x:1001:1001::/home/ssm-user:/bin/bash
รายการ Group
$ cat /etc/group root:x:0: bin:x:1: daemon:x:2: sys:x:3: adm:x:4:ec2-user tty:x:5: disk:x:6: lp:x:7: mem:x:8: kmem:x:9: wheel:x:10:ec2-user cdrom:x:11: mail:x:12: man:x:15: dialout:x:18: floppy:x:19: games:x:20: tape:x:33: video:x:39: ftp:x:50: lock:x:54: audio:x:63: users:x:100: nobody:x:65534: utmp:x:22: utempter:x:35: dbus:x:81: input:x:104: kvm:x:36: render:x:105: sgx:x:106: systemd-journal:x:190:ec2-user systemd-network:x:192: systemd-oom:x:999: systemd-resolve:x:193: ssh_keys:x:998: sshd:x:74: rpc:x:32: libstoragemgmt:x:997: systemd-coredump:x:996: systemd-timesync:x:995: ec2-instance-connect:x:994: stapusr:x:156: stapsys:x:157: stapdev:x:158: rpcuser:x:29: chrony:x:993: tcpdump:x:72: screen:x:84: ec2-user:x:1000: cwagent:x:992: ssm-user:x:1001:
แนะนำให้ทดสอบกับ OS library ก่อนจะใช้ Amazon Linux 2023
เราได้แนะนำเกี่ยวกับ Amazon Linux 2023 Release อย่างเป็นทางการกันไปแล้วครับ
ระยะเวลาการซัพพอร์ทของ Amazon Linux 2 ถูกยืดไปถึงเดือน 6 ปี 2025 ครับ แต่ก็แนะนำให้รีบทดสอบกับ OS library แล้วเปลี่ยนไปใช้ Amazon Linux 2023 เร็วๆดีกว่าครับ
ตอนที่จะทดสอบก็สามารถดูบทความด้านล่างที่เกี่ยวกับความแตกต่างระหว่าง Amazon Linux 2 กับ Amazon Linux 2023 ประกอบการตัดสินใจได้ครับ
หากบทความนี้เป็นประโยชน์ต่อใครสักคนก็ดีใจแล้วครับ
แล้วเจอกันใหม่ในบทความต่อไป สวัสดีครับ
บทความต้นฉบับ
Amazon Linux 2023がGAされました | DevelopersIO
บทความอ้างอิง
- Amazon Linux 2023, a Cloud-Optimized Linux Distribution with Long-Term Support | AWS News Blog
- What is Amazon Linux 2023? - Amazon Linux 2023
- Amazon Linux 2 FAQs
- Amazon Linux 2023, a Cloud-Optimized Linux Distribution with Long-Term Support | AWS News Blog
- Release cadence - Amazon Linux 2023
- Amazon Linux 2023 release notes - Amazon Linux 2023
- Amazon Linux - Amazon Elastic Compute Cloud
- Deterministic upgrades through versioned repositories usage - Amazon Linux 2023
- Changes in DNF CLI compared to YUM — dnf latest documentation
- selinux-notebook/toc.md at main · SELinuxProject/selinux-notebook · GitHub
- Using SELinux Red Hat Enterprise Linux 9 | Red Hat Customer Portal
- /docs/man3.0/man7/migration_guide.html
- Add defense in depth against open firewalls, reverse proxies, and SSRF vulnerabilities with enhancements to the EC2 Instance Metadata Service | AWS Security Blog
- Kernel Live Patching on Amazon Linux 2023 - Amazon Linux 2023
- Amazon EC2 key pairs and Linux instances - Amazon Elastic Compute Cloud
- Release Tera Term 4.106 - Tera Term - OSDN
- Comparing Amazon Linux 2 and Amazon Linux 2023 - Amazon Linux 2023
- New packages for Amazon Linux 2023 - Amazon Linux 2023
- Updated packages - Amazon Linux 2023
- Removed packages - Amazon Linux 2023
- Amazon Linux 2023 packages - Amazon Linux 2023
- Package support statements - Amazon Linux 2023
- Package support status - Amazon Linux 2023
- The Linux Kernel Archives
- Relationship to Fedora - Amazon Linux 2023
- Comparing Amazon Linux 2023 standard (default) and minimal AMIs - Amazon Linux 2023
- Amazon Linux 2023 packages updated 2023-03-15 - Amazon Linux 2023
- Comparing Amazon Linux 2 and Amazon Linux 2023 - Amazon Linux 2023
