TerraformのEC2でユーザデータのyumが動かない現象を解消してみた

TerraformのEC2でユーザデータのyumが動かない現象を解消してみた

#Terraform
#Amazon EC2
#AWS
つくぼし

つくぼし

facebook logohatena logotwitter logo
Clock Icon2022.04.28

この記事は公開されてから1年以上経過しています。情報が古い可能性がありますので、ご注意ください。

こんにちは！着々と一人暮らしのためのお引越しを進めているつくぼし(tsukuboshi0755)です！

TerraformでEC2を構築していた際に、EC2のユーザデータに記載していたyumコマンドが正常に動いていない事がありました。
意外と見落としがちな箇所だったので、共有してみたいと思います！

環境

$ terraform -v

Terraform v1.1.7
on darwin_arm64

検証構成図

Internet Gatewayから、Public Subnet上のNAT Gatewayを介して、Private SubnetのEC2へのインターネット経路を確保します。
EC2にはSSMのセッションマネージャ機能でログインします。
EC2作成後、ユーザデータでyum updateコマンドを実施するように設定します。

何があったの？

①tfファイルを以下の通り作成

$ tree
.
├── ec2.tf
├── iam.tf
├── main.tf
├── securitygroup.tf
├── src
│   └── user_data.tpl
├── variable.tf
└── vpc.tf
ec2.tf 
# ====================
#
# AMI
#
# ====================
# 最新版のAmazonLinux2のAMI情報
data "aws_ami" "tf_ami" {
  most_recent = true
  owners      = ["amazon"]

  filter {
    name   = "architecture"
    values = ["x86_64"]
  }

  filter {
    name   = "root-device-type"
    values = ["ebs"]
  }

  filter {
    name   = "name"
    values = ["amzn2-ami-hvm-*"]
  }

  filter {
    name   = "virtualization-type"
    values = ["hvm"]
  }

  filter {
    name   = "block-device-mapping.volume-type"
    values = ["gp2"]
  }

  filter {
    name   = "state"
    values = ["available"]
  }
}

# ====================
#
# EC2 Instance
#
# ====================

resource "aws_instance" "tf_instance" {
  ami                         = data.aws_ami.tf_ami.image_id
  instance_type               = var.instance_type
  subnet_id                   = aws_subnet.tf_subnet_2.id
  associate_public_ip_address = false
  vpc_security_group_ids      = [aws_security_group.tf_sg.id]
  iam_instance_profile        = aws_iam_instance_profile.tf_instance_profile.name

  tags = {
    Name    = "${var.project}-${var.environment}-ec2"
    Project = var.project
    Env     = var.environment
  }
}
iam.tf 
# ====================
#
# IAM
#
# ====================

data "aws_iam_policy_document" "tf_policy_document" {
  statement {
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

resource "aws_iam_role" "tf_iam_role" {
  name               = "tf_iam_role"
  assume_role_policy = data.aws_iam_policy_document.tf_policy_document.json
}

resource "aws_iam_role_policy_attachment" "tf_iam_role_policy_attachment" {
  role       = aws_iam_role.tf_iam_role.name
  policy_arn = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
}

resource "aws_iam_instance_profile" "tf_instance_profile" {
  name = "tf_instance_profile"
  role = aws_iam_role.tf_iam_role.name
}
src/user_data.tpl 
#!/bin/bash
yum update -y
main.tf 
# ====================
#
# Terraform
#
# ====================

terraform {
  required_version = ">=1.0.0"
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 4.0"
    }
  }
}

# ====================
#
# Provider
#
# ====================

provider "aws" {
  region = var.aws_region
}
securitygroup.tf 
# ====================
#
# Security Group
#
# ====================
resource "aws_security_group" "tf_sg" {
  name   = "tf_sg"
  vpc_id = aws_vpc.tf_vpc.id

  tags = {
    Name    = "${var.project}-${var.environment}-sg"
    Project = var.project
    Env     = var.environment
  }
}

# アウトバウンドルール(全開放)
resource "aws_security_group_rule" "out_all" {
  security_group_id = aws_security_group.tf_sg.id
  type              = "egress"
  cidr_blocks       = ["0.0.0.0/0"]
  from_port         = 0
  to_port           = 0
  protocol          = "-1"
}
vpc.tf 
# ====================
#
# VPC
#
# ====================

resource "aws_vpc" "tf_vpc" {
  cidr_block           = var.vpc_cidr_block
  enable_dns_support   = var.vpc_enable_dns_support
  enable_dns_hostnames = var.vpc_enable_dns_hostnames

  tags = {
    Name    = "${var.project}-${var.environment}-vpc"
    Project = var.project
    Env     = var.environment
  }
}

# ====================
#
# Subnet
#
# ====================

#パプリックサブネット

resource "aws_subnet" "tf_subnet_1" {
  vpc_id                  = aws_vpc.tf_vpc.id
  cidr_block              = var.subnet_cidr_block_1
  map_public_ip_on_launch = true
  availability_zone       = var.availability_zone

  tags = {
    Name    = "${var.project}-${var.environment}-subnet-1"
    Project = var.project
    Env     = var.environment
  }
}

#プライベートサブネット

resource "aws_subnet" "tf_subnet_2" {
  vpc_id                  = aws_vpc.tf_vpc.id
  cidr_block              = var.subnet_cidr_block_2
  map_public_ip_on_launch = false
  availability_zone       = var.availability_zone

  tags = {
    Name    = "${var.project}-${var.environment}-subnet-2"
    Project = var.project
    Env     = var.environment
  }
}

# ====================
#
# Internet Gateway
#
# ====================
resource "aws_internet_gateway" "tf_igw" {
  vpc_id = aws_vpc.tf_vpc.id

  tags = {
    Name    = "${var.project}-${var.environment}-igw"
    Project = var.project
    Env     = var.environment
  }
}

# ====================
#
# Elastic IP
#
# ====================

resource "aws_eip" "tf_eip" {
  vpc        = true
  depends_on = [aws_internet_gateway.tf_igw]

  tags = {
    Name    = "${var.project}-${var.environment}-eip"
    Project = var.project
    Env     = var.environment
  }
}

# ====================
#
# Nat Gateway
#
# ====================

resource "aws_nat_gateway" "tf_ngw" {
  allocation_id = aws_eip.tf_eip.id
  subnet_id     = aws_subnet.tf_subnet_1.id

  tags = {
    Name = "${var.project}-${var.environment}-ngw"
  }

  depends_on = [aws_eip.tf_eip]
}

# ====================
#
# Route Table
#
# ====================

#パブリックルートテーブル
resource "aws_route_table" "tf_public_rt" {
  vpc_id = aws_vpc.tf_vpc.id
  tags = {
    Name    = "${var.project}-${var.environment}-rt"
    Project = var.project
    Env     = var.environment
  }
}

resource "aws_route" "tf_public_route" {
  route_table_id         = aws_route_table.tf_public_rt.id
  gateway_id             = aws_internet_gateway.tf_igw.id
  destination_cidr_block = "0.0.0.0/0"
}

resource "aws_route_table_association" "tf_public_subrt" {
  subnet_id      = aws_subnet.tf_subnet_1.id
  route_table_id = aws_route_table.tf_public_rt.id
}

#プライベートルートテーブル
resource "aws_route_table" "tf_private_rt" {
  vpc_id = aws_vpc.tf_vpc.id
  tags = {
    Name    = "${var.project}-${var.environment}-private-rt"
    Project = var.project
    Env     = var.environment
  }
}

resource "aws_route" "tf_private_route" {
  route_table_id         = aws_route_table.tf_private_rt.id
  gateway_id             = aws_nat_gateway.tf_ngw.id
  destination_cidr_block = "0.0.0.0/0"
}

resource "aws_route_table_association" "tf_private_subrt_2" {
  subnet_id      = aws_subnet.tf_subnet_2.id
  route_table_id = aws_route_table.tf_private_rt.id
}
variables.tf 
# ====================
#
# Variables
#
# ====================

variable "aws_region" {
  default = "ap-northeast-1"
}

variable "project" {
  default = "minimum"
}

variable "environment" {
  default = "test"
}

# EC2 #
variable "instance_type" {
  default = "t2.micro"
}

variable "user_data_file" {
  default = "./src/user_data.tpl"
}

# VPC #
variable "vpc_cidr_block" {
  default = "10.0.0.0/16"
}

variable "vpc_enable_dns_support" {
  default = "true"
}

variable "vpc_enable_dns_hostnames" {
  default = "false"
}

variable "subnet_cidr_block_1" {
  default = "10.0.0.0/24"
}

variable "subnet_cidr_block_2" {
  default = "10.0.1.0/24"
}

variable "availability_zone" {
  default = "ap-northeast-1a"
}

③terraform applyコマンドを実施し、リソースを構築

④SSMセッションマネージャを用いて、構築したEC2インスタンスにログイン

⑤/var/log/cloud-init-output.log(ユーザデータの実行結果ログ)を見ると、ユーザデータのyum updateコマンドが失敗してる...？

sh-4.2$ sudo cat /var/log/cloud-init-output.log
Cloud-init v. 19.3-45.amzn2 running 'init-local' at Thu, 28 Apr 2022 01:23:57 +0000. Up 6.57 seconds.
Cloud-init v. 19.3-45.amzn2 running 'init' at Thu, 28 Apr 2022 01:23:58 +0000. Up 7.71 seconds.
ci-info: ++++++++++++++++++++++++++++++++++++++Net device info++++++++++++++++++++++++++++++++++++++
ci-info: +--------+------+----------------------------+---------------+--------+-------------------+
ci-info: | Device |  Up  |          Address           |      Mask     | Scope  |     Hw-Address    |
ci-info: +--------+------+----------------------------+---------------+--------+-------------------+
ci-info: |  eth0  | True |         10.0.1.118         | 255.255.255.0 | global | 06:1b:09:68:41:7b |
ci-info: |  eth0  | True | fe80::41b:9ff:fe68:417b/64 |       .       |  link  | 06:1b:09:68:41:7b |
ci-info: |   lo   | True |         127.0.0.1          |   255.0.0.0   |  host  |         .         |
ci-info: |   lo   | True |          ::1/128           |       .       |  host  |         .         |
ci-info: +--------+------+----------------------------+---------------+--------+-------------------+
ci-info: ++++++++++++++++++++++++++++++Route IPv4 info+++++++++++++++++++++++++++++++
ci-info: +-------+-----------------+----------+-----------------+-----------+-------+
ci-info: | Route |   Destination   | Gateway  |     Genmask     | Interface | Flags |
ci-info: +-------+-----------------+----------+-----------------+-----------+-------+
ci-info: |   0   |     0.0.0.0     | 10.0.1.1 |     0.0.0.0     |    eth0   |   UG  |
ci-info: |   1   |     10.0.1.0    | 0.0.0.0  |  255.255.255.0  |    eth0   |   U   |
ci-info: |   2   | 169.254.169.254 | 0.0.0.0  | 255.255.255.255 |    eth0   |   UH  |
ci-info: +-------+-----------------+----------+-----------------+-----------+-------+
ci-info: +++++++++++++++++++Route IPv6 info+++++++++++++++++++
ci-info: +-------+-------------+---------+-----------+-------+
ci-info: | Route | Destination | Gateway | Interface | Flags |
ci-info: +-------+-------------+---------+-----------+-------+
ci-info: |   9   |  fe80::/64  |    ::   |    eth0   |   U   |
ci-info: |   11  |    local    |    ::   |    eth0   |   U   |
ci-info: |   12  |   ff00::/8  |    ::   |    eth0   |   U   |
ci-info: +-------+-------------+---------+-----------+-------+
Cloud-init v. 19.3-45.amzn2 running 'modules:config' at Thu, 28 Apr 2022 01:24:00 +0000. Up 9.81 seconds.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd

 One of the configured repositories failed (Unknown),
 and yum doesn't have enough cached data to continue. At this point the only
 safe thing yum can do is fail. There are a few ways to work "fix" this:

     1. Contact the upstream for the repository and get them to fix the problem.

     2. Reconfigure the baseurl/etc. for the repository, to point to a working
        upstream. This is most often useful if you are using a newer
        distribution release than is supported by the repository (and the
        packages for the previous distribution release still work).

     3. Run the command with the repository temporarily disabled
            yum --disablerepo=<repoid> ...

     4. Disable the repository permanently, so yum won't use it by default. Yum
        will then just ignore the repository until you permanently enable it
        again or use --enablerepo for temporary usage:

            yum-config-manager --disable <repoid>
        or
            subscription-manager repos --disable=<repoid>

     5. Configure the failing repository to be skipped, if it is unavailable.
        Note that yum will try to contact the repo. when it runs most commands,
        so will have to try and fail each time (and thus. yum will be be much
        slower). If it is a very temporary problem though, this is often a nice
        compromise:

            yum-config-manager --save --setopt=<repoid>.skip_if_unavailable=true

Cannot find a valid baseurl for repo: amzn2-core/2/x86_64
Could not retrieve mirrorlist https://amazonlinux-2-repos-ap-northeast-1.s3.dualstack.ap-northeast-1.amazonaws.com/2/core/latest/x86_64/mirror.list error was
12: Timeout on https://amazonlinux-2-repos-ap-northeast-1.s3.dualstack.ap-northeast-1.amazonaws.com/2/core/latest/x86_64/mirror.list: (28, 'Failed to connect to amazonlinux-2-repos-ap-northeast-1.s3.dualstack.ap-northeast-1.amazonaws.com port 443 after 2702 ms: Connection timed out')
Apr 28 01:24:21 cloud-init[3008]: util.py[WARNING]: Package upgrade failed
Apr 28 01:24:21 cloud-init[3008]: cc_package_update_upgrade_install.py[WARNING]: 1 failed with exceptions, re-raising the last one
Apr 28 01:24:21 cloud-init[3008]: util.py[WARNING]: Running module package-update-upgrade-install (<module 'cloudinit.config.cc_package_update_upgrade_install' from '/usr/lib/python2.7/site-packages/cloudinit/config/cc_package_update_upgrade_install.pyc'>) failed
Cloud-init v. 19.3-45.amzn2 running 'modules:final' at Thu, 28 Apr 2022 01:24:21 +0000. Up 30.74 seconds.
ci-info: no authorized ssh keys fingerprints found for user ec2-user.
Cloud-init v. 19.3-45.amzn2 finished at Thu, 28 Apr 2022 01:24:21 +0000. Datasource DataSourceEc2.  Up 30.90 seconds

エラー原因

結論から言うと、まだインターネットへの経路が確保されていない段階で、EC2インスタンス上でユーザデータによる初期化が行われていた事が原因でした。
terraform applyコマンドの出力を眺めていた際に、NAT Gatewayより先にEC2インスタンスが出来上がっていたのに気づいたのがきっかけです。

NAT Gatewayは作成に2-3分程度かかるので、特に何も指定しないと先にEC2インスタンスが作られてしまうようです。。。

解決方法

depends_onを用いて、明示的にNAT Gatewayの後にEC2インスタンスを作成するようにしました。

# ====================
#
# EC2 Instance
#
# ====================

resource "aws_instance" "tf_instance" {

#(中略)

	depends_on = [
    aws_nat_gateway.tf_ngw
  ]
}

結果、無事ユーザデータが正常に実行されるようになりました！

sh-4.2$ sudo cat /var/log/cloud-init-output.log
Cloud-init v. 19.3-45.amzn2 running 'init-local' at Thu, 28 Apr 2022 01:39:51 +0000. Up 8.09 seconds.
Cloud-init v. 19.3-45.amzn2 running 'init' at Thu, 28 Apr 2022 01:39:52 +0000. Up 9.31 seconds.
ci-info: ++++++++++++++++++++++++++++++++++++++Net device info+++++++++++++++++++++++++++++++++++++++
ci-info: +--------+------+-----------------------------+---------------+--------+-------------------+
ci-info: | Device |  Up  |           Address           |      Mask     | Scope  |     Hw-Address    |
ci-info: +--------+------+-----------------------------+---------------+--------+-------------------+
ci-info: |  eth0  | True |          10.0.1.241         | 255.255.255.0 | global | 06:3b:6c:95:aa:6d |
ci-info: |  eth0  | True | fe80::43b:6cff:fe95:aa6d/64 |       .       |  link  | 06:3b:6c:95:aa:6d |
ci-info: |   lo   | True |          127.0.0.1          |   255.0.0.0   |  host  |         .         |
ci-info: |   lo   | True |           ::1/128           |       .       |  host  |         .         |
ci-info: +--------+------+-----------------------------+---------------+--------+-------------------+
ci-info: ++++++++++++++++++++++++++++++Route IPv4 info+++++++++++++++++++++++++++++++
ci-info: +-------+-----------------+----------+-----------------+-----------+-------+
ci-info: | Route |   Destination   | Gateway  |     Genmask     | Interface | Flags |
ci-info: +-------+-----------------+----------+-----------------+-----------+-------+
ci-info: |   0   |     0.0.0.0     | 10.0.1.1 |     0.0.0.0     |    eth0   |   UG  |
ci-info: |   1   |     10.0.1.0    | 0.0.0.0  |  255.255.255.0  |    eth0   |   U   |
ci-info: |   2   | 169.254.169.254 | 0.0.0.0  | 255.255.255.255 |    eth0   |   UH  |
ci-info: +-------+-----------------+----------+-----------------+-----------+-------+
ci-info: +++++++++++++++++++Route IPv6 info+++++++++++++++++++
ci-info: +-------+-------------+---------+-----------+-------+
ci-info: | Route | Destination | Gateway | Interface | Flags |
ci-info: +-------+-------------+---------+-----------+-------+
ci-info: |   9   |  fe80::/64  |    ::   |    eth0   |   U   |
ci-info: |   11  |    local    |    ::   |    eth0   |   U   |
ci-info: |   12  |   ff00::/8  |    ::   |    eth0   |   U   |
ci-info: +-------+-------------+---------+-----------+-------+
Cloud-init v. 19.3-45.amzn2 running 'modules:config' at Thu, 28 Apr 2022 01:39:54 +0000. Up 11.64 seconds.
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd
Existing lock /var/run/yum.pid: another copy is running as pid 3156.
Another app is currently holding the yum lock; waiting for it to exit...
  The other application is: yum
    Memory :  32 M RSS (256 MB VSZ)
    Started: Thu Apr 28 01:39:53 2022 - 00:03 ago
    State  : Running, pid: 3156
Another app is currently holding the yum lock; waiting for it to exit...
  The other application is: yum
    Memory :  86 M RSS (385 MB VSZ)
    Started: Thu Apr 28 01:39:53 2022 - 00:05 ago
    State  : Running, pid: 3156
Another app is currently holding the yum lock; waiting for it to exit...
  The other application is: yum
    Memory :  87 M RSS (385 MB VSZ)
    Started: Thu Apr 28 01:39:53 2022 - 00:07 ago
    State  : Running, pid: 3156
Another app is currently holding the yum lock; waiting for it to exit...
  The other application is: yum
    Memory : 162 M RSS (461 MB VSZ)
    Started: Thu Apr 28 01:39:53 2022 - 00:09 ago
    State  : Running, pid: 3156
 --> 1:grub2-pc-2.06-9.amzn2.0.1.x86_64 from amzn2-core removed (updateinfo)
 --> rpm-libs-4.11.3-40.amzn2.0.6.x86_64 from installed removed (updateinfo)
 --> libtiff-4.0.3-35.amzn2.0.1.x86_64 from amzn2-core removed (updateinfo)
 --> selinux-policy-targeted-3.13.1-192.amzn2.6.8.noarch from amzn2-core removed (updateinfo)
 --> 1:grub2-tools-extra-2.06-9.amzn2.0.1.x86_64 from amzn2-core removed (updateinfo)
 --> systemd-sysv-219-78.amzn2.0.15.x86_64 from installed removed (updateinfo)
 --> 1:grub2-tools-efi-2.06-9.amzn2.0.1.x86_64 from amzn2-core removed (updateinfo)
 --> rpm-build-libs-4.11.3-48.amzn2.0.2.x86_64 from amzn2-core removed (updateinfo)
 --> 1:grub2-efi-x64-ec2-2.06-2.amzn2.0.6.x86_64 from installed removed (updateinfo)
 --> systemd-219-78.amzn2.0.15.x86_64 from installed removed (updateinfo)
 --> 1:grub2-common-2.06-2.amzn2.0.6.noarch from installed removed (updateinfo)
 --> systemd-libs-219-78.amzn2.0.15.x86_64 from installed removed (updateinfo)
 --> libgcc-7.3.1-13.amzn2.x86_64 from installed removed (updateinfo)
 --> 1:grub2-tools-minimal-2.06-9.amzn2.0.1.x86_64 from amzn2-core removed (updateinfo)
 --> selinux-policy-3.13.1-192.amzn2.6.7.noarch from installed removed (updateinfo)
 --> 1:grub2-pc-modules-2.06-9.amzn2.0.1.noarch from amzn2-core removed (updateinfo)
 --> libgomp-7.3.1-13.amzn2.x86_64 from installed removed (updateinfo)
 --> rpm-build-libs-4.11.3-40.amzn2.0.6.x86_64 from installed removed (updateinfo)
 --> 1:grub2-2.06-2.amzn2.0.6.x86_64 from installed removed (updateinfo)
 --> tzdata-2022a-1.amzn2.noarch from amzn2-core removed (updateinfo)
 --> 12:dhcp-common-4.2.5-77.amzn2.1.5.x86_64 from installed removed (updateinfo)
 --> libstdc++-7.3.1-14.amzn2.x86_64 from amzn2-core removed (updateinfo)
 --> rpm-4.11.3-48.amzn2.0.2.x86_64 from amzn2-core removed (updateinfo)
 --> expat-2.1.0-12.amzn2.0.3.x86_64 from installed removed (updateinfo)
 --> 1:grub2-tools-2.06-9.amzn2.0.1.x86_64 from amzn2-core removed (updateinfo)
 --> 12:dhcp-libs-4.2.5-77.amzn2.1.5.x86_64 from installed removed (updateinfo)
 --> 1:grub2-tools-minimal-2.06-2.amzn2.0.6.x86_64 from installed removed (updateinfo)
 --> rpm-libs-4.11.3-48.amzn2.0.2.x86_64 from amzn2-core removed (updateinfo)
 --> systemd-219-78.amzn2.0.16.x86_64 from amzn2-core removed (updateinfo)
 --> 1:grub2-tools-2.06-2.amzn2.0.6.x86_64 from installed removed (updateinfo)
 --> python2-rpm-4.11.3-48.amzn2.0.2.x86_64 from amzn2-core removed (updateinfo)
 --> rpm-plugin-systemd-inhibit-4.11.3-48.amzn2.0.2.x86_64 from amzn2-core removed (updateinfo)
 --> systemd-sysv-219-78.amzn2.0.16.x86_64 from amzn2-core removed (updateinfo)
 --> systemd-libs-219-78.amzn2.0.16.x86_64 from amzn2-core removed (updateinfo)
 --> 12:dhcp-common-4.2.5-77.amzn2.1.6.x86_64 from amzn2-core removed (updateinfo)
 --> tzdata-2021e-1.amzn2.noarch from installed removed (updateinfo)
 --> 1:grub2-2.06-9.amzn2.0.1.x86_64 from amzn2-core removed (updateinfo)
 --> libgomp-7.3.1-14.amzn2.x86_64 from amzn2-core removed (updateinfo)
 --> 12:dhcp-libs-4.2.5-77.amzn2.1.6.x86_64 from amzn2-core removed (updateinfo)
 --> libtiff-4.0.3-35.amzn2.x86_64 from installed removed (updateinfo)
 --> rpm-plugin-systemd-inhibit-4.11.3-40.amzn2.0.6.x86_64 from installed removed (updateinfo)
 --> selinux-policy-targeted-3.13.1-192.amzn2.6.7.noarch from installed removed (updateinfo)
 --> libgcc-7.3.1-14.amzn2.x86_64 from amzn2-core removed (updateinfo)
 --> python2-rpm-4.11.3-40.amzn2.0.6.x86_64 from installed removed (updateinfo)
 --> selinux-policy-3.13.1-192.amzn2.6.8.noarch from amzn2-core removed (updateinfo)
 --> expat-2.1.0-12.amzn2.0.4.x86_64 from amzn2-core removed (updateinfo)
 --> 12:dhclient-4.2.5-77.amzn2.1.5.x86_64 from installed removed (updateinfo)
 --> 12:dhclient-4.2.5-77.amzn2.1.6.x86_64 from amzn2-core removed (updateinfo)
 --> 1:grub2-pc-modules-2.06-2.amzn2.0.6.noarch from installed removed (updateinfo)
 --> 1:grub2-pc-2.06-2.amzn2.0.6.x86_64 from installed removed (updateinfo)
 --> libstdc++-7.3.1-13.amzn2.x86_64 from installed removed (updateinfo)
 --> rpm-4.11.3-40.amzn2.0.6.x86_64 from installed removed (updateinfo)
 --> 1:grub2-efi-x64-ec2-2.06-9.amzn2.0.1.x86_64 from amzn2-core removed (updateinfo)
 --> 1:grub2-common-2.06-9.amzn2.0.1.noarch from amzn2-core removed (updateinfo)
4 package(s) needed (+0 related) for security, out of 32 available
Resolving Dependencies
--> Running transaction check
---> Package gzip.x86_64 0:1.5-10.amzn2 will be updated
---> Package gzip.x86_64 0:1.5-10.amzn2.0.1 will be an update
---> Package python-pillow.x86_64 0:2.0.0-21.gitd1c6db8.amzn2.0.1 will be updated
---> Package python-pillow.x86_64 0:2.0.0-23.gitd1c6db8.amzn2.0.1 will be an update
---> Package xz.x86_64 0:5.2.2-1.amzn2.0.2 will be updated
---> Package xz.x86_64 0:5.2.2-1.amzn2.0.3 will be an update
---> Package xz-libs.x86_64 0:5.2.2-1.amzn2.0.2 will be updated
---> Package xz-libs.x86_64 0:5.2.2-1.amzn2.0.3 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package         Arch     Version                            Repository    Size
================================================================================
Updating:
 gzip            x86_64   1.5-10.amzn2.0.1                   amzn2-core   129 k
 python-pillow   x86_64   2.0.0-23.gitd1c6db8.amzn2.0.1      amzn2-core   440 k
 xz              x86_64   5.2.2-1.amzn2.0.3                  amzn2-core   228 k
 xz-libs         x86_64   5.2.2-1.amzn2.0.3                  amzn2-core   104 k

Transaction Summary
================================================================================
Upgrade  4 Packages

Total download size: 901 k
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
--------------------------------------------------------------------------------
Total                                              5.0 MB/s | 901 kB  00:00
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Updating   : xz-libs-5.2.2-1.amzn2.0.3.x86_64                             1/8
  Updating   : xz-5.2.2-1.amzn2.0.3.x86_64                                  2/8
  Updating   : python-pillow-2.0.0-23.gitd1c6db8.amzn2.0.1.x86_64           3/8
  Updating   : gzip-1.5-10.amzn2.0.1.x86_64                                 4/8
  Cleanup    : xz-5.2.2-1.amzn2.0.2.x86_64                                  5/8
  Cleanup    : python-pillow-2.0.0-21.gitd1c6db8.amzn2.0.1.x86_64           6/8
  Cleanup    : xz-libs-5.2.2-1.amzn2.0.2.x86_64                             7/8
  Cleanup    : gzip-1.5-10.amzn2.x86_64                                     8/8
  Verifying  : xz-libs-5.2.2-1.amzn2.0.3.x86_64                             1/8
  Verifying  : gzip-1.5-10.amzn2.0.1.x86_64                                 2/8
  Verifying  : xz-5.2.2-1.amzn2.0.3.x86_64                                  3/8
  Verifying  : python-pillow-2.0.0-23.gitd1c6db8.amzn2.0.1.x86_64           4/8
  Verifying  : xz-5.2.2-1.amzn2.0.2.x86_64                                  5/8
  Verifying  : gzip-1.5-10.amzn2.x86_64                                     6/8
  Verifying  : xz-libs-5.2.2-1.amzn2.0.2.x86_64                             7/8
  Verifying  : python-pillow-2.0.0-21.gitd1c6db8.amzn2.0.1.x86_64           8/8

Updated:
  gzip.x86_64 0:1.5-10.amzn2.0.1
  python-pillow.x86_64 0:2.0.0-23.gitd1c6db8.amzn2.0.1
  xz.x86_64 0:5.2.2-1.amzn2.0.3
  xz-libs.x86_64 0:5.2.2-1.amzn2.0.3

Complete!
Cloud-init v. 19.3-45.amzn2 running 'modules:final' at Thu, 28 Apr 2022 01:40:09 +0000. Up 27.00 seconds.
ci-info: no authorized ssh keys fingerprints found for user ec2-user.
Cloud-init v. 19.3-45.amzn2 finished at Thu, 28 Apr 2022 01:40:10 +0000. Datasource DataSourceEc2.  Up 27.35 seconds

最後に

ユーザデータに記載したコマンドがEC2で上手く実行できていないようであれば、EC2インスタンスが作成された段階でネットワーク経路が確保できているかを確認してみると良いかもしれないです。

以上、Terraformをいじりまくってるつくぼしでした！

Share this article

facebook logohatena logotwitter logo

関連記事

variables.tf 와 *.tfvars 의 차이

variables.tf 와 *.tfvars 의 차이

User avatar
NuNu
2024.12.20
Terraform으로 EC2를 구축해보기

Terraform으로 EC2를 구축해보기

User avatar
NuNu
2024.12.20
[レポート]Building multi-account, multi-region apps with Terraform Stacks (DOP206) # AWSreInvent

[レポート]Building multi-account, multi-region apps with Terraform Stacks (DOP206) # AWSreInvent

User avatar
佐藤雅樹
2024.12.18
ローカル開発環境における Terraform の Google Cloud 認証方法の推奨と仕組み #cm_google_cloud_adcal_2024

ローカル開発環境における Terraform の Google Cloud 認証方法の推奨と仕組み #cm_google_cloud_adcal_2024

User avatar
村田一紘
2024.12.16
Classmethod's white logo
Facebook's logo
X's logo
YouTube's logo

© Classmethod, Inc. All rights reserved.