Kiro CrewをAmazon Linux 2023のEC2で試してみた

Kiro Crew Setup 👻

── Workspace Directory ──
Default: /home/ec2-user/workplace/kirocrew-workspace
Workspace path [/home/ec2-user/workplace/kirocrew-workspace]:
✅ Workspace: /home/ec2-user/workplace/kirocrew-workspace

Installing agent config...
✅ Agent installed: /home/ec2-user/.kiro/agents/kirocrew.json

── Slack Credentials ──
Configure Slack tokens? [Y/n]: n
⏭ Skipped. Slack integration will be disabled.

── Slash Command ──
Slash command name [kirocrew]:
✅ Slash command: /kirocrew

── Timezone ──
IANA timezone (e.g. America/Los_Angeles): Asia/Tokyo
✅ Timezone saved: Asia/Tokyo

── Run on AWS (optional) ──
Launch KiroCrew on AWS now? [y/N]: n
⏭ Skipped. Launch later: kirocrew cloud launch

👻 Done! Try: kirocrew doctor && kirocrew gateway

👻 Kiro Crew gateway starting…

⚠️  Do not enter sensitive, secret, or regulated data into KiroCrew.
   Treat anything you send as potentially logged or processed by the
   configured model provider.

👻 Dashboard: ssh -NL 5476:localhost:5476 <EC2_HOST>
             then open http://localhost:5476?token=<GATEWAY_TOKEN>
👻 Run 24/7: see docs/remote-desktop-setup.md for systemd service setup
👻 Headless remote session — skipping browser auto-open

AWSTemplateFormatVersion: '2010-09-09'
Description: KiroCrew IAM - EC2 Instance Profile with SSM access

Resources:
  KiroCrewRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: !Sub '${AWS::StackName}-role'
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Principal:
              Service: ec2.amazonaws.com
            Action: sts:AssumeRole
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore

  KiroCrewInstanceProfile:
    Type: AWS::IAM::InstanceProfile
    Properties:
      Roles:
        - !Ref KiroCrewRole

Outputs:
  InstanceProfileName:
    Value: !Ref KiroCrewInstanceProfile
    Export:
      Name: !Sub '${AWS::StackName}-instance-profile'
  RoleName:
    Value: !Ref KiroCrewRole
    Export:
      Name: !Sub '${AWS::StackName}-role'

AWSTemplateFormatVersion: '2010-09-09'
Description: KiroCrew EC2 - x86_64 / AL2023 / kiro-cli + kirocrew auto-install

Parameters:
  KeyName:
    Type: AWS::EC2::KeyPair::KeyName
    Default: m4mini
    Description: EC2 キーペア名
  IamStackName:
    Type: String
    Default: kirocrew-iam
    Description: IAM スタック名（InstanceProfile のエクスポート元）

Resources:
  KiroCrewSG:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: !Sub '${AWS::StackName} - SSH only'
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 22
          ToPort: 22
          CidrIp: 0.0.0.0/0

  KiroCrewInstance:
    Type: AWS::EC2::Instance
    DeletionPolicy: Delete
    UpdateReplacePolicy: Delete
    Properties:
      InstanceType: t3a.medium
      ImageId: !Sub '{{resolve:ssm:/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64}}'
      KeyName: !Ref KeyName
      IamInstanceProfile: !ImportValue
        Fn::Sub: '${IamStackName}-instance-profile'
      SecurityGroupIds:
        - !Ref KiroCrewSG
      MetadataOptions:
        HttpTokens: required
        HttpEndpoint: enabled
      BlockDeviceMappings:
        - DeviceName: /dev/xvda
          Ebs:
            VolumeSize: 20
            VolumeType: gp3
            Encrypted: true
            DeleteOnTermination: true
      Tags:
        - Key: Name
          Value: !Sub '${AWS::StackName}'
      UserData:
        Fn::Base64: !Sub |
          #!/bin/bash
          set -euo pipefail
          LOG="/var/log/kirocrew-setup.log"
          exec > >(tee -a "$LOG") 2>&1
          echo "===== KiroCrew setup started: $(date) ====="

          # ---- 1. /tmp 拡張 ----
          mount -o remount,size=2G /tmp
          echo "[1/6] /tmp 拡張: $(df -h /tmp | tail -1 | awk '{print $4}') 空き"

          # ---- 2. スワップ 1GB ----
          fallocate -l 1G /swapfile
          chmod 600 /swapfile
          mkswap /swapfile
          swapon /swapfile
          echo '/swapfile none swap sw 0 0' >> /etc/fstab
          echo "[2/6] スワップ完了: $(swapon --show --noheadings)"

          # ---- 3. システムパッケージ ----
          dnf install -y python3.11 python3.11-pip nodejs npm git unzip
          echo "[3/6] パッケージ完了"

          # ---- 4. kiro-cli インストール (ec2-user) ----
          sudo -u ec2-user bash << 'EOF'
          set -euo pipefail
          export HOME=/home/ec2-user
          echo "[4/6] kiro-cli インストール中..."
          KIRO_CLI_SKIP_SETUP=1 bash <(curl -fsSL https://cli.kiro.dev/install) <<< "y"
          echo "[4/6] kiro-cli 完了: $(ls $HOME/.local/bin/kiro* | tr '\n' ' ')"
          EOF

          # ---- 5. kirocrew インストール (ec2-user) ----
          sudo -u ec2-user bash << 'EOF'
          set -euo pipefail
          export HOME=/home/ec2-user
          echo "[5/6] kirocrew インストール中..."
          curl -fsSL https://download.crew.kiro.dev/cli.sh | sh
          echo "[5/6] kirocrew 完了: $($HOME/.local/bin/kirocrew --version 2>/dev/null || echo installed)"
          EOF

          # ---- 6. PATH (.bashrc) ----
          sudo -u ec2-user bash -c \
            "grep -q '\.local/bin' ~/.bashrc || echo 'export PATH=\"\$HOME/.local/bin:\$PATH\"' >> ~/.bashrc"
          echo "[6/6] .bashrc 更新完了"

          echo "===== KiroCrew setup finished: $(date) ====="
          echo "KIROCREW_SETUP_DONE" > /tmp/kirocrew-setup-done

Outputs:
  InstanceId:
    Value: !Ref KiroCrewInstance
  PublicIp:
    Value: !GetAtt KiroCrewInstance.PublicIp
  SSMConnect:
    Value: !Sub 'aws ssm start-session --target ${KiroCrewInstance} --region ${AWS::Region}'
  SSHConnect:
    Value: !Sub 'ssh -i ~/.ssh/${KeyName}.pem ec2-user@${KiroCrewInstance.PublicIp}'
  NextStep:
    Value: 'kirocrew setup && kirocrew config set agent.allow_unsandboxed_exec true && kirocrew gateway'