Convert an Instance-Store AMI to EBS-Backed AMI


  1. Launch an instance from an instance store-backed AMI.
  2. Make a note of the ramdisk ID and kernel ID your running instance is using 
  3. Create a 10GiB Amazon EBS volume in the same Availability Zone as that of your newly-launched instance e.g. /dev/sdf
  4. Attach the volume to the running instance using either the AWS Management Console or the command line interface.
  5. Make sure all services are turned off like mysqld, nginx etc.
  6. Format the volume with a file system. Newer kernels use /dev/xvdf convention
    • mkfs.ext3 /dev/xvdf
  7. Create a directory /mnt/ebs and mount the volume on it.
    • mkdir /mnt/ebs  
    • mount /dev/xvdf /mnt/ebs
  8. Copy the data on the root storage device to the newly-attached volume.
    • rsync -avx --exclude /mnt/ebs / /mnt/ebs
  9. [SPECIFIC TO UBUNTU]
    1. Edit /mnt/ebs/etc/fstab,/mnt/ebs/boot/grub/menu.lst and /mnt/ebs/boot/grub/grub.cfg and replace uses of LABEL=cloudimg-rootfs with /dev/xvda1  
    2. Remove /dev/xvda2 and /dev/xvda3 specific instructions from /mnt/ebs/etc/fstab
  10. [SPECIFIC TO CENTOS]
    1. Edit /mnt/ebs/etc/fstab,/mnt/ebs/boot/grub/menu.lst and replace uses of LABEL=/ with /dev/xvde1.
    2. Remove /dev/xvde2 and /dev/xvde3 specific instructions from /mnt/ebs/etc/fstab
  11. Create the following devices within the /mnt/ebs
    1. MAKEDEV console
    2. MAKEDEV generic
    3. MAKEDEV zero
    4. MAKEDEV null 
  12. Detach the volume from the instance.
  13. Create a snapshot of the volume.
  14. Register the snapshot of the volume as an AMI. While registering make sure you enter the architecture correct and the Kernel ID and Ramdisk ID should match the one taken a note of in Step 2. If the Ramdisk ID information is not available form the instance then leave it to Use Default.

Comments

Post a Comment

Popular posts from this blog

To DR or Not To DR

Image
Most organizations these days look at strategies and ways of implementing a "working" DR solution. Often a DR plan of action is a manual process based on multiple approvals at each level from Incident Management Teams to Product Ownership teams. What if there was a way to keep an active DR running where failure of a primary site would seamlessly transfer the traffic to the secondary site. In fact if the DR is active or warm then the only manual bit would be disabling the primary site via DNS. A few tips and tricks that would help in a simple implementation of a warm DR for an application hosted on AWS. AMI  Make sure that the AMIs are built across both the primary and secondary region.  The fastest way to build multi-region AMIs would be to use different builds for each region using the same configuration management code altering the "REGION" parameter each time. This would make the AMIs consistent and available in each region. PACKAGE REPOSITORY
Read more

High Availability NAT for AWS VPC with Multiple Private Subnets.

Image
VPCs have become the de-facto architectural choice when deploying enterprise applications. They are highly secure, keep your infrastructure logically separated which when combined with the power that AWS has to offer become highly available and robust. The one thing, however, that still feels like a point of failure are the NAT instances that need to be created for all private subnet outbound connectivity to the internet or any service that is external to the VPC. This brings us to create a sort of NAT failover mechanism. High Availability for Amazon VPC NAT Instances by Jinesh Varia offers a solution for a simple VPC that has active NATs per private subnet and each keeps pinging the other till one of them loses connectivity. The active NAT, at that moment, "takes over" the route for the failed NAT. An edge case to this solution is when you have private subnets per AZ and there is a loss of connectivity between AZs. We were faced with the same issue, which brought the t
Read more

Load Balancer with SSL offloading - nginx + HAProxy

Image
HAProxy and nginx can be configured together to work as an SSL offloader and a load balancer. Listed below are the steps to achieve the same on a centOS instance. Assume 192.168.1.1 and 192.168.1.2 running web servers on port 80 and 192.168.1.3 running haproxy on port 8181. Starting with HAPROXY set up. 1.  Install haproxy.        yum install -y haproxy 2.  Edit the haproxy configuration to update the backend web servers and keep it at the basic log level.     global   log 127.0.0.1   local2   chroot          /var/lib/haproxy   pidfile         /var/run/haproxy.pid   maxconn         4096   user            haproxy   group           haproxy   daemon   defaults                      mode            http   log             global   option          httplog   option          dontlognull   option          http-server-close   option          forwardfor except 127.0.0.0/8   option          redispatch   retries         3   timeout         http-request    20s   timeout        
Read more