I am making a new AMI in EC2 and want to disable it running anything that could be put in user-data when launching (or rebooting) from this AMI. I looked at the existing /etc/cloud/cloud.cfg
and /etc/cloud/cloud.cfg.d/*
but do not see where this is enabled (so maybe it is on by default). How can I reconfigure cloud-init to not allow this or even allow this to be re-enbled? I suspect I also need to disable #cloud-config
. Do I need to disable the whole cloud-init package to achieve this?
edit:
I will be using Amazon Linux and Ubuntu in various AMIs.
edit2:
It looks like I need to disable all of user-data
. Maybe that will be easier.
edit3:
I do want to be able to access the user-data
in my scripts.
This is my current hack — not too elegant, but it works:
A more elegant way to do this is create a file named cloud-config.txt in /var/lib/cloud/instances/{your-instance-id} , with the following content: