Skip to content

feat(microvm): add microvm example - #5377

Open
edersonbrilhante wants to merge 97 commits into
microvm-provider-independentfrom
microvm-foundation-example
Open

edersonbrilhante wants to merge 97 commits into
microvm-provider-independentfrom
microvm-foundation-example

Conversation

@edersonbrilhante

@edersonbrilhante edersonbrilhante commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

Description

Adds the regional Lambda MicroVM foundation module, example, and image-build prerequisites.

  • Creates the encrypted artifact storage, build and operator IAM roles, Lambda Network Connectors, connector security groups, runtime usage policy, and propagation dependencies.
  • Adds the microvm-foundation example and documentation for provisioning the regional prerequisites required by MicroVM images.
  • Adds the MicroVM Ubuntu image-builder configuration, scripts, service setup, and Packer assets.
  • Updates the Terraform, MiniStack, Packer, and documentation workflows for the foundation and image-build paths.

Test Plan

  • Terraform formatting, initialization, and validation for the foundation module and examples.
  • Provider and module tests included in the affected Terraform modules.
  • Terraform commit hooks, TFLint, conflict checks, and git diff --check.
  • No live AWS deployment was performed.

Related Issues

@edersonbrilhante
edersonbrilhante requested review from a team as code owners September 4, 2026 21:18
@github-actions

github-actions Bot commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@edersonbrilhante
edersonbrilhante changed the base branch from microvm-integration-independent to microvm-examples-image-build September 4, 2026 21:28
@edersonbrilhante
edersonbrilhante marked this pull request as draft September 4, 2026 21:28
@edersonbrilhante
edersonbrilhante force-pushed the microvm-foundation-example branch 3 times, most recently from adb7a1e to 4564b89 Compare September 4, 2026 21:45
@edersonbrilhante
edersonbrilhante changed the base branch from microvm-examples-image-build to microvm-integration-independent September 4, 2026 21:47
@edersonbrilhante
edersonbrilhante force-pushed the microvm-foundation-example branch 5 times, most recently from ddf0d40 to c6cb82b Compare September 4, 2026 22:38
@edersonbrilhante
edersonbrilhante force-pushed the microvm-integration-independent branch from 4b65ede to d80d308 Compare September 8, 2026 11:17
@edersonbrilhante
edersonbrilhante force-pushed the microvm-foundation-example branch from c6cb82b to e689cd1 Compare September 8, 2026 11:18
@edersonbrilhante
edersonbrilhante force-pushed the microvm-integration-independent branch from 6b2f3f2 to b62932c Compare September 8, 2026 11:26
@edersonbrilhante
edersonbrilhante force-pushed the microvm-foundation-example branch from eea918b to 69a0c78 Compare September 8, 2026 11:26
@edersonbrilhante
edersonbrilhante force-pushed the microvm-integration-independent branch from b62932c to 9635647 Compare September 8, 2026 15:58
@edersonbrilhante
edersonbrilhante force-pushed the microvm-foundation-example branch from 69a0c78 to 651832a Compare September 8, 2026 15:58
@edersonbrilhante
edersonbrilhante force-pushed the microvm-integration-independent branch from cee51d1 to 8c311c2 Compare September 8, 2026 19:09
@edersonbrilhante
edersonbrilhante force-pushed the microvm-foundation-example branch from 81ffa12 to b4d3c16 Compare September 8, 2026 19:16
@edersonbrilhante
edersonbrilhante force-pushed the microvm-integration-independent branch from 8c311c2 to 5329a1e Compare September 8, 2026 19:32
@edersonbrilhante
edersonbrilhante force-pushed the microvm-foundation-example branch from b4d3c16 to f0a9b98 Compare September 8, 2026 19:32
@edersonbrilhante
edersonbrilhante force-pushed the microvm-integration-independent branch from 5329a1e to 55c805a Compare September 8, 2026 19:43
@edersonbrilhante
edersonbrilhante force-pushed the microvm-foundation-example branch from f0a9b98 to 2d6ea03 Compare September 8, 2026 19:44
@edersonbrilhante
edersonbrilhante added this pull request to stack #5450 September 18, 2026 21:12
@edersonbrilhante
edersonbrilhante removed this pull request from stack #5450 September 18, 2026 21:12
@edersonbrilhante
edersonbrilhante added this pull request to stack #5452 September 18, 2026 21:40
@edersonbrilhante
edersonbrilhante removed this pull request from stack #5452 September 21, 2026 16:40

COPY --chmod=0555 image-entrypoint.sh /opt/microvm/image-entrypoint.sh
COPY --chmod=0555 start-services.sh /opt/microvm/start-services.sh
COPY --chmod=0755 services/cloudwatch-agent.sh /etc/services.d/cloudwatch-agent/run

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we may be missing the runner supervisor in this image. The hook in #5280 launches /opt/microvm/entrypoint.sh run, but I could only find image-entrypoint.sh here, which starts the hook server itself. The hook ZIP also seems to contain only server.js and package.json.

Unless that supervisor comes from somewhere else, I think the launch would fail with ENOENT. Maybe we should include the script that consumes the JIT document on stdin and signals ready\n on fd 3, then check that the assembled image can start a runner. Am I overlooking another step that supplies it?

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants