Add amazon ssm agent and the ability to provision on boot through /bo…

…ot/ssm

stage2/03-msw-tweaks/00-packages

@@ -1 +1 @@
-vim tmux git bc jq locate gawk fbi
+vim tmux git bc jq locate gawk fbi awscli ansible python-lxml

stage2/03-msw-tweaks/01-run.sh

@@ -2,9 +2,14 @@
 
 install -m 644 files/msw_provision.service ${ROOTFS_DIR}/etc/systemd/system/msw_provision.service
 install -m 644 files/msw_provisioned.service ${ROOTFS_DIR}/etc/systemd/system/msw_provisioned.service
+install -m 644 files/ssmsetup.service ${ROOTFS_DIR}/etc/systemd/system/ssmsetup.service
 
 on_chroot << EOF
+curl https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/debian_arm/amazon-ssm-agent.deb -o /root/amazon-ssm-agent.deb
+dpkg -i /root/amazon-ssm-agent.deb
+systemctl disable amazon-ssm-agent
 systemctl enable msw_provision
 systemctl enable msw_provisioned
+systemctl enable ssmsetup
 EOF
 

stage2/03-msw-tweaks/files/ssmsetup.service

@@ -0,0 +1,16 @@
+[Unit]
+Description=Tells the system that it wants to use SSM with the configuration in the /boot/ssm file
+ConditionPathExists=/boot/ssm
+Before=amazon-ssm-agent.service
+Requires=amazon-ssm-agent.service
+Wants=network-online.service
+After=network-online.service
+
+[Service]
+Type=oneshot
+ExecStart=/bin/bash -c "set -a && source /boot/ssm && amazon-ssm-agent --register --code \"$SSM_CODE\" --id \"$SSM_ID\" --region \"$SSM_REGION\" -y"
+ExecStart=/bin/rm -f /boot/ssm
+ExecStartPost=/bin/systemctl try-restart amazon-ssm-agent
+
+[Install]
+WantedBy=multi-user.target