-
Notifications
You must be signed in to change notification settings - Fork 4
/
ec2-metadatafs.1
180 lines (176 loc) · 5.67 KB
/
ec2-metadatafs.1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
.\" Manpage for ec2-metadatafs
.\" Contact vivek@nixcraft.net.in to correct errors or typos.
.TH ec2-metadatafs 1 "May 2019" "ec2-metadatafs version 1.0.0" "User Commands"
.SH NAME
ec2\-metadatafs \- filesystem client to access AWS EC2 metadata and tags
.SH SYNOPSIS
.SS mounting
\fBec2\-metadatafs\fP [OPTIONS] [mountpoint]
.SS unmounting
\fBumount\fP [mountpoint]
.SH DESCRIPTION
ec2metadatafs mounts a FUSE filesystem which exposes the EC2 instance metadata
(and optionally the tags) of the AWS EC2 host as files and directories rooted at
the given location.
.PP
.SH OPTIONS
.SS "Application Options:"
.TP
\fB\-v\fR, \fB\-\-verbose\fR
Print verbose logs, can be specified multiple times (up to 2)
.TP
\fB\-f\fR, \fB\-\-foreground\fR
Run in foreground
.TP
\fB\-V\fR, \fB\-\-version\fR
Display version info
.TP
\fB\-\-endpoint=\fR
Deprecated alias for --instance-metadata-service-endpoint
.TP
\fB\-e\fR, \fB\-\-instance-metadata-service-endpoint=\fR
Instance Metadata Service HTTP endpoint (default: http://169.254.169.254/latest/)
.TP
\fB\-m\fR, \fB\-\-instance-metadata-service-version=\fR
Instance Metadata Service version (default: v1)
Choices: v1, v2
See Instance Metadata Service (IMDS) Version section for additional details
.TP
\fB\-T\fR, \fB\-\-instance-metadata-token-ttl=\fR
Instance Metadata Service token TTL (default 6h)
Only valid for Instance Metadata Service version v2
.TP
\fB\-c\fR, \fB\-\-cachesec=\fR
Number of seconds to cache files attributes and directory listings. 0 to disable, -1 for indefinite. (default: 0)
.TP
\fB\-t\fR, \fB\-\-tags\fR
Mount EC2 instance tags at <mount point>/tags
.TP
\fB\-o\fR, \fB\-\-options=\fR
Mount options, see below for description
.TP
\fB\-n\fR, \fB\-\-no\-syslog\fR
Disable syslog when daemonized
.TP
\fB\-F\fR, \fB\-\-syslog\-facility=\fR
Syslog facility to use when daemonized (see below for options) (default: USER)
.SS "AWS Credentials (only used when mounting tags):"
.TP
\fB\-\-aws\-access\-key\-id=\fR
AWS Access Key ID (adds to credential chain, see below)
.HP
\fB\-\-aws\-secret\-access\-key=\fR AWS Secret Access key (adds to credential chain, see below)
.TP
\fB\-\-aws\-session\-token=\fR
AWS session token (adds to credential chain, see below)
.SS "Help Options:"
.TP
\fB\-h\fR, \fB\-\-help\fR
Show this help message
.SS "Arguments:"
.TP
mountpoint:
Directory to mount the filesystem at
.SS "Mount options:"
.TP
\fB\-o\fR debug
Enable debug logging, same as \fB\-v\fR
.TP
\fB\-o\fR fuse_debug
Enable fuse_debug logging (implies debug), same as \fB\-vv\fR
.TP
\fB\-o\fR endpoint=ENDPOINT
Deprecated alias for -o instance_metadata_service_endpoint=
.TP
\fB\-o\fR instance_metadata_service_endpoint=ENDPOINT
Instance metadata service HTTP endpoint, same as --instance-metadata-service-endpoint=
.TP
\fB\-o\fR instance_metadata_service_version=VERSION
Instance Metadata Service version, v1 or v2, same as --instance-metadata-service-version=
.TP
\fB\-o\fR instance_metadata_service_token_ttl=TTL
Instance Metadata Service token TTL, only valid with service_version=v2, same as --instance-metadata-service-token-ttl=
.TP
\fB\-o\fR tags
Mount the instance tags at <mount point>/tags, same as \fB\-\-tags\fR
.TP
\fB\-o\fR aws_access_key_id=ID
AWS API access key (see below), same as \fB\-\-aws\-access\-key\-id=\fR
.HP
\fB\-o\fR aws_secret_access_key=KEY AWS API secret key (see below), same as \fB\-\-aws\-secret\-access\-key=\fR
.TP
\fB\-o\fR aws_session_token=KEY
AWS API session token (see below), same as \fB\-\-aws\-session\-token=\fR
.TP
\fB\-o\fR cachesec=SEC
Number of seconds to cache files attributes and directory listings, same as \fB\-\-cachesec\fR
.TP
\fB\-o\fR syslog_facility=
Syslog facility to send messages upon when daemonized (see below)
.TP
\fB\-o\fR no_syslog
Disable logging to syslog when daemonized
.TP
\fB\-o\fR FUSEOPTION=OPTIONVALUE
FUSE mount option, please see the OPTIONS section of your FUSE manual for valid options
.SS "AWS credential chain:"
.TP
AWS credentials only required when mounting the instance tags (\fB\-\-tags\fR or \fB\-o\fR tags).
.TP
Checks for credentials in the following places, in order:
.RS
Provided AWS credentials via flags or mount options
.TP
$AWS_ACCESS_KEY_ID, $AWS_SECRET_ACCESS_KEY, and $AWS_SESSION_TOKEN environment variables
.TP
Shared credentials file \fB\-\-\fR respects $AWS_DEFAULT_PROFILE and $AWS_SHARED_CREDENTIALS_FILE
.TP
IAM role associated with the instance
.TP
.RE
.TP
Note that the AWS session token is only needed for temporary credentials from AWS security token service.
.PP
.SS Instance Metadata Service (IMDS) Version:
.TP
AWS has two modes for interacting with the metadata API:
.RS
.TP
v1: request/response method (traditional)
.TP
v2: session-oriented method (more secure)
.TP
.RE
.TP
If you are unsure, choose v2. The default is currently v1 for backwards compatibliity.
.TP
See https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html for additional details.
.SS Caching:
.TP
Caching of the following is supported and controlled via the cachesec parameter:
.RS
.TP
File attributes
.TP
Directory attributes
.TP
Directory listings
.RE
.TP
When accessed this metadata will be cached for the number of seconds specified by cachesec. Use 0, the default, to disable caching and -1 to cache indefinitely (good if you never expect instance metadata to change). This cache is kept in memory and lost when the process is restarted.
.SS "Valid syslog facilities:"
.IP
KERN, USER, MAIL, DAEMON, AUTH, SYSLOG, LPR, NEWS, UUCP, CRON, AUTHPRIV, FTP, LOCAL0, LOCAL1, LOCAL2, LOCAL3, LOCAL4, LOCAL5, LOCAL6, LOCAL7
.SS "Version:"
.IP
1.0.0
.SS "Author:"
.IP
Jesse Szwedko
.SS "Project Homepage:"
.IP
http://github.com/jszwedko/ec2\-metadatafs
.SH "REPORTING BUGS"
.SS "Report bugs to:"
.IP
http://github.com/jszwedko/ec2\-metadatafs/issues