Skip to content

Commit

Permalink
Merge pull request #413 from amazonlinux/readme-helpers
Browse files Browse the repository at this point in the history
Update README to reference enable-admin-container
  • Loading branch information
tjkirch authored Oct 15, 2019
2 parents 671fa1b + 0094f1d commit d98805d
Showing 1 changed file with 7 additions and 3 deletions.
10 changes: 7 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -111,15 +111,19 @@ To enable the container, you can change the setting in user data when starting T
settings.host-containers.admin.enabled = true
```

If Thar is already running, you can change the setting with an API call:
If Thar is already running, you can enable the admin container from the default [control container](#control-container) like this:

```
enable-admin-container
```

If you're using a custom control container, or want to make the API calls directly, you can enable the admin container like this instead:

```
apiclient -u /settings -m PATCH -d '{"host-containers": {"admin": {"enabled": true}}}'
apiclient -u /settings/commit_and_apply -m POST
```

(To make an API call like this, you need to use an authenticated channel like [SSM](#control-container).)

Once you're in the admin container, you can run `sheltie` to get a full root shell in the Thar host.
Be careful; while you can inspect and change even more as root, Thar's filesystem and dm-verity setup will prevent most changes from persisting over a restart - see [Security](#security).

Expand Down

0 comments on commit d98805d

Please sign in to comment.