Function ec2Vm

e2e/src/vm/ec2.ts:238–422

(os: VmOs, arch: VmArch = "x64")

};

export const ec2Vm = (os: VmOs, arch: VmArch = "x64"): VmProvider => ({
  os,
  provision: async () => {
    const user = guestUser(os);
    // A throwaway SSH keypair, authorized via user-data (no EC2 key pair needed —
    // we drive over OpenSSH key auth, not the Windows password).
    const keyDir = mkdtempSync(join(tmpdir(), "executor-ec2-"));
    const keyPath = join(keyDir, "id");
    await execFileP("ssh-keygen", ["-t", "ed25519", "-N", "", "-q", "-f", keyPath]);
    chmodSync(keyPath, 0o600);
    const publicKey = (await execFileP("ssh-keygen", ["-y", "-f", keyPath])).stdout.trim();

    const [myIp, ami, subnet] = await Promise.all([egressIp(), latestAmi(os), defaultSubnet()]);
    const sg = await ensureSecurityGroup(myIp);
    const userData = os === "windows" ? windowsUserData(publicKey) : linuxUserData(publicKey);
    const userDataFile = join(keyDir, "user-data.txt");
    writeFileSync(userDataFile, userData);

    const instanceId = await aws([
      "ec2",
      "run-instances",
      "--image-id",
      ami,
      "--instance-type",
      INSTANCE_TYPE,
      "--count",
      "1",
      "--security-group-ids",
      sg,
      "--subnet-id",
      subnet,
      "--associate-public-ip-address",
      "--instance-initiated-shutdown-behavior",
      "terminate",
      "--user-data",
      `file://${userDataFile}`,
      "--tag-specifications",
      `ResourceType=instance,Tags=[{Key=Name,Value=${TAG}-${os}},{Key=purpose,Value=e2e}]`,
      "--query",
      "Instances[0].InstanceId",
    ]);

    let ip = "";
    const tunnelClosers: Array<() => void> = [];

    const ssh = async (command: string): Promise<SshResult> => {
      try {
        const { stdout, stderr } = await execFileP(
          "ssh",
          ["-i", keyPath, ...SSH_OPTS, `${user}@${ip}`, command],
          { maxBuffer: 64 * 1024 * 1024 },
        );
        return { stdout, stderr, code: 0 };
      } catch (err) {
        const e = err as { stdout?: string; stderr?: string; code?: number };
        return {
          stdout: e.stdout ?? "",
          stderr: e.stderr ?? "",