Elastic Compute Service:ImportImage

Operation description

When you call this operation, take note of the following items:

• You must upload the image file to Object Storage Service (OSS) in advance. For more information, see Upload files.

• To prevent ECS instances created from the imported custom image from failing to start due to operating system issues on some servers, virtual machines, or cloud hosts, check whether you need to install the virtio driver on the source server before importing the image. For more information, see Install the virtio driver.

• When you import an image for the first time, you must authorize ECS to access your OSS bucket by using Resource Access Management (RAM). Otherwise, the NoSetRoletoECSServiceAccount or InvalidOperation.CloudBoxImageImportRoleRequired error is returned. The following two scenarios apply:

  • Import an image file without using CloudBox: You can complete RAM authorization in the RAM console with a single click. For more information, see Cloud resource access authorization. You can also manually complete RAM authorization. The following policies and permissions are required for some operations. For more information, see Account access control.

    1. Create a role named AliyunECSImageImportDefaultRole. You must use this exact name. Otherwise, the image import fails. Use the following policy for the role:

       {
       	"Statement": [
       	{
       		"Action": "sts:AssumeRole",
       		"Effect": "Allow",
       		"Principal": {
       		"Service": [
       			"ecs.aliyuncs.com"
       		]
       		}
       	}
       ],
       	"Version": "1"
       }
       

    2. Attach the system policy AliyunECSImageImportRolePolicy to the role. You can also create a custom policy that includes the following permissions:

       {
       	"Version": "1",
       	"Statement": [
       	{
       		"Action": [
       				"oss:GetObject",
       				"oss:GetBucketLocation",
       				"oss:GetBucketInfo"
       	],
       			"Resource": "*",
       			"Effect": "Allow"
       			}
       	]
       }
       
       

  • Import an image file by using CloudBox: You can complete RAM authorization in the RAM console with a single click. For more information, see Cloud resource access authorization. You can also manually complete RAM authorization. The following policies and permissions are required for some operations. For more information, see Account access control.

    1. Create a role named AliyunECSCloudBoxImageImportDefaultRole. You must use this exact name. Otherwise, the image import fails. Use the following policy for the role:

       {
       	"Statement": [
       	{
       		"Action": "sts:AssumeRole",
       		"Effect": "Allow",
       		"Principal": {
       		"Service": [
       			"ecs.aliyuncs.com"
       		]
       		}
       	}
       ],
       	"Version": "1"
       }
       

    2. Attach the system policy AliyunECSCloudBoxImageImportRolePolicy to the role. You can also create a custom policy that includes the following permissions:

       {
       	"Version": "1",
       	"Statement": [
       	{
       		"Action": [
       				"oss-cloudbox:GetObject",
       				"oss-cloudbox:GetBucketLocation",
       				"oss-cloudbox:GetBucketInfo"
       	],
       			"Resource": "*",
       			"Effect": "Allow"
       			}
       	]
       }
       
       

• You cannot delete an image that is being imported. You can only call CancelTask to cancel the image import task.

• The region into which you import the image must be the same as the region of the OSS bucket to which the image file is uploaded.

• Valid values of N in the DiskDeviceMapping.N parameter: 1 to 17. When N is 1, the disk is a system disk. When N is 2 to 17, the disk is a data disk. When N is greater than 17, the system automatically ignores the value.

• When the Architecture parameter is set to arm64, or the Platform parameter is set to CentOS Stream, Anolis, AlmaLinux, UOS, Kylin, or Rocky Linux, take note of the following items:

  • To ensure that the imported image supports password configuration or key pair modification, the image must meet the following requirements:

    • The operating system kernel must support the CONFIG_FW_CFG_SYSFS feature. Linux community kernels later than version 4.6 support this feature by default. CentOS kernels later than version 3.10.0-826.el7 support this feature by default. You can run the grep -nr CONFIG_FW_CFG_SYSFS /boot/config-$(uname -r) command on the server that corresponds to the image. If the output contains CONFIG_FW_CFG_SYSFS=y, the kernel in the image supports the CONFIG_FW_CFG_SYSFS feature.

    • The latest version of Alibaba Cloud cloud-init is installed on the operating system. Cloud-init 19.1 must Milvus version 19.1.3 or later. Cloud-init 0.7.6a on some earlier operating systems must Milvus version 0.7.6a15 or later. For more information, see Install cloud-init.

    • The operating system must support the SHA-512 encryption algorithm.

  • To ensure that the imported image supports disk resizing and file system resizing, the image must meet the following requirements:

    • The operating system kernel version must be later than 3.6.

    • The growpart command is supported. To support this command, install the cloud-utils-growpart package. The installation method varies by operating system. For more information, see Resize partitions and file systems (Linux).

    • The resize2fs command is supported. To support this command, install the e2fsprogs package. This package is installed by default on the operating system. If it is not installed, install it manually.

    • The latest version of Alibaba Cloud cloud-init is installed on the operating system. Cloud-init 19.1 must Milvus version 19.1.3 or later. Cloud-init 0.7.6a on some earlier operating systems must Milvus version 0.7.6a15 or later. For more information, see Install cloud-init.

• If the system architecture of the custom image that you want to import is arm64, set the RTC clock to use the UTC time standard. For more information, see Linux time and time zone description.

• Configure the image detection parameters when you import an image. This helps the system optimize your image. For more information, see Image detection overview.