Elastic Compute Service:ImportImage

Operation description

When you call this operation, take note of the following items:

• You must upload the image file to Object Storage Service (OSS) in advance. For more information, see Upload objects.

• To prevent ECS instances created from the imported custom image from failing to start due to operating system issues on some servers, virtual machines, or cloud hosts, check whether you need to install the virtio driver on the source server before importing the image. For more information, see Install a virtio driver.

• When you import an image for the first time, you must use Resource Access Management (RAM) to authorize ECS to access your OSS bucket. Otherwise, the NoSetRoletoECSServiceAccount or InvalidOperation.CloudBoxImageImportRoleRequired error is reported. The following two scenarios apply:

  • Import an image file without using CloudBox: You can complete RAM authorization with one click in the RAM console. For RAM authorization page, see Cloud resource access authorization. You can also manually complete RAM authorization. The following policies and permissions are required for some operations. For more information, see Account access control.

    1. Create a role named AliyunECSImageImportDefaultRole (this exact name is required, otherwise the image import fails). The policy for the role is:

       {
       	"Statement": [
       	{
       		"Action": "sts:AssumeRole",
       		"Effect": "Allow",
       		"Principal": {
       		"Service": [
       			"ecs.aliyuncs.com"
       		]
       		}
       	}
       ],
       	"Version": "1"
       }
       

    2. Attach the system policy AliyunECSImageImportRolePolicy to the role. You can also create a custom policy that must include the following permissions:

       {
       	"Version": "1",
       	"Statement": [
       	{
       		"Action": [
       				"oss:GetObject",
       				"oss:GetBucketLocation",
       				"oss:GetBucketInfo"
       	],
       			"Resource": "*",
       			"Effect": "Allow"
       			}
       	]
       }
       
       

  • Import an image file by using CloudBox: You can complete RAM authorization with one click in the RAM console. For RAM authorization page, see Cloud resource access authorization. You can also manually complete RAM authorization. The following policies and permissions are required for some operations. For more information, see Account access control.

    1. Create a role named AliyunECSCloudBoxImageImportDefaultRole (this exact name is required, otherwise the image import fails). The policy for the role is:

       {
       	"Statement": [
       	{
       		"Action": "sts:AssumeRole",
       		"Effect": "Allow",
       		"Principal": {
       		"Service": [
       			"ecs.aliyuncs.com"
       		]
       		}
       	}
       ],
       	"Version": "1"
       }
       

    2. Attach the system policy AliyunECSCloudBoxImageImportRolePolicy to the role. You can also create a custom policy that must include the following permissions:

       {
       	"Version": "1",
       	"Statement": [
       	{
       		"Action": [
       				"oss-cloudbox:GetObject",
       				"oss-cloudbox:GetBucketLocation",
       				"oss-cloudbox:GetBucketInfo"
       	],
       			"Resource": "*",
       			"Effect": "Allow"
       			}
       	]
       }
       
       

• You cannot delete an image that is being imported. You can only call CancelTask to cancel the image import task.

• The region to which the image is imported must be the same as the region of the OSS bucket to which the image file is uploaded.

• Valid values of N in the DiskDeviceMapping.N parameter: 1 to 17. N=1 indicates the system disk. N=2 to 17 indicates data disks. When N is greater than 17, the system automatically ignores the value.

• When the Architecture parameter is set to arm64, or the Platform parameter is set to CentOS Stream, Anolis, AlmaLinux, UOS, Kylin, or Rocky Linux, take note of the following items:

  • To enable the imported image to support password configuration or key pair modification, the image must meet the following conditions:

    • The operating system kernel must support the CONFIG_FW_CFG_SYSFS feature. Linux community kernels later than version 4.6 support this feature by default. CentOS kernels later than version 3.10.0-826.el7 support this feature by default. You can run the grep -nr CONFIG_FW_CFG_SYSFS /boot/config-$(uname -r) command on the server that corresponds to the image. If the output contains CONFIG_FW_CFG_SYSFS=y, the kernel in the image supports the CONFIG_FW_CFG_SYSFS feature.

    • The latest version of Alibaba Cloud cloud-init is installed on the operating system. Cloud-init 19.1 must Milvus version 19.1.3 or later. Cloud-init 0.7.6a on some earlier operating systems must Milvus version 0.7.6a15 or later. For more information, see Install cloud-init.

    • The operating system must support the SHA-512 encryption algorithm.

  • To enable the imported image to support disk resizing and file system resizing, the image must meet the following conditions:

    • The operating system kernel version must be later than 3.6.

    • The growpart command is supported. To support this command, install the cloud-utils-growpart package. The installation method varies depending on the operating system. For more information, see Resize partitions and file systems (Linux).

    • The resize2fs command is supported. To support this command, install the e2fsprogs package. This package is installed by default on the operating system. If it is not installed, install it manually.

    • The latest version of Alibaba Cloud cloud-init is installed on the operating system. Cloud-init 19.1 must Milvus version 19.1.3 or later. Cloud-init 0.7.6a on some earlier operating systems must Milvus version 0.7.6a15 or later. For more information, see Install cloud-init.

• If the system architecture of the custom image that you want to import is arm64, set the RTC clock to use the UTC time standard. For more information, see Linux time and time zone description.

• We strongly recommend that you configure image detection parameters when importing an image. This helps the system optimize your image. For more information, see Overview of image detection.