Fix user_data section of EC2 instance

ooni · Apr 23, 2024 · 76034e0 · 76034e0
1 parent c214ffd
commit 76034e0
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/tf/modules/cloudhsm/main.tf b/tf/modules/cloudhsm/main.tf
@@ -65,10 +65,13 @@ resource "aws_instance" "codesign_box" {
   user_data = <<-EOF
                 #!/bin/bash
                 sudo yum update -y
-                sudo yum install -y amazon-cloudhsm-cli
-                sudo amazon-linux-extras install -y epel
-                sudo yum install -y openssl
-                sudo yum install -y engine_pkcs11 opensc
+                curl -o cloudhsm.rpm https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Amzn2023/cloudhsm-cli-latest.amzn2023.x86_64.rpm
+                sudo yum install -y ./cloudhsm-cli.rpm
+                rm cloudhsm-cli.rpm
+
+                curl -o  cloudhsm-pkcs11.rpm https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Amzn2023/cloudhsm-pkcs11-latest.amzn2023.x86_64.rpm
+                sudo yum install -y ./cloudhsm-pkcs11.rpm
+                rm cloudhsm-pkcs11.rpm
                 EOF
 
   tags = merge(var.tags, { Name = "codesign-box" })