I am writing to inquire about the support of IMDSv2 through instance profiles in Discourse. We are in the process of migrating our service to use IMDSv2, as IMDSv1 is not an secure option. We would like to understand if Discourse currently supports IMDSv2 through instance profiles and if not, what …

I’m not aware of any way that Discourse itself uses IMDS. Have you installed Discourse on AWS somehow? Are you somehow using IMDSv1 with Discourse already? What is your use case?

I found one related code. spec/lib/s3_helper_spec.rb v3.1.0.beta5 </Rule> </LifecycleConfiguration> XML end it "can correctly set the purge policy" do SiteSetting.s3_configure_tombstone_…

[图片] chocecil: I found one related code. discourse/spec/lib/s3_helper_spec.rb at v3.1.0.beta5 · discourse/discourse · GitHub This is in the testing spec. Discourse uses a version of the AWS SDK (3.130.2) above the minimum required to support IMDSv2 and from what I can tell looking at the Me…

We started using Discourse on an AWS EC2 instance a year ago. And this week we updated our instance to only use IMDSv2, this broke our AWS S3 uploads with the error message “unable to sign request without credentials set”. We also utilise the “s3 use iam profile” setting. The local IMDS service is …

We are also seeing this backup issue after disabling IMDSv1 due to security reasons. We can see the use of IMDSv1 (in 3.3.0.beta1-dev) via the MetadataNoToken metric, so we are wondering what version of Discourse switched to using v2 everywhere?

We too were bitten by this today once we changed our AWS instance to use IMDSv2 only: our users could no longer upload images to S3. Probably relevant here: we are also using the s3 use iam profile option. For now we switched it to “Optional” which basically means IMDSv1 is still enabled which isn…

Does anyone had a solution/workaround to have Discourse work wit IMDSv2?

We are making changes to allow/expect more configuration to be possible via the .aws/config file which might happen to overlap with this and make it possible.

@supermathie the most weird thing that I cannot figure out is that I personally set up 2 discourse instances (dev/prod) that are identically configured (s3 uploads for files and backup using IAM profile) and updated to identical version ( 9436f5e3d4 ) and when I disabled IMDSv1… in dev everything kept…

@ducks identified the timeouts in the SDK for acquiring IMDS credentials are very aggressive (1 second, no retries) so it’s possible that it’s hitting that timeout. But that’s just a guess. If you console into prod can you do it interactively, e.g.: discourse(prod)> c = Aws::S3::Client.new(region…

IMDSv2 支持

支持安装

pfaffman (Jay Pfaffman) 2023 年7 月 21 日 19:01 3

我不知道 Discourse 本身有任何使用 IMDS 的方法。您是否以某种方式在 AWS 上安装了 Discourse？您是否已经在以某种方式将 IMDSv1 与 Discourse 一起使用？

您的用例是什么？

话题		回复	浏览量
Backups to S3 fail when IMDSv1 disabled Bug backups , s3	0	127	2024 年8 月 29 日
How are you authenticating Discourse to AWS? Help us improve the settings! Feature s3	3	245	2025 年10 月 9 日
Set up file and image uploads to S3 Self-Hosting configuring , how-to	35	121584	2025 年10 月 25 日
Configure an S3 compatible object storage provider for uploads Self-Hosting cdn , configuring , how-to , reference	267	52419	2026 年9 月 15 日
Problems with Patreon Login, Force HTTPS, and S3 CDN (three) Issues Self-hosting unsupported-install	12	2309	2023 年1 月 6 日

IMDSv2 支持

相关话题