Issue:
Cannot encrypt the root volume of a running worker instance. The attached patch and instructions will add support to enable encryption on a running worker instance.
Solution:
With either of the below solutions, you must also edit the cpmserver.cfg file as noted below. if you already have a section in the .cfg file for the worker then you can edit it. Once it is edited and saved, you can apply the patch attached below.
1. Connect to the N2WS server, user is cpmuser and your selected Key Pair.
2. Edit or create the file /cpmdata/conf/cpmserver.cfg
3. Add below section
[worker]
encrypt_root_volume_with_key=”<key>”
<key> may be a Key ID, Key ARN, alias (in the format ‘alias/<name>’) or alias ARN.
If you plan to have workers in several regions, use one of the alias options.
Once you have edited the .cfg file, save it and restart apache. You can use the following cmd to restart apache
sudo
systemctl restart apache2.service
- v4.2.0 - upgrade to 4.2.2 and install patch
- 4.2.1 & v4.2.2 - install attached patch