AWS Security ChangesHomeSearch

AWS fsx documentation change

Service: fsx · 2025-03-30 · Documentation low

File: fsx/latest/LustreGuide/install-lustre-client.md

Summary

Updated Ubuntu client installation instructions: removed version-specific references (24.04), made repository naming generic, replaced hardcoded codenames with dynamic variables, removed documentation for older Ubuntu versions (22.04, 20.04, 18.04), and moved kernel version requirements to a reference link

Security assessment

Changes focus on documentation structure and version handling rather than addressing security vulnerabilities. The existing GPG signature verification for package integrity remains unchanged but does not indicate a new security issue or feature.

Diff

diff --git a/fsx/latest/LustreGuide/install-lustre-client.md b/fsx/latest/LustreGuide/install-lustre-client.md
index 07db996db..6b78a346b 100644
--- a/fsx/latest/LustreGuide/install-lustre-client.md
+++ b/fsx/latest/LustreGuide/install-lustre-client.md
@@ -438 +438 @@ This list includes the default install only packages, specified in the `yum.conf
-You can get Lustre packages from the Ubuntu 24.04 Amazon FSx repository. To validate that the contents of the repository have not been tampered with before or during download, a GNU Privacy Guard (GPG) signature is applied to the metadata of the repository. Installing the repository fails unless you have the correct public GPG key installed on your system.
+You can get Lustre packages from the Amazon FSx Ubuntu repository. To validate that the contents of the repository have not been tampered with before or during download, a GNU Privacy Guard (GPG) signature is applied to the metadata of the repository. Installing the repository fails unless you have the correct public GPG key installed on your system.
@@ -450 +450 @@ You can get Lustre packages from the Ubuntu 24.04 Amazon FSx repository. To vali
-                sudo bash -c 'echo "deb [signed-by=/usr/share/keyrings/fsx-ubuntu-public-key.gpg] https://fsx-lustre-client-repo.s3.amazonaws.com/ubuntu noble main" > /etc/apt/sources.list.d/fsxlustreclientrepo.list && apt-get update'
+                sudo bash -c 'echo "deb [signed-by=/usr/share/keyrings/fsx-ubuntu-public-key.gpg] https://fsx-lustre-client-repo.s3.amazonaws.com/ubuntu $(lsb_release -cs) main" > /etc/apt/sources.list.d/fsxlustreclientrepo.list && apt-get update'
@@ -452 +452 @@ You can get Lustre packages from the Ubuntu 24.04 Amazon FSx repository. To vali
-  3. Determine which kernel is currently running on your client instance, and update as needed. The Lustre client on Ubuntu 24.04 requires kernel `6.8.0-1024-aws` or later for both x86-based EC2 instances and Arm-based EC2 instances powered by AWS Graviton processors.
+  3. Determine which kernel is currently running on your client instance, and update as needed. For a list of the required kernels for the Lustre client on Ubuntu for both x86-based EC2 instances and Arm-based EC2 instances powered by AWS Graviton processors, see [Ubuntu clients](./lustre-client-matrix.html#ubuntu-clients).
@@ -462 +462 @@ You can get Lustre packages from the Ubuntu 24.04 Amazon FSx repository. To vali
-If your kernel version is greater than `6.8.0-1024-aws` for both x86-based EC2 instances and Graviton-based EC2 instances, and you don’t want to update to the latest kernel version, you can install Lustre for the current kernel with the following command. 
+If your kernel version is greater than the minimum kernel version for both x86-based EC2 instances and Graviton-based EC2 instances, and you don’t want to update to the latest kernel version, you can install Lustre for the current kernel with the following command. 
@@ -479,141 +478,0 @@ The two Lustre packages that are necessary for mounting and interacting with you
-###### Note
-
-If you get a `Module Not Found` error, see To troubleshoot missing module errors.
-
-You can get Lustre packages from the Ubuntu 22.04 Amazon FSx repository. To validate that the contents of the repository have not been tampered with before or during download, a GNU Privacy Guard (GPG) signature is applied to the metadata of the repository. Installing the repository fails unless you have the correct public GPG key installed on your system.
-
-  1. Open a terminal on your client.
-
-  2. Follow these steps to add the Amazon FSx Ubuntu repository:
-
-    1. If you have not previously registered an Amazon FSx Ubuntu repository on your client instance, download and install the required public key. Use the following command.
-        
-                wget -O - https://fsx-lustre-client-repo-public-keys.s3.amazonaws.com/fsx-ubuntu-public-key.asc | gpg --dearmor | sudo tee /usr/share/keyrings/fsx-ubuntu-public-key.gpg >/dev/null
-
-    2. Add the Amazon FSx package repository to your local package manager using the following command.
-        
-                sudo bash -c 'echo "deb [signed-by=/usr/share/keyrings/fsx-ubuntu-public-key.gpg] https://fsx-lustre-client-repo.s3.amazonaws.com/ubuntu jammy main" > /etc/apt/sources.list.d/fsxlustreclientrepo.list && apt-get update'
-
-  3. Determine which kernel is currently running on your client instance, and update as needed. The Lustre client on Ubuntu 22.04 requires kernel `5.15.0-1015-aws` or later for both x86-based EC2 instances and Arm-based EC2 instances powered by AWS Graviton processors.
-
-    1. Run the following command to determine which kernel is running.
-        
-                uname -r
-
-    2. Run the following command to update to the latest Ubuntu kernel and Lustre version and then reboot.
-        
-                sudo apt install -y linux-aws lustre-client-modules-aws && sudo reboot
-
-If your kernel version is greater than `5.15.0-1015-aws` for both x86-based EC2 instances and Graviton-based EC2 instances, and you don’t want to update to the latest kernel version, you can install Lustre for the current kernel with the following command. 
-        
-                sudo apt install -y lustre-client-modules-$(uname -r)
-
-The two Lustre packages that are necessary for mounting and interacting with your FSx for Lustre file system are installed. You can optionally install additional related packages such as a package containing the source code and packages containing tests that are included in the repository.
-
-    3. List all available packages in the repository by using the following command. 
-        
-                sudo apt-cache search ^lustre
-
-    4. (Optional) If you want your system upgrade to also always upgrade Lustre client modules, make sure that the `lustre-client-modules-aws` package is installed using the following command.
-        
-                sudo apt install -y lustre-client-modules-aws
-
-
-
-
-###### Note
-
-If you get a `Module Not Found` error, see To troubleshoot missing module errors.
-
-Lustre 2.12 clients are supported on Ubuntu 20.04 with kernel 5.15.0-1015-aws or later. Lustre 2.10 clients are supported on Ubuntu 20.04 with kernel 5.4.0-1011-aws or later on x86-based EC2 instances and kernel 5.4.0-1015-aws or later on Arm-based EC2 instances powered by AWS Graviton processors.
-
-You can get Lustre packages from the Ubuntu 20.04 Amazon FSx repository. To validate that the contents of the repository have not been tampered with before or during download, a GNU Privacy Guard (GPG) signature is applied to the metadata of the repository. Installing the repository fails unless you have the correct public GPG key installed on your system. 
-
-  1. Open a terminal on your client.
-
-  2. Follow these steps to add the Amazon FSx Ubuntu repository:
-
-    1. If you have not previously registered an Amazon FSx Ubuntu repository on your client instance, download and install the required public key. Use the following command.
-        
-                wget -O - https://fsx-lustre-client-repo-public-keys.s3.amazonaws.com/fsx-ubuntu-public-key.asc | gpg --dearmor | sudo tee /usr/share/keyrings/fsx-ubuntu-public-key.gpg >/dev/null
-
-    2. Add the Amazon FSx package repository to your local package manager using the following command.
-        
-                sudo bash -c 'echo "deb [signed-by=/usr/share/keyrings/fsx-ubuntu-public-key.gpg] https://fsx-lustre-client-repo.s3.amazonaws.com/ubuntu focal main" > /etc/apt/sources.list.d/fsxlustreclientrepo.list && apt-get update'
-
-  3. Determine which kernel is currently running on your client instance, and update as needed.
-
-    1. Run the following command to determine which kernel is running.
-        
-                uname -r
-
-    2. Run the following command to update to the latest Ubuntu kernel and Lustre version and then reboot.
-        
-                sudo apt install -y linux-aws lustre-client-modules-aws && sudo reboot
-
-If your kernel version is greater than `5.4.0-1011-aws` for x86-based EC2 instances, or greater than `5.4.0-1015-aws` for Graviton-based EC2 instances, and you don’t want to update to the latest kernel version, you can install Lustre for the current kernel with the following command. 
-        
-                sudo apt install -y lustre-client-modules-$(uname -r)
-
-The two Lustre packages that are necessary for mounting and interacting with your FSx for Lustre file system are installed. You can optionally install additional related packages such as a package containing the source code and packages containing tests that are included in the repository.
-
-    3. List all available packages in the repository by using the following command. 
-        
-                sudo apt-cache search ^lustre
-
-    4. (Optional) If you want your system upgrade to also always upgrade Lustre client modules, make sure that the `lustre-client-modules-aws` package is installed using the following command.
-        
-                sudo apt install -y lustre-client-modules-aws
-
-
-
-
-###### Note
-
-If you get a `Module Not Found` error, see To troubleshoot missing module errors.
-
-###### Note
-
-The last supported Ubuntu 18 kernel version is `5.4.0.1103.aws`.
-
-You can get Lustre packages from the Ubuntu 18.04 Amazon FSx repository. To validate that the contents of the repository have not been tampered with before or during download, a GNU Privacy Guard (GPG) signature is applied to the metadata of the repository. Installing the repository fails unless you have the correct public GPG key installed on your system. 
-
-  1. Open a terminal on your client.
-
-  2. Follow these steps to add the Amazon FSx Ubuntu repository:
-
-    1. If you have not previously registered an Amazon FSx Ubuntu repository on your client instance, download and install the required public key. Use the following command.
-        
-                wget -O - https://fsx-lustre-client-repo-public-keys.s3.amazonaws.com/fsx-ubuntu-public-key.asc | gpg --dearmor | sudo tee /usr/share/keyrings/fsx-ubuntu-public-key.gpg >/dev/null
-
-    2. Add the Amazon FSx package repository to your local package manager using the following command.
-        
-                sudo bash -c 'echo "deb [signed-by=/usr/share/keyrings/fsx-ubuntu-public-key.gpg] https://fsx-lustre-client-repo.s3.amazonaws.com/ubuntu bionic main" > /etc/apt/sources.list.d/fsxlustreclientrepo.list && apt-get update'
-
-  3. Determine which kernel is currently running on your client instance, and update as needed. The Lustre client on Ubuntu 18.04 requires kernel `4.15.0-1054-aws` or later for x86-based EC2 instances and kernel `5.3.0-1023-aws` or later for Arm-based EC2 instances powered by AWS Graviton processors.
-
-    1. Run the following command to determine which kernel is running.
-        
-                uname -r
-
-    2. Run the following command to update to the latest Ubuntu kernel and Lustre version and then reboot.
-        
-                sudo apt install -y linux-aws lustre-client-modules-aws && sudo reboot
-
-If your kernel version is greater than `4.15.0-1054-aws` for x86-based EC2 instances, or greater than `5.3.0-1023-aws` for Graviton-based EC2 instances, and you don’t want to update to the latest kernel version, you can install Lustre for the current kernel with the following command. 
-        
-                sudo apt install -y lustre-client-modules-$(uname -r)
-
-The two Lustre packages that are necessary for mounting and interacting with your FSx for Lustre file system are installed. You can optionally install additional related packages, such as a package containing the source code and packages containing tests that are included in the repository.
-
-    3. List all available packages in the repository by using the following command.
-        
-                sudo apt-cache search ^lustre
-
-    4. (Optional) If you want your system upgrade to also always upgrade Lustre client modules, make sure that the `lustre-client-modules-aws` package is installed using the following command.
-        
-                sudo apt install -y lustre-client-modules-aws
-
-
-
-