AWS drs: DRS Linux agent: architecture-specific installer and hash files
Summary
Documents separate x86_64 and arm64 installer download URLs and corresponding SHA512 hash files, adds guidance to check architecture with uname -m, and notes the x86_64 installer does not run on arm64 servers.
Security assessment
The change extends installer integrity verification (SHA512 hash files) to the new arm64 architecture, which is security-adjacent supply-chain/integrity guidance, but it does not address a specific vulnerability or incident.
Evidence
+If you need to validate the installer hash, use the hash file that matches the installer architecture:
Diff
diff --git a/drs/latest/userguide/linux-agent.md b/drs/latest/userguide/linux-agent.md index eb7c3a41b..b75cfa255 100644 --- a//drs/latest/userguide/linux-agent.md +++ b//drs/latest/userguide/linux-agent.md @@ -22 +22 @@ Before installing, please ensure that you are aware of the following: -The Agent installer download location follows this format: +The installer is architecture-specific. Download the installer that matches the source server architecture: @@ -24 +24,3 @@ The Agent installer download location follows this format: -`https://aws-elastic-disaster-recovery-<REGION>.s3.<REGION>.amazonaws.com/latest/linux/aws-replication-installer-init` + * `x86_64`: `https://aws-elastic-disaster-recovery-<REGION>.s3.<REGION>.amazonaws.com/latest/linux/aws-replication-installer-init` + + * `arm64`: `https://aws-elastic-disaster-recovery-<REGION>.s3.<REGION>.amazonaws.com/latest/linux_arm64/aws-replication-installer-init` @@ -30 +32,3 @@ Replace `<REGION>` with the AWS Region into which you are replicating. -The following is an example for downloading the installer file from the us-east-1 region: +Run `uname -m` on the source server to find its architecture. `aarch64` means `arm64`. The `x86_64` installer does not run on `arm64` servers. Elastic Disaster Recovery supports `arm64` only for AWS Graviton-based Amazon EC2 source instances that recover to AWS. + +The following examples download the installer file from the us-east-1 region. @@ -34,0 +39 @@ wget + # x86_64 @@ -35,0 +41,2 @@ wget + # arm64 + wget -O ./aws-replication-installer-init https://aws-elastic-disaster-recovery-us-east-1.s3.us-east-1.amazonaws.com/latest/linux_arm64/aws-replication-installer-init @@ -39,0 +47 @@ curl + # x86_64 @@ -40,0 +49,2 @@ curl + # arm64 + curl -o aws-replication-installer-init https://aws-elastic-disaster-recovery-us-east-1.s3.us-east-1.amazonaws.com/latest/linux_arm64/aws-replication-installer-init @@ -50 +60 @@ The command line indicates when the installer has been successfully downloaded. -If you need to validate the installer hash, the correct hash is here: +If you need to validate the installer hash, use the hash file that matches the installer architecture: @@ -52 +62,3 @@ If you need to validate the installer hash, the correct hash is here: -`https://aws-elastic-disaster-recovery-hashes-<REGION>.s3.<REGION>.amazonaws.com/latest/linux/aws-replication-installer-init.sha512` + * `x86_64`: `https://aws-elastic-disaster-recovery-hashes-<REGION>.s3.<REGION>.amazonaws.com/latest/linux/aws-replication-installer-init.sha512` + + * `arm64`: `https://aws-elastic-disaster-recovery-hashes-<REGION>.s3.<REGION>.amazonaws.com/latest/linux_arm64/aws-replication-installer-init.sha512` @@ -58 +70,3 @@ For example, when using the **us-east-1** Region: -`https://aws-elastic-disaster-recovery-hashes-us-east-1.s3.us-east-1.amazonaws.com/latest/linux/aws-replication-installer-init.sha512` + * `x86_64`: `https://aws-elastic-disaster-recovery-hashes-us-east-1.s3.us-east-1.amazonaws.com/latest/linux/aws-replication-installer-init.sha512` + + * `arm64`: `https://aws-elastic-disaster-recovery-hashes-us-east-1.s3.us-east-1.amazonaws.com/latest/linux_arm64/aws-replication-installer-init.sha512` @@ -64 +78 @@ AWS Regions that are not opt-in also support the shorter installer path: -`https://aws-elastic-disaster-recovery-<REGION>.s3.amazonaws.com/latest/linux/aws-replication-installer-init`. Replace `<REGION>` with the AWS Region into which you are replicating. +`https://aws-elastic-disaster-recovery-<REGION>.s3.amazonaws.com/latest/linux/aws-replication-installer-init`. Replace `<REGION>` with the AWS Region into which you are replicating. For an `arm64` server, use `linux_arm64` instead of `linux`.