Amazon Linux 2023 Release อย่างเป็นทางการแล้วครับ

Amazon Linux 2023 Release อย่างเป็นทางการแล้วครับ

Amazon Linux ถึงเวลาต้องอัพเดทกันแล้วครับ
Clock Icon2023.03.30

この記事は公開されてから1年以上経過しています。情報が古い可能性がありますので、ご注意ください。

นี่เป็นบทความแปล ที่มีเนื้อหามาจากบทความภาษาญี่ปุ่นของ Classmethod, Inc. ในหัวข้อ「Amazon Linux 2023がGAされました」 หากผู้อ่านสนใจอ่านเนื้อหาต้นฉบับสามารถอ่านได้ที่ลิ้งค์ "บทความต้นฉบับ" ด้านล่าง เนื้อหาในบทความนี้การอธิบายบางอย่างจะถูกปรับให้เข้าใจง่ายขึ้นทำให้แตกต่างจากต้นฉบับในบางจุด

ก่อนอื่นอันนี้บทความของ AWS ที่เขียนเกี่ยวกับ Amazon Linux 2023 ครับ

อันนี้เป็น Document ของ AWS ครับ

Amazon Linux 2023 คืออะไร

ภาพรวม

Amazon Linux 2023 คือ Linux Distribution รุ่นที่ 3 ที่ AWS ปรับแต่งให้เหมาะสมกับการใช้งานกับ Cloud ครับ (Amazon Linux คือ รุ่นที่ 1, Amazon Linux2 คือ รุ่นที่ 2)
รุ่นนี้ก็เหมือนรุ่นก่อนๆที่เราไม่จำเป็นต้องจ่ายค่า licence เพิ่มเติมในการใช้งานครับ

โดยแต่ก่อนจะได้ชื่อว่า Amazon Linux 2022 แต่ออกมาไม่ทันปี 2022 เลยกลายเป็น Amazon Linux 2023 แทนครับ
นั่นทำให้ระยะยเวลาการให้การ support ของ Amazon Linux 2 เลยเลื่อนไปเป็น เดือน 6 ปี 2025 แทนครับ

Q. When will support for Amazon Linux 2 end?
Amazon Linux 2 end of support date (End of Life, or EOL) has been extended by two years from 2023-06-30 to 2025-06-30 to provide customers with ample time to migrate to the next version.
Amazon Linux 2 FAQs

และ Amazon Linux 2023 ยัง support ทั้ง CPU Architecture ทั้ง x86_64 และ arm64 เหมือนเดิมครับ

Life Cycle(ระยะเวลาการให้การ Support)

ทุกๆ 2 ปี Amazon Linux จะมีการปล่อย Major version ออกมา แล้วทุกๆไตรมาสจะปล่อย minor version ออกมา โดยจะมีการให้ระยะเวลาการให้การ Support แต่ละ major version อยู่ที่มากสุด 5 ปีครับ

EOL(end of life)ของ Amazon Linux 2023 อยู่ที่ 2028/3/15 ครับ ส่วน EOL ของ รุ่นที่ผ่านๆมาสามารถดูได้จากภาพด้านล่างนี้ครับ
https://dev.classmethod.jp/wp-content/uploads/2023/03/ALTimelines_external.png ที่มา: Amazon Linux 2023, a Cloud-Optimized Linux Distribution with Long-Term Support | AWS News Blog

กำหนดาการณ์ Release ของ Amazon Linux เวอร์ชั่นต่อๆไปมีดังตารางด้านล่างนี้ครับ

Year Amazon Linux 2023 Amazon Linux 2025 Amazon Linux 2027 Amazon Linux 2029
2023 Standard support
2024 Standard support
2025 Maintenance Standard support
2026 Maintenance Standard support
2027 Maintenance Maintenance Standard support
2028 EOL Maintenance Standard support
2029 EOL Maintenance Maintenance Standard support
2030 EOL EOL Maintenance Standard support
2031 EOL EOL Maintenance Maintenance

ที่มา: Release cadence - Amazon Linux 2023

เนื้อหารายละเอียดของ Major และ minor verison สามารถตรวจสอบได้จาก AWS Official Document ครับ ก่อนจะอัพเกรด ก็อย่าลืมไปตรวจสอบความเข้ากันได้ของเวอร์ชั่นกันก่อนนะครับ ว่าอัพเดทแล้วจะมีปัญหาอะไรไหม

・Major version release— Includes new features and improvements in security and performance across the stack. The improvements might include major changes to the kernel, toolchain, Glib C, OpenSSL, and any other system libraries and utilities. Major releases of Amazon Linux are based in part on the current version of the upstream Fedora Linux distribution. AWS might add or replace specific packages from other non-Fedora upstreams. ・Minor version release— A quarterly update that includes security updates, bug fixes, and new features and packages. Each minor version is a cumulative list of updates that includes security and bug fixes in addition to new features and packages. These releases might include latest language runtimes, such as PHP. They might also include other popular software packages such as Ansible and Docker.   Release cadence - Amazon Linux 2023   

สำหรับชื่อ minor release จะเป็นแบบด้านล่างนี้ครับ

  • 2023.0.20230301
  • 2023.1.20230601
  • 2023.2.20230901

และสำหรับชื่อ AMI ของแต่ละตัวจะเป็นดังต่อไปนี้ครับ

  • al2023-ami-2023.0.20230301.0-kernel-6.1-x86_64
  • al2023-ami-2023.1.20230601.0-kernel-6.1-x86_64
  • al2023-ami-2023.2.20230901.0-kernel-6.1-x86_64

เราสามารถดู Release note รายละเอียดของแต่ละ release ได้ตามบทความด้านล่างนี้ครับ

version ที่ถูก GA เมื่อวันที่ 15 เดือน 3 ปี 2023 ยังมีปัญหาบางอย่างอยู่ ที่เห็นได้ชัดคือ 2 ข้อต่อไปนี้ครับ

  1. Systems Manager Patch Manager ยังไม่รองรับ Amazon Linux 2023
  2. CodeDeploy Agent ยังไม่สามารถทำงานบน Amazon Linux 2023 ได้

ในกรณีที่จำเป็นต้องใช้ 2 อย่างด้านบนนี้ แนะนำให้เลื่อนการใช้ Amazon Linux 2023 ออกไปก่อนครับ

การอัพเดท Package

repository ของ Amazon Linux 2023 จะถูกล็อคไว้ที่บางเวอร์ชั่นครับ

โดยถ้าเป็นการตั้งค่า default Amazon Linux เมื่อก่อน เมื่อ launch instance แล้ว security update จะถูก install ใส่อยู่แล้วครับ

Amazon Linux 2 and the Amazon Linux AMI are updated regularly with security and feature enhancements. If you do not need to preserve data or customizations for your instances, you can simply launch new instances using the current AMI. If you need to preserve data or customizations for your instances, you can maintain those instances through the Amazon Linux package repositories. These repositories contain all the updated packages. You can choose to apply these updates to your running instances. Older versions of the AMI and update packages continue to be available for use, even as new versions are released.
Amazon Linux is configured to download and install critical or important security updates at launch time. We recommend that you make the necessary updates for your use case after launch. For example, you may want to apply all updates (not just security updates) at launch, or evaluate each update and apply only the ones applicable to your system. This is controlled using the following cloud-init setting: repo_upgrade. The following snippet of cloud-init configuration shows how you can change the settings in the user data text you pass to your instance initialization:
Amazon Linux - Amazon Elastic Compute Cloud

แต่ว่า Amazon Linux 2023 ไม่มีการกระทำแบบนั้นแล้ว ถ้า package ของ EC2 instance เป็น AMI เดียวกัน ข้างใน package ก็จะเหมือนกัน ทำให้สามารถสร้าง package version ที่เหมือนกันได้ง่ายขึ้นครับ

ในกรณีที่ต้อง Update จำเป็นจะต้องกำหนด version ของ repository ครับ

# การตรวจสอบ version ของ repository ที่สามารถใช้ได้
$ sudo dnf check-release-update

# อัพเดท repository version ที่เรากำหนด
$ sudo dnf --releasever=<version> update

สำหรับคนที่ใช้ yum update ผ่าน SSM RunCommand เพื่ออัพเดท ต้องระวังกันหน่อยนะครับ

สำหรับ releasever เราสามารถเลือกเป็น latest หรือวันที่เช่น 2023.0.20230210 ที่เป็นเวอร์ชั่นต่างๆที่ถูกกำหนด

ในกรณีที่ไม่กำหนดจะเป็น version ของ system-release โดยจะเรียงลำดับตามนี้ครับ

  1. version ที่เรากำหนดใน command line --releasever=version (ถ้าเรากำหนด)
  2. ค่าที่ถูกกำหนดใน override variable file /etc/dnf/vars/releasever (ถ้าเราตั้งค่าไว้)
  3. version ของ system-release

ยกตัวอย่างเช่น ใน command line เรากำหนดเป็น --releasever=version เราไมาใช้ข้อมูลจาก override variable file หรือ version ของ system-release เพราะได้สิทธิที่เหนือกว่า

เราสามารถตรวจสอบเวอร์ชั่น system-release ปัจจุบันได้จาก command ด้านล่างนี้ครับ

$ rpm -q system-release --qf "%{VERSION}\n"
2023.0.20230315

เราสามารถกำหนด override variable file /etc/dnf/vars/releasever ให้เป็น lastest เพื่อตั้งค่าให้เป็นเวอร์ชั่นใหม่ล่าสุดตลอดได้

$ echo latest | sudo tee /etc/dnf/vars/releasever
latest

AWS Official Document จะเห็นข้อควรระวังดังที่เขียนตามด้านล่างนี้

If you don't override the releasever variable, it's locked to latest by default.
Deterministic upgrades through versioned repositories usage - Amazon Linux 2023

กรณีที่ไม่ override เหมือว่าจะถูกล็อคให้เป็น lastest ครับ ซึ่งทำให้ผมงงว่าแล่วการอ้างอิงเวอร์ชั่น system-release นั้นมีไว้ทำไมกันครับ โดยถ้าวันหลังมี minor release แล้วจะลองทำการทดสอบอีกทีครับ

รายละเอียดเพิ่มเติมสามารถดูได้ที่ AWS Official Document ด้านล่างนี้ครับ

และสำหรับ bucket manager ได้ถูกเปลี่ยนจาก yum เป็น dnf ครับ สำหรับท่านที่สงสัยความแตกต่างของ yum กับ dnf สามารถดู DNF Document ด้านล่างนี้ได้ครับ

รายการหลักๆที่เปลี่ยนไปจาก Amazon Linux 2

ในช่วงนี้เราจะมาแนะนำสิ่งที่แตกต่างไปจาก Amazon Linux 2 กันครับ

SELinux

ก่อนอื่นเลย SELinux จะถูกเปิดการใช้งานตั้งแต่ Default ครับ
แต่เป็น Permissive mode เลยจะไม่ถูกบังคับจาก SELinux Policy ครับ
รายละเอียดของ SELinux สามารถตรวจสอบได้จาก Official Document ของ SELinux Notebook หรือ Redhat ครับ

OpenSSL

OpenSSL เวอร์ชั่นที่ถูกติดตั้งอยู่ไม่ใช่ 1.0.2 แต่เป็น OpenSSL 3 ครับ

พอเป็น OpenSSL 3 ทำให้สามารถใช้ภาษาเช่น Node.js 18 ที่ Amazon Linux 2 ใช้ไม่ได้

แต่ก็ได้มีเขียนไว้ใน OpenSSL Migration guide ด้านล่างนี้ไว้ว่า การอัพเดทจาก OpenSSL 1.0.2 ให้เป็น OpenSSL 3.0 นั้นจำเป็นต้องใช้ความพยายามสูงอยู๋เหมือนกัน ลองเข้าไปอ่านในบทความด้านล่างนี้ดูครับ

glibc、gcc รวมไปถึง binutils

เวอร์ชั่นของ glibc gcc หรือ binutils ก็ได้ถูกอัพเดทเหมือนกันครับ

ชื่อ Package Amazon Linux 2 Amazon Linux 2023
glibc 2.26 2.34
gcc 7.3 11.3
binutils 2.29 2.39

glibc กับ gcc มีการอัพเดทเพิ่มเติมมาหลายอย่าง ทำให้สามารถ install package ที่แต่ก่อนทำไม่ได้ด้วย

gp3

Root volume ของ EBS เปลี่ยน Default จาก gp2 เป็น gp3 แล้วครับ

ถือว่าเป็นการอัพเดทที่ดี จะได้ไม่ต้องมาคอยเปลี่ยนเป็นเวอร์ชั่นใหม่ทุกครั้งที่สร้าง instance กันครับ

IMDSv2

มีการปรับใหม่ให้ Default ใช้แต่ IMDSv2 เท่านั้นครับ

ตอนที่ access ไปยัง instance metadata หากไม่ได้รองรับการใช้ IMDSv2 ก็อย่าลืมไปแก้ไขกันด้วยครับ

รายละเอียดเกี่ยวกับ IMDSv2 ดูได้ที่บทความด้านล่างนี้ครับ

kernel live patch

สามารถปรับใช้ patch ของ kernel ได้โดยไม่ต้อง Restart OS แล้วครับ

kernel live patch มีอยู่ 2 ประเภทคือ Security updates กับ bugfixes ครับ

Security updates – Include updates for Linux common vulnerabilities and exposures (CVE). These updates are typically rated as important or critical using the Amazon Linux Security Advisory ratings. They generally map to a Common Vulnerability Scoring System (CVSS) score of 7 and higher. In some cases, AWS might provide updates before a CVE is assigned. In these cases, the patches might appear as bug fixes. Bug fixes – Include fixes for critical bugs and stability issues that aren't associated with CVEs.
Kernel Live Patching on Amazon Linux 2023 - Amazon Linux 2023

ที่กล่าวไปนี่คือ patch เฉยๆนะครับ พวก version update ที่มีการเพิ่มฟังก์ชันต่างๆ ยังทำไม่ได้ครับ

kernel live patch จะมีการให้บริการนานสุด 3 เดือนหลังจาก Release ครับ

การเปิดใช้งาน kernel live patch หรือวิธีการควบคุมต่างๆสามารถตรวจสอบได้ที่ AWS Official Document ด้านล่างนี้ครับ

Kernel Live Patching on Amazon Linux 2023 - Amazon Linux 2023

SSH Server

ใน Amazon Linux 2023 ssh-rsa จะถูกปิด HostKeyAlgorithms ไว้ครับ ในขณะที่เราเชื่อมต่อ SSH นั้น Client จำเป็นต้อง support ssh-ed25519 ecdsa-sha2-nistp256 หรือ rsa-sha2-256 ครับ

ที่ใช้ไม่ได้นั้นมีแค่ ssh-rsa ครับ RSA key pair ที่สร้างจาก Management console ที่ใช้เชื่อม SSH ยังสามารถใช้งานได้ตามปกติครับ เพราะ RSA key pair เป็น 2048-bit SSH-2 RSA เลยสามารถใช้งานได้ตามปกติครับ

Amazon EC2 supports ED25519 and 2048-bit SSH-2 RSA keys for Linux instances.
Amazon EC2 key pairs and Linux instances - Amazon Elastic Compute Cloud

ณ วันที่ 19 เดือน 3 ปี 2023 Tera Term เวอร์ชั่นล่าสุด(4.106) ยังไม่รองรับ rsa-sha2-256 หรือ rsa-sha2-512 ครับ

ดูเหมือนว่าตั้งแต่ 5.0 จะรองรับ rsa-sha2-256 กับ rsa-sha2-512 ครับ แต่ว่าตอนนี้ยังเป็น Beta Version อยู แนะนำให้รอเป็น GA ก่อนครับ
Release Tera Term 5 RC 5.0 beta1 - Tera Term - OSDN

และโดย Default แล้วก็รองรับ KexAlgorithms ตามด้านล่างนี้ด้วยครับ

  • curve25519-sha256
  • [email protected]
  • ecdh-sha2-nistp256
  • ecdh-sha2-nistp384
  • ecdh-sha2-nistp521
  • diffie-hellman-group-exchange-sha256
  • diffie-hellman-group14-sha256
  • diffie-hellman-group16-sha512
  • diffie-hellman-group18-sha512

ในกรณีที่ Client รองรับแค่ ssh-rsa เราสามารถตั้งค่าฝั่ง EC2 instance ใน crypto-policies ให้รองรับ ssh-rsa ได้ครับ

# ตรวจสอบ crypto-policies ที่เป็น DEFAULT
$ update-crypto-policies --show
DEFAULT

# ตรวจสอบข้อมูล crypto-policies แต่ละชนิด
$ cat /etc/crypto-policies/back-ends/opensshserver.config
Ciphers [email protected],[email protected],aes256-ctr,[email protected],aes128-ctr
MACs [email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha1,[email protected],hmac-sha2-512
GSSAPIKexAlgorithms gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-
KexAlgorithms curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512
HostKeyAlgorithms ecdsa-sha2-nistp256,[email protected],[email protected],[email protected],ecdsa-sha2-nistp384,[email protected],ecdsa-sha2-nistp521,[email protected],ssh-ed25519,[email protected],[email protected],[email protected],rsa-sha2-256,[email protected],rsa-sha2-512,[email protected]
PubkeyAcceptedAlgorithms ecdsa-sha2-nistp256,[email protected],[email protected],[email protected],ecdsa-sha2-nistp384,[email protected],ecdsa-sha2-nistp521,[email protected],ssh-ed25519,[email protected],[email protected],[email protected],rsa-sha2-256,[email protected],rsa-sha2-512,[email protected]
CASignatureAlgorithms ecdsa-sha2-nistp256,[email protected],ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,[email protected],rsa-sha2-256,rsa-sha2-512

# เปลี่ยน crypto-policies ให้เป็น LEGACY
$ sudo update-crypto-policies --set LEGACY
Setting system policy to LEGACY
Note: System-wide crypto policies are applied on application start-up.
It is recommended to restart the system for the change of policies
to fully take place.

# ตรวจสอบว่า crypto-policies เปลี่ยนเป็น LEGACY แล้ว
$ update-crypto-policies --show
LEGACY

# ตรวจสอบข้อมูล crypto-policies แต่ละชนิด
$ cat /etc/crypto-policies/back-ends/opensshserver.config
Ciphers [email protected],[email protected],aes256-ctr,aes256-cbc,[email protected],aes128-ctr,aes128-cbc,3des-cbc
MACs [email protected],[email protected],[email protected],[email protected],hmac-sha2-256,hmac-sha1,[email protected],hmac-sha2-512
GSSAPIKexAlgorithms gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1-
KexAlgorithms curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1
HostKeyAlgorithms ecdsa-sha2-nistp256,[email protected],[email protected],[email protected],ecdsa-sha2-nistp384,[email protected],ecdsa-sha2-nistp521,[email protected],ssh-ed25519,[email protected],[email protected],[email protected],rsa-sha2-256,[email protected],rsa-sha2-512,[email protected],ssh-rsa,[email protected],ssh-dss,[email protected]
PubkeyAcceptedAlgorithms ecdsa-sha2-nistp256,[email protected],[email protected],[email protected],ecdsa-sha2-nistp384,[email protected],ecdsa-sha2-nistp521,[email protected],ssh-ed25519,[email protected],[email protected],[email protected],rsa-sha2-256,[email protected],rsa-sha2-512,[email protected],ssh-rsa,[email protected],ssh-dss,[email protected]
CASignatureAlgorithms ecdsa-sha2-nistp256,[email protected],ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,[email protected],rsa-sha2-256,rsa-sha2-512,ssh-rsa,ssh-dss

ค่า crypto-policies แต่ละชนิดสามารถตรวจสอบได้ที่ /usr/share/crypto-policies/policies/ .pol ครับ

# ไฟล์ .pol ทั้งหมดใน crypto-policies
$ rpm -ql crypto-policies | grep pol$
/etc/crypto-policies/state/CURRENT.pol
/usr/share/crypto-policies/policies/DEFAULT.pol
/usr/share/crypto-policies/policies/EMPTY.pol
/usr/share/crypto-policies/policies/FEDORA38.pol
/usr/share/crypto-policies/policies/FIPS.pol
/usr/share/crypto-policies/policies/FUTURE.pol
/usr/share/crypto-policies/policies/GOST-ONLY.pol
/usr/share/crypto-policies/policies/LEGACY.pol
/usr/share/crypto-policies/policies/NEXT.pol
/usr/share/crypto-policies/policies/TEST-FEDORA39.pol

# ตรวจสอบค่าของการตั้งค่า DEFAULT 
$ cat /usr/share/crypto-policies/policies/DEFAULT.pol
# A reasonable default for today's standards. It should provide
# 112-bit security with the exception of SHA1 signatures in DNSSec
# SHA1 is also enabled in HMAC where collision attacks do not matter.

# MACs: all HMAC with SHA1 or better + all modern MACs (Poly1305 etc)
# Curves: all prime >= 255 bits (including Bernstein curves)
# Signature algorithms: with SHA-256 hash or better (no DSA)
# TLS Ciphers: >= 128-bit key, >= 128-bit block (AES, ChaCha20, including AES-CBC)
# non-TLS Ciphers: as TLS Ciphers with added Camellia
# key exchange: ECDHE, RSA, DHE (no DHE-DSS)
# DH params size: >= 2048
# RSA params size: >= 2048
# TLS protocols: TLS >= 1.2, DTLS >= 1.2

mac = AEAD HMAC-SHA2-256 HMAC-SHA1 UMAC-128 HMAC-SHA2-384 HMAC-SHA2-512

group = X25519 X448 SECP256R1 SECP384R1 SECP521R1 \
    FFDHE-2048 FFDHE-3072 FFDHE-4096 FFDHE-6144 FFDHE-8192

hash = SHA2-256 SHA2-384 SHA2-512 SHA3-256 SHA3-384 SHA3-512 SHA2-224 SHA3-224 \
       SHAKE-256

hash@DNSSec = SHA1+  # SHA1 is still prevalent in DNSSec

sign = ECDSA-SHA3-256 ECDSA-SHA2-256 ECDSA-SHA2-256-FIDO \
       ECDSA-SHA3-384 ECDSA-SHA2-384 \
       ECDSA-SHA3-512 ECDSA-SHA2-512 \
       EDDSA-ED25519 EDDSA-ED25519-FIDO EDDSA-ED448 \
       RSA-PSS-SHA3-256 RSA-PSS-SHA2-256 \
       RSA-PSS-SHA3-384 RSA-PSS-SHA2-384 \
       RSA-PSS-SHA3-512 RSA-PSS-SHA2-512 \
       RSA-PSS-RSAE-SHA3-256 RSA-PSS-RSAE-SHA2-256 \
       RSA-PSS-RSAE-SHA3-384 RSA-PSS-RSAE-SHA2-384 \
       RSA-PSS-RSAE-SHA3-512 RSA-PSS-RSAE-SHA2-512 \
       RSA-SHA3-256 RSA-SHA2-256 \
       RSA-SHA3-384 RSA-SHA2-384 \
       RSA-SHA3-512 RSA-SHA2-512 \
       ECDSA-SHA2-224 RSA-PSS-SHA2-224 RSA-SHA2-224 \
       ECDSA-SHA3-224 RSA-PSS-SHA3-224 RSA-SHA3-224
sign@DNSSec = RSA-SHA1+ ECDSA-SHA1+  # SHA1 is still prevalent in DNSSec

cipher = AES-256-GCM AES-256-CCM CHACHA20-POLY1305 CAMELLIA-256-GCM \
    AES-256-CTR AES-256-CBC CAMELLIA-256-CBC AES-128-GCM AES-128-CCM \
    CAMELLIA-128-GCM AES-128-CTR AES-128-CBC CAMELLIA-128-CBC

cipher@TLS = AES-256-GCM AES-256-CCM CHACHA20-POLY1305 AES-256-CBC \
    AES-128-GCM AES-128-CCM AES-128-CBC


# CBC ciphers in SSH are considered vulnerable to plaintext recovery attacks
# and disabled in client OpenSSH 7.6 (2017) and server OpenSSH 6.7 (2014).
cipher@SSH = -*-CBC

# 'RSA' is intentionally before DHE ciphersuites, as the DHE ciphersuites have
# interoperability issues in TLS.
key_exchange = ECDHE RSA DHE DHE-RSA PSK DHE-PSK ECDHE-PSK RSA-PSK ECDHE-GSS DHE-GSS

protocol@TLS = TLS1.3 TLS1.2 DTLS1.2
protocol@IKE = IKEv2

# Parameter sizes
min_dh_size = 2048
min_dsa_size = 2048
min_rsa_size = 2048

# GnuTLS only for now
sha1_in_certs = 0

arbitrary_dh_groups = 1
ssh_certs = 1
ssh_etm = 1

EPEL

Amazon Linux 2023 ไม่รองรับ Extra Packages for Enterprise Linux (EPEL) ครับ

Extra Packages for Enterprise Linux (EPEL) is a project in the Fedora community with the objective of creating a large array of packages for enterprise-level Linux operating systems. The project has primarily produced RHEL and CentOS packages. Amazon Linux 2 features a high level of compatibility with CentOS 7. As a result, many EPEL7 packages work on Amazon Linux 2. However, AL2023 doesn't support EPEL or EPEL-like repositories.
Comparing Amazon Linux 2 and Amazon Linux 2023 - Amazon Linux 2023

หากลองทำการเพิ่ม EPEL จะมีข้อความแบบด้านล่างนี้ขึ้นครับ

$ sudo dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm
Last metadata expiration check: 0:19:04 ago on Sat Mar 18 22:57:42 2023.
epel-release-latest-9.noarch.rpm                                                          275 kB/s |  18 kB     00:00
Error:
 Problem: conflicting requests
  - nothing provides redhat-release >= 9 needed by epel-release-9-4.el9.noarch
(try to add '--skip-broken' to skip uninstallable packages)

เราอาจจะสงสัยว่า "การ install Nginx ใน Amazon Linux 2 จำเป็นใช้ EPEL งั้นหมายความว่า Amazon Linux 2023 จำเป็นต้องใช้ repository อื่นเหรอ?"

ไม่ต้องห่วงครับ ใน Amazon Linux 2023 นั้น Nginx มี standard repository(amazonlinux.repo) ให้ครับ

Package แต่ละชนิด

ใน Amazon Linux 2023 มีหลาย Package ที่ถูกเพิ่ม ลบ หรือ อัพเดท ครับ

สิ่งที่ผมคิดว่าน่าสนใจมีอยู่ตามด้านล่างนี้

  • Package ที่ถูกเพิ่มเข้ามา
    • grpc
    • nkf
    • nodejs
    • php8.1
    • ruby3.2
    • ssmtp
    • stress
    • w3m
  • Package ที่ถูกลบ
    • amazon-linux-extras
    • ansible
    • awslogs
    • dhcp
    • ec2-net-utils
    • ftp
    • gnome-desktop3
    • mysql-connector-odbc
    • NetworkManager
    • nfs4-acl-tools
    • ntp
    • pacemaker
    • php
    • python
    • python38
    • ruby
    • squid
    • yum
  • Package ที่ถูกอัพเดท
    • awscli : 1.18.147-1.amzn2.0.2 -> 2.9.19-1.amzn2023.0.1
    • bind : 9.11.4-26.P2.amzn2.5.2 -> 9.16.27-1.amzn2023.0.2
    • ec2-utils : 1.2-47.amzn2 -> 2.0.1-1.amzn2023.0.2
    • gcc : 7.3.1-15.amzn2 -> 11.3.1-4.amzn2023.0.2
    • glibc : 2.26-62.amzn2 -> 2.34-52.amzn2023.0.2
    • openssh : 7.4p1-22.amzn2.0.1 -> 8.7p1-8.amzn2023.0.4
    • openssl : 1.0.2k-24.amzn2.0.6 -> 3.0.8-1.amzn2023.0.1
    • postgresql : 14.3-2.amzn2.0.1 -> 15.0-1.amzn2023.0.2
    • python3 : 3.7.16-1.amzn2.0.1 -> 3.9.16-1.amzn2023.0.3

ในกรณีที่เราย้ายจาก Amazon Linux 2 ก็เช็ค Package ที่เราใช้อยู่ว่ามีอยู่หรือไม่กันด้วยนะครับ

นอกจากนี้เราสามารถตรวจสอบ version ของ package ในแต่ละ Release ได้ที่ AWS Official Document ด้านล่างนี้ครับ

เราสามารถตรวจสอบระยะเวลาการ Support ของแต่ละ package ได้ที่ AWS Official Document ด้านล่างนี้ครับ

ความสัมพันธ์กับ Linux distribution อื่น

Amazon Linux 2023 เป็น Linux distribution Fedora base ครับ แตต่ว่า นอกจาก Fedora ก็มี upstream ครับ ยกตัวอย่างเช่น kernel source จะไม่ได้ customise จาก Fedora แต่จะเลือกจาก The Linux Kernel Archives ครับ

The Generally Available (GA) version of AL2023 isn't directly comparable to any specific Fedora release. The AL2023 GA version includes components from Fedora 34, 35, and 36. Some of the components are the same as the components in Fedora and some are modified. Other components more closely resemble the components in CentOS 9 Streams or were developed independently. The Amazon Linux kernel is sourced from the long-term support options that are on kernel.org, chosen independently from Fedora.
Relationship to Fedora - Amazon Linux 2023

ตรวจสอบ AMI

เมื่อเราดูใน EC2 Management console ใน Quick start จะเห็น Amazon Linux 2023 ครับ
https://dev.classmethod.jp/wp-content/uploads/2023/03/a2023.png
เมื่อเราตรวจสอบรายละเอียดของ AMI จะเห็นตามนี้ครับ

$ aws ec2 describe-images \
    --image-ids ami-02f3f602d23f1659d
{
    "Images": [
        {
            "Architecture": "x86_64",
            "CreationDate": "2023-03-13T23:52:35.000Z",
            "ImageId": "ami-02f3f602d23f1659d",
            "ImageLocation": "amazon/al2023-ami-2023.0.20230315.0-kernel-6.1-x86_64",
            "ImageType": "machine",
            "Public": true,
            "OwnerId": "137112412989",
            "PlatformDetails": "Linux/UNIX",
            "UsageOperation": "RunInstances",
            "State": "available",
            "BlockDeviceMappings": [
                {
                    "DeviceName": "/dev/xvda",
                    "Ebs": {
                        "DeleteOnTermination": true,
                        "Iops": 3000,
                        "SnapshotId": "snap-07288b20d4d442c83",
                        "VolumeSize": 8,
                        "VolumeType": "gp3",
                        "Throughput": 125,
                        "Encrypted": false
                    }
                }
            ],
            "Description": "Amazon Linux 2023 AMI 2023.0.20230315.0 x86_64 HVM kernel-6.1",
            "EnaSupport": true,
            "Hypervisor": "xen",
            "ImageOwnerAlias": "amazon",
            "Name": "al2023-ami-2023.0.20230315.0-kernel-6.1-x86_64",
            "RootDeviceName": "/dev/xvda",
            "RootDeviceType": "ebs",
            "SriovNetSupport": "simple",
            "VirtualizationType": "hvm",
            "BootMode": "uefi-preferred",
            "DeprecationTime": "2025-03-13T23:52:35.000Z",
            "ImdsSupport": "v2.0"
        }
    ]
}

จะเห็นได้ว่า Default Volume เป็น gp3 และ IMDS เป็น v2 ครับ

ต่อไป ไปดู parameter store ครับ
เมื่อเราค้น al2023 จะเห็น 8 parameters แสดงอยู่

https://dev.classmethod.jp/wp-content/uploads/2023/03/a20231.png

  • /aws/service/ami-amazon-linux-latest/al2023-ami-kernel-6.1-arm64
  • /aws/service/ami-amazon-linux-latest/al2023-ami-kernel-6.1-x86_64
  • /aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-arm64
  • /aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-x86_64
  • /aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-6.1-arm64
  • /aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-6.1-x86_64
  • /aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-arm64
  • /aws/service/ami-amazon-linux-latest/al2023-ami-minimal-kernel-default-x86_64

จะเห็นได้ว่ามี AMI ทั้ง arm64 และ x86-64 architecture ครับ

ความแตกต่างของ minimal กับ default คือ minimal จะมี tools และ utilities พื้นฐานที่จำเป็นเท่านั้นจะถูกติดตั้งใน OS ครับ โดยปกติแล้วเวลาใช้งานจริงน่าจะเลือก default กันครับ

You can choose to use a standard or minimal Amazon Machine Image (AMI) of Amazon Linux 2023 (AL2023). The standard AL2023 AMI is the default Amazon Machine Image (AMI) that you create. This version comes installed with all of the most commonly used applications and tools. We recommend the standard AMI if you want to get started quickly and aren't interested in customizing the AMI. The minimal AL2023 AMI is the basic, streamlined version that contains only the most basic tools and utilities necessary to run the OS. We recommend the minimal AMI if you want to have the smallest possible OS footprint possible. The minimal AMI offers slightly reduced disk space utilization and better long-term cost efficiency. The minimal AMI is suitable if you want a smaller OS and don't mind manually installing tools and applications. For instructions on how to create an Amazon EC2 instance of the standard or minimal AMI type, see Get started with Amazon Linux 2023. Comparing Amazon Linux 2023 standard (default) and minimal AMIs - Amazon Linux 2023

นอกจากนี้ default parameter ของ AMI กับ suffix ก็เหมือนกับ parameter ของ AMI ที่ไม่มีอะไรติดอยู่ครับ

ตรวจสอบ EC2 instance ที่เปิดใช้งานอยู่

งั้นลองเปิดใช้งาน EC2 instance กันดูครับ

EC2 instance ที่เปิดใช้งานอยู่ จะเป็นตามด้านล่างนี้ครับ

$ aws ec2 describe-images --image-ids ami-02f3f602d23f1659d
 aws ec2 describe-instances --instance-ids i-08aac655640fd7a9c
{
    "Reservations": [
        {
            "Groups": [],
            "Instances": [
                {
                    "AmiLaunchIndex": 0,
                    "ImageId": "ami-02f3f602d23f1659d",
                    "InstanceId": "i-08aac655640fd7a9c",
                    "InstanceType": "t3.micro",
                    "KeyName": "<key pair name>",
                    "LaunchTime": "2023-03-15T22:00:40+00:00",
                    "Monitoring": {
                        "State": "disabled"
                    },
                    "Placement": {
                        "AvailabilityZone": "us-east-1b",
                        "GroupName": "",
                        "Tenancy": "default"
                    },
                    "PrivateDnsName": "ip-172-31-7-233.ec2.internal",
                    "PrivateIpAddress": "172.31.7.233",
                    "ProductCodes": [],
                    "PublicDnsName": "ec2-44-192-37-26.compute-1.amazonaws.com",
                    "PublicIpAddress": "44.192.37.26",
                    "State": {
                        "Code": 16,
                        "Name": "running"
                    },
                    "StateTransitionReason": "",
                    "SubnetId": "subnet-0355def964cb72d89",
                    "VpcId": "vpc-0e0796981cea634c1",
                    "Architecture": "x86_64",
                    "BlockDeviceMappings": [
                                    "GroupName": "launch-wizard-1",
                                    "GroupId": "sg-07ea9d6dc0aa48b2d"
                                }
                            ],
                            "Ipv6Addresses": [],
                            "MacAddress": "02:04:4d:6f:d5:6b",
                            "NetworkInterfaceId": "eni-01bf04ad7fd8fa1f7",
                            "OwnerId": "<AWS account ID>",
                            "PrivateDnsName": "ip-172-31-7-233.ec2.internal",
                            "PrivateIpAddress": "172.31.7.233",
                            "PrivateIpAddresses": [
                                {
                                    "Association": {
                                        "IpOwnerId": "amazon",
                                        "PublicDnsName": "ec2-44-192-37-26.compute-1.amazonaws.com",
                                        "PublicIp": "44.192.37.26"
                                    },
                                    "Primary": true,
                                    "PrivateDnsName": "ip-172-31-7-233.ec2.internal",
                                    "PrivateIpAddress": "172.31.7.233"
                                }
                            ],
                            "SourceDestCheck": true,
                            "Status": "in-use",
                            "SubnetId": "subnet-0355def964cb72d89",
                            "VpcId": "vpc-0e0796981cea634c1",
                            "InterfaceType": "interface"
                        }
                    ],
                    "RootDeviceName": "/dev/xvda",
                    "RootDeviceType": "ebs",
                    "SecurityGroups": [
                        {
                            "GroupName": "launch-wizard-1",
                            "GroupId": "sg-07ea9d6dc0aa48b2d"
                        }
                    ],
                    "SourceDestCheck": true,
                    "SpotInstanceRequestId": "sir-34cyhnxh",
                    "Tags": [
                        {
                            "Key": "Name",
                            "Value": "al2023"
                        }
                    ],
                    "VirtualizationType": "hvm",
                    "CpuOptions": {
                        "CoreCount": 1,
                        "ThreadsPerCore": 2
                    },
                    "CapacityReservationSpecification": {
                        "CapacityReservationPreference": "open"
                    },
                    "HibernationOptions": {
                        "Configured": false
                    },
                    "MetadataOptions": {
                        "State": "applied",
                        "HttpTokens": "required",
                        "HttpPutResponseHopLimit": 2,
                        "HttpEndpoint": "enabled",
                        "HttpProtocolIpv6": "disabled",
                        "InstanceMetadataTags": "disabled"
                    },
                    "EnclaveOptions": {
                        "Enabled": false
                    },
                    "BootMode": "uefi-preferred",
                    "PlatformDetails": "Linux/UNIX",
                    "UsageOperation": "RunInstances",
                    "UsageOperationUpdateTime": "2023-03-15T22:00:40+00:00",
                    "PrivateDnsNameOptions": {
                        "HostnameType": "ip-name",
                        "EnableResourceNameDnsARecord": true,
                        "EnableResourceNameDnsAAAARecord": false
                    },
                    "MaintenanceOptions": {
                        "AutoRecovery": "default"
                    },
                    "CurrentInstanceBootMode": "uefi"
                }
            ],
            "OwnerId": "<AWS account ID>",
            "ReservationId": "r-03d46fb2a23c97dcb"
        }
    ]
}

ตรวจสอบข้อมูล OS

shell

ใช้ SSM session manager เชื่อมไปยัง EC2 Instance แล้วตรวจสอบข้อมูลต่างๆของ OS

# ตรวจสอบ User ปัจจุบัน
$ whoami
ssm-user

# ตรวจสอบ Directory ปัจจุบัน
$ pwd
/usr/bin
# ตรวจสอบ Log shell 

$ echo $SHELL
/bin/bash

# ตรวจสอบ shell ที่สามารถใช้ได้
$ cat /etc/shells
/bin/sh
/bin/bash
/usr/bin/sh
/usr/bin/bash
/bin/csh
/bin/tcsh
/usr/bin/csh
/usr/bin/tcsh

ตรวจสอบ Version ของ OS กับ Kernel

# ตรวจสอบ version ของ OS
$ cat /etc/os-release
NAME="Amazon Linux"
VERSION="2023"
ID="amzn"
ID_LIKE="fedora"
VERSION_ID="2023"
PLATFORM_ID="platform:al2023"
PRETTY_NAME="Amazon Linux 2023"
ANSI_COLOR="0;33"
CPE_NAME="cpe:2.3:o:amazon:amazon_linux:2023"
HOME_URL="https://aws.amazon.com/linux/"
BUG_REPORT_URL="https://github.com/amazonlinux/amazon-linux-2023"
SUPPORT_END="2028-03-01"

# ตรวจสอบ version ของ Kernel
$ uname  -r
6.1.15-28.43.amzn2023.x86_64

# ตรวจสอบ รายละเอียดของ Kernel
$ rpm -qi kernel
Name        : kernel
Version     : 6.1.15
Release     : 28.43.amzn2023
Architecture: x86_64
Install Date: Mon Mar 13 23:37:19 2023
Group       : System Environment/Kernel
Size        : 176192488
License     : GPLv2 and Redistributable, no modification permitted
Signature   : RSA/SHA512, Thu Jan  1 00:00:00 1970, Key ID e951904ad832c631
Source RPM  : kernel-6.1.15-28.43.amzn2023.src.rpm
Build Date  : Thu Mar  9 17:16:01 2023
Build Host  : ip-10-0-52-220.us-west-2.compute.internal
Packager    : Amazon Linux
Vendor      : Amazon Linux
URL         : http://www.kernel.org/
Summary     : The Linux kernel
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.

SELinux

# SELinux mode
$ getenforce
Permissive

# SELinux status and using SELinux policy
$ sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          permissive
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Memory protection checking:     actual (secure)
Max kernel policy version:      33

# ตรวจสอบ Audit log file
$ sudo ls -l /var/log/audit/audit.log
-rw-------. 1 root root 219596 Mar 18 08:45 /var/log/audit/audit.log

# ตรวจสอบ Audit log
$ sudo head /var/log/audit/audit.log
type=DAEMON_START msg=audit(1678917649.599:8216): op=start ver=3.0.6 format=enriched kernel=6.1.15-28.43.amzn2023.x86_64 auid=4294967295 pid=1142 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0res=successAUID="unset" UID="root"
type=SYSCALL msg=audit(1678917649.599:77): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffed675b810 a2=3c a3=0 items=0 ppid=1138 pid=1142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditd" exe="/usr/sbin/auditd" subj=system_u:system_r:auditd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1678917649.599:77): proctitle="/sbin/auditd"
type=CONFIG_CHANGE msg=audit(1678917649.599:78): op=set audit_pid=1142 old=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1678917649.599:78): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffed67594c0 a2=3c a3=0 items=0 ppid=1138 pid=1142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditd" exe="/usr/sbin/auditd" subj=system_u:system_r:auditd_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1678917649.599:78): proctitle="/sbin/auditd"
type=SERVICE_START msg=audit(1678917649.599:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CONFIG_CHANGE msg=audit(1678917649.709:80): auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 op=add_rule key=(null) list=1 res=1AUID="unset"
type=SYSCALL msg=audit(1678917649.709:80): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdd27ed010 a2=420 a3=0 items=0 ppid=1145 pid=1172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1678917649.709:80): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573

dnf repository

# รายการ repository
$ dnf repolist --all
repo id                                repo name                                                                      status
amazonlinux                            Amazon Linux 2023 repository                                                   enabled
amazonlinux-debuginfo                  Amazon Linux 2023 repository - Debug                                           disabled
amazonlinux-source                     Amazon Linux 2023 repository - Source packages                                 disabled
kernel-livepatch                       Amazon Linux 2023 Kernel Livepatch repository                                  enabled
kernel-livepatch-source                Amazon Linux 2023 Kernel Livepatch repository - Source packages                disabled

# ตรวจสอบ ระยะเวลา support ของ package ที่ถูก installed อยู่
$ sudo dnf supportinfo --show installed | sort
Last metadata expiration check: 0:26:41 ago on Wed Mar 15 22:01:04 2023.
acl                                        2.3.1-2.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
acpid                                      2.0.32-4.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
alternatives                               1.15-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
amazon-cloudwatch-agent                    1.247357.0b252275-1                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
amazon-ec2-net-utils                       2.3.0-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
amazon-linux-repo-s3                       2023.0.20230315-1.amzn2023           installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
amazon-rpm-config                          228-3.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
amazon-ssm-agent                           3.2.582.0-1                          installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
at                                         3.1.23-6.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
attr                                       2.5.1-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
audit                                      3.0.6-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
audit-libs                                 3.0.6-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
aws-cfn-bootstrap                          2.0-23.amzn2023                      installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
awscli-2                                   2.9.19-1.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
basesystem                                 11-11.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
bash                                       5.2.15-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
bash-completion                            2.11-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
bc                                         1.07.1-14.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
bind-libs                                  9.16.27-1.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
bind-license                               9.16.27-1.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
bind-utils                                 9.16.27-1.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
binutils                                   2.39-6.amzn2023.0.5                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
boost-filesystem                           1.75.0-4.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
boost-system                               1.75.0-4.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
boost-thread                               1.75.0-4.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
bzip2                                      1.0.8-6.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
bzip2-libs                                 1.0.8-6.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
c-ares                                     1.17.2-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ca-certificates                            2023.2.60-1.0.amzn2023.0.1           installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
checkpolicy                                3.4-3.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
chkconfig                                  1.15-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
chrony                                     4.3-1.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
cloud-init                                 22.2.2-1.amzn2023.1.7                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
cloud-utils-growpart                       0.31-8.amzn2023.0.3                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
coreutils                                  8.32-30.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
coreutils-common                           8.32-30.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
cpio                                       2.13-13.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
cracklib                                   2.9.6-27.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
cracklib-dicts                             2.9.6-27.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
crontabs                                   1.11-24.20190603git.amzn2023.0.2     installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
crypto-policies                            20220428-1.gitdfb10ea.amzn2023.0.2   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
crypto-policies-scripts                    20220428-1.gitdfb10ea.amzn2023.0.2   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
cryptsetup                                 2.6.1-1.amzn2023.0.1                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
cryptsetup-libs                            2.6.1-1.amzn2023.0.1                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
curl-minimal                               7.88.1-1.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
cyrus-sasl-lib                             2.1.27-18.amzn2023.0.3               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
cyrus-sasl-plain                           2.1.27-18.amzn2023.0.3               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dbus                                       1.12.24-1.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dbus-broker                                32-1.amzn2023.0.2                    installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dbus-common                                1.12.24-1.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dbus-libs                                  1.12.24-1.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
device-mapper                              1.02.185-1.amzn2023.0.4              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
device-mapper-libs                         1.02.185-1.amzn2023.0.4              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
diffutils                                  3.8-1.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dnf                                        4.12.0-2.amzn2023.0.4                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dnf-data                                   4.12.0-2.amzn2023.0.4                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dnf-plugin-release-notification            1.2-1.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dnf-plugin-support-info                    1.0-2.amzn2023.0.5                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dnf-plugins-core                           4.1.0-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dosfstools                                 4.2-1.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dracut                                     055-6.amzn2023.0.6                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dracut-config-ec2                          3.0-4.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dracut-config-generic                      055-6.amzn2023.0.6                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dwz                                        0.14-6.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
dyninst                                    10.2.1-6.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
e2fsprogs                                  1.46.5-2.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
e2fsprogs-libs                             1.46.5-2.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ec2-hibinit-agent                          1.0.4-0.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ec2-instance-connect                       1.1-19.amzn2023                      installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ec2-instance-connect-selinux               1.1-19.amzn2023                      installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ec2-utils                                  2.0.1-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ed                                         1.14.2-10.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
efi-filesystem                             5-4.amzn2023.0.5                     installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
efi-srpm-macros                            5-4.amzn2023.0.5                     installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
elfutils-debuginfod-client                 0.188-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
elfutils-default-yama-scope                0.188-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
elfutils-libelf                            0.188-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
elfutils-libs                              0.188-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ethtool                                    5.15-1.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
expat                                      2.5.0-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
file                                       5.39-7.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
file-libs                                  5.39-7.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
filesystem                                 3.14-5.amzn2023.0.3                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
findutils                                  4.8.0-2.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
fonts-srpm-macros                          2.0.5-5.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
fstrm                                      0.6.1-2.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
fuse-libs                                  2.9.9-13.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gawk                                       5.1.0-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gdbm-libs                                  1.19-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gdisk                                      1.0.8-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gettext                                    0.21-4.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gettext-libs                               0.21-4.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ghc-srpm-macros                            1.5.0-4.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
glib2                                      2.73.2-680.amzn2023.0.3              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
glibc                                      2.34-52.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
glibc-all-langpacks                        2.34-52.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
glibc-common                               2.34-52.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
glibc-gconv-extra                          2.34-52.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
glibc-locale-source                        2.34-52.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gmp                                        6.2.1-2.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gnupg2-minimal                             2.3.7-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gnutls                                     3.7.8-359.amzn2023.0.3               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
go-srpm-macros                             3.1.0-32.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gpgme                                      1.15.1-6.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gpm-libs                                   1.20.7-26.amzn2023.amzn2023.0.3      installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
grep                                       3.8-1.amzn2023.0.4                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
groff-base                                 1.22.4-7.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
grub2-common                               2.06-61.amzn2023.0.4                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
grub2-efi-x64-ec2                          2.06-61.amzn2023.0.4                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
grub2-pc-modules                           2.06-61.amzn2023.0.4                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
grub2-tools                                2.06-61.amzn2023.0.4                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
grub2-tools-minimal                        2.06-61.amzn2023.0.4                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
grubby                                     8.40-51.amzn2023.0.4                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gssproxy                                   0.8.4-2.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
gzip                                       1.12-1.amzn2023.0.1                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
hostname                                   3.23-4.amzn2023.0.3                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
hunspell                                   1.7.0-9.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
hunspell-en                                0.20140811.1-18.amzn2023.0.3         installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
hunspell-en-GB                             0.20140811.1-18.amzn2023.0.3         installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
hunspell-en-US                             0.20140811.1-18.amzn2023.0.3         installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
hunspell-filesystem                        1.7.0-9.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
hwdata                                     0.353-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
info                                       6.7-10.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
inih                                       49-3.amzn2023.0.2                    installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
initscripts                                10.09-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
iproute                                    5.10.0-2.amzn2023.0.5                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
iputils                                    20210202-2.amzn2023.0.3              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
irqbalance                                 1.9.0-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
jansson                                    2.14-0.amzn2023                      installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
jitterentropy                              3.4.1-4.amzn2023                     installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
json-c                                     0.14-8.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
kbd                                        2.4.0-2.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
kbd-misc                                   2.4.0-2.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
kernel                                     6.1.15-28.43.amzn2023                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
kernel-livepatch-repo-s3                   2023.0.20230315-1.amzn2023           installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
kernel-srpm-macros                         1.0-14.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
kernel-tools                               6.1.15-28.43.amzn2023                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
keyutils                                   1.6.1-2.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
keyutils-libs                              1.6.1-2.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
kmod                                       29-2.amzn2023.0.5                    installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
kmod-libs                                  29-2.amzn2023.0.5                    installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
kpatch-runtime                             0.9.7-8.amzn2023.0.1                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
krb5-libs                                  1.20.1-8.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
less                                       608-2.amzn2023.0.1                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libacl                                     2.3.1-2.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libaio                                     0.3.111-11.amzn2023.0.2              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libarchive                                 3.5.3-2.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libargon2                                  20171227-9.amzn2023.0.2              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libassuan                                  2.5.5-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libattr                                    2.5.1-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libbasicobjects                            0.1.1-47.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libblkid                                   2.37.4-1.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libcap                                     2.48-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libcap-ng                                  0.8.2-4.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libcbor                                    0.7.0-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libcollection                              0.7.0-47.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libcom_err                                 1.46.5-2.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libcomps                                   0.1.18-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libconfig                                  1.7.2-7.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libcurl-minimal                            7.88.1-1.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libdb                                      5.3.28-49.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libdhash                                   0.5.0-47.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libdnf                                     0.67.0-1.amzn2023.0.5                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libeconf                                   0.4.0-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libedit                                    3.1-38.20210714cvs.amzn2023.0.2      installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libev                                      4.33-3.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libevent                                   2.1.12-3.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libfdisk                                   2.37.4-1.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libffi                                     3.1-28.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libfido2                                   1.10.0-2.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libgcc                                     11.3.1-4.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libgcrypt                                  1.10.1-7.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libgomp                                    11.3.1-4.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libgpg-error                               1.42-1.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libibverbs                                 37.0-1.amzn2023.0.3                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libidn2                                    2.3.2-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libini_config                              1.3.1-47.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libkcapi                                   1.4.0-105.amzn2023.0.1               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libkcapi-hmaccalc                          1.4.0-105.amzn2023.0.1               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libldb                                     2.6.1-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libmaxminddb                               1.5.2-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libmetalink                                0.1.3-14.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libmnl                                     1.0.4-13.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libmodulemd                                2.13.0-2.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libmount                                   2.37.4-1.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libnfsidmap                                2.5.4-2.rc3.amzn2023.0.3             installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libnghttp2                                 1.51.0-1.amzn2023                    installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libnl3                                     3.5.0-6.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libpath_utils                              0.2.1-47.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libpcap                                    1.10.1-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libpipeline                                1.5.3-2.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libpkgconf                                 1.8.0-4.amzn2023.0.1                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libpsl                                     0.21.1-3.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libpwquality                               1.4.4-6.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libref_array                               0.1.5-47.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
librepo                                    1.14.2-1.amzn2023.0.4                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libreport-filesystem                       2.15.2-2.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libseccomp                                 2.5.3-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libselinux                                 3.4-5.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libselinux-utils                           3.4-5.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libsemanage                                3.4-5.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libsepol                                   3.4-3.amzn2023.0.3                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libsigsegv                                 2.13-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libsmartcols                               2.37.4-1.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libsolv                                    0.7.22-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libss                                      1.46.5-2.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libsss_certmap                             2.5.0-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libsss_idmap                               2.5.0-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libsss_nss_idmap                           2.5.0-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libstdc++                                  11.3.1-4.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libstoragemgmt                             1.9.4-5.amzn2023.0.2                 installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
libtalloc                                  2.3.4-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libtasn1                                   4.19.0-1.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libtdb                                     1.4.7-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libtevent                                  0.13.0-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libtextstyle                               0.21-4.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libtirpc                                   1.3.3-0.amzn2023                     installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libunistring                               0.9.10-10.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libuser                                    0.63-4.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libutempter                                1.2.1-4.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libuuid                                    2.37.4-1.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libuv                                      1.44.1-156.amzn2023.0.2              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libverto                                   0.3.2-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libverto-libev                             0.3.2-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libxcrypt                                  4.4.33-7.amzn2023                    installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libxml2                                    2.10.3-2.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libyaml                                    0.2.5-5.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
libzstd                                    1.5.2-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
lm_sensors-libs                            3.6.0-8.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
lmdb-libs                                  0.9.29-1.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
logrotate                                  3.20.1-2.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
lsof                                       4.94.0-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
lua-libs                                   5.4.4-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
lua-srpm-macros                            1-4.amzn2023.0.2                     installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
lz4-libs                                   1.9.4-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
man-db                                     2.9.3-3.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
man-pages                                  5.10-2.amzn2023.0.3                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
microcode_ctl                              2.1-53.amzn2023                      installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
mpfr                                       4.1.0-7.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
nano                                       5.8-3.amzn2023.0.3                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ncurses                                    6.2-4.20200222.amzn2023.0.3          installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ncurses-base                               6.2-4.20200222.amzn2023.0.3          installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ncurses-libs                               6.2-4.20200222.amzn2023.0.3          installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
net-tools                                  2.0-0.59.20160912git.amzn2023.0.3    installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
nettle                                     3.8-1.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
newt                                       0.52.21-9.amzn2023.0.3               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
nfs-utils                                  2.5.4-2.rc3.amzn2023.0.3             installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
npth                                       1.6-6.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
nspr                                       4.35.0-4.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
nss                                        3.88.1-1.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
nss-softokn                                3.88.1-1.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
nss-softokn-freebl                         3.88.1-1.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
nss-sysinit                                3.88.1-1.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
nss-util                                   3.88.1-1.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ntsysv                                     1.15-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
numactl-libs                               2.0.14-3.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
ocaml-srpm-macros                          6-6.amzn2023.0.2                     installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
openblas-srpm-macros                       2-9.amzn2023.0.2                     installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
openldap                                   2.4.57-6.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
openssh                                    8.7p1-8.amzn2023.0.4                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
openssh-clients                            8.7p1-8.amzn2023.0.4                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
openssh-server                             8.7p1-8.amzn2023.0.4                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
openssl                                    3.0.8-1.amzn2023.0.1                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
openssl-libs                               3.0.8-1.amzn2023.0.1                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
openssl-pkcs11                             0.4.12-3.amzn2023.0.1                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
os-prober                                  1.77-7.amzn2023.0.3                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
p11-kit                                    0.24.1-2.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
p11-kit-trust                              0.24.1-2.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
package-notes-srpm-macros                  0.4-18.amzn2023.0.5                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
pam                                        1.5.1-8.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
parted                                     3.4-2.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
passwd                                     0.80-10.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
pciutils                                   3.7.0-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
pciutils-libs                              3.7.0-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
pcre2                                      10.40-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
pcre2-syntax                               10.40-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Carp                                  1.50-458.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Class-Struct                          0.66-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-DynaLoader                            1.47-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Encode                                3.15-462.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Errno                                 1.30-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Exporter                              5.74-459.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Fcntl                                 1.13-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-File-Basename                         2.85-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-File-Path                             2.18-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-File-Temp                             0.231.100-2.amzn2023.0.2             installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-File-stat                             1.09-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Getopt-Long                           2.52-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Getopt-Std                            1.12-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-HTTP-Tiny                             0.078-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-IO                                    1.43-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-IPC-Open3                             1.21-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-MIME-Base64                           3.16-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-POSIX                                 1.94-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-PathTools                             3.78-459.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Pod-Escapes                           1.07-458.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Pod-Perldoc                           3.28.01-459.amzn2023.0.2             installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Pod-Simple                            3.42-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Pod-Usage                             2.01-2.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Scalar-List-Utils                     1.56-459.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-SelectSaver                           1.02-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Socket                                2.032-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Storable                              3.21-458.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Symbol                                1.08-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Term-ANSIColor                        5.01-459.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Term-Cap                              1.17-458.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Text-ParseWords                       3.30-458.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-Time-Local                            1.300-5.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-constant                              1.33-459.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-if                                    0.60.800-477.amzn2023.0.3            installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-interpreter                           5.32.1-477.amzn2023.0.3              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-libs                                  5.32.1-477.amzn2023.0.3              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-mro                                   1.23-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-overload                              1.31-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-overloading                           0.02-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-parent                                0.238-458.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-podlators                             4.14-458.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-srpm-macros                           1-39.amzn2023.0.2                    installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-subs                                  1.03-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
perl-vars                                  1.05-477.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
pkgconf                                    1.8.0-4.amzn2023.0.1                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
pkgconf-m4                                 1.8.0-4.amzn2023.0.1                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
pkgconf-pkg-config                         1.8.0-4.amzn2023.0.1                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
policycoreutils                            3.4-6.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
policycoreutils-python-utils               3.4-6.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
popt                                       1.18-6.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
procps-ng                                  3.3.17-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
protobuf-c                                 1.4.1-2.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
psacct                                     6.6.4-9.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
psmisc                                     23.4-1.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
publicsuffix-list-dafsa                    20221208-60.amzn2023                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python-chevron                             0.13.1-1.amzn2023.0.3                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python-srpm-macros                         3.9-41.amzn2023.0.5                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3                                    3.9.16-1.amzn2023.0.3                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-attrs                              20.3.0-2.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-audit                              3.0.6-1.amzn2023.0.2                 installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-awscrt                             0.16.7-1.amzn2023.0.1                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-babel                              2.9.1-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-cffi                               1.14.5-1.amzn2023.0.2                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-chardet                            4.0.0-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-colorama                           0.4.4-2.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-configobj                          5.0.6-23.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-cryptography                       36.0.1-1.amzn2023.0.3                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-daemon                             2.3.0-4.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-dateutil                           2.8.1-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-dbus                               1.2.18-1.amzn2023.0.2                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-distro                             1.5.0-5.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-dnf                                4.12.0-2.amzn2023.0.4                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-dnf-plugins-core                   4.1.0-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-docutils                           0.16-4.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-gpg                                1.15.1-6.amzn2023.0.3                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-hawkey                             0.67.0-1.amzn2023.0.5                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-idna                               2.10-3.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-jinja2                             2.11.3-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-jmespath                           0.10.0-1.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-jsonpatch                          1.21-14.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-jsonpointer                        2.0-2.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-jsonschema                         3.2.0-9.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-libcomps                           0.1.18-1.amzn2023.0.2                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-libdnf                             0.67.0-1.amzn2023.0.5                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-libs                               3.9.16-1.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-libselinux                         3.4-5.amzn2023.0.2                   installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-libsemanage                        3.4-5.amzn2023.0.2                   installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-libstoragemgmt                     1.9.4-5.amzn2023.0.2                 installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-lockfile                           0.12.2-5.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-markupsafe                         1.1.1-10.amzn2023.0.2                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-netifaces                          0.10.6-13.amzn2023.0.2               installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-oauthlib                           3.0.2-9.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-pip-wheel                          21.3.1-2.amzn2023.0.5                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-ply                                3.11-11.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-policycoreutils                    3.4-6.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-prettytable                        0.7.2-25.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-prompt-toolkit                     3.0.24-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-pycparser                          2.20-3.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-pyrsistent                         0.17.3-6.amzn2023.0.2                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-pyserial                           3.4-10.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-pysocks                            1.7.1-8.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-pytz                               2022.7.1-1.amzn2023                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-pyyaml                             5.4.1-2.amzn2023.0.2                 installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-requests                           2.25.1-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-rpm                                4.16.1.3-12.amzn2023.0.5             installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-ruamel-yaml                        0.16.6-5.amzn2023.0.2                installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-ruamel-yaml-clib                   0.1.2-6.amzn2023.0.2                 installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-setools                            4.4.0-9.amzn2023.0.2                 installed          supported          2028-03-15         Python 3.9 (System Python) has security support until March 2028
python3-setuptools                         59.6.0-2.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-setuptools-wheel                   59.6.0-2.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-six                                1.15.0-5.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-urllib3                            1.25.10-5.amzn2023.0.2               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
python3-wcwidth                            0.2.5-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
quota                                      4.06-4.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
quota-nls                                  4.06-4.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
readline                                   8.1-2.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
rng-tools                                  6.14-1.git.56626083.amzn2023.0.3     installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
rootfiles                                  8.1-29.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
rpcbind                                    1.2.6-0.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
rpm                                        4.16.1.3-12.amzn2023.0.5             installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
rpm-build-libs                             4.16.1.3-12.amzn2023.0.5             installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
rpm-libs                                   4.16.1.3-12.amzn2023.0.5             installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
rpm-plugin-selinux                         4.16.1.3-12.amzn2023.0.5             installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
rpm-plugin-systemd-inhibit                 4.16.1.3-12.amzn2023.0.5             installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
rpm-sign-libs                              4.16.1.3-12.amzn2023.0.5             installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
rsync                                      3.2.6-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
rust-srpm-macros                           21-42.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
screen                                     4.8.0-5.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
sed                                        4.8-7.amzn2023.0.2                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
selinux-policy                             36.16-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
selinux-policy-targeted                    36.16-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
setup                                      2.13.7-3.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
shadow-utils                               4.9-12.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
slang                                      2.3.2-9.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
sqlite-libs                                3.40.0-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
sssd-client                                2.5.0-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
sssd-common                                2.5.0-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
sssd-kcm                                   2.5.0-1.amzn2023.0.3                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
strace                                     5.16-2.amzn2023.0.3                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
sudo                                       1.9.12-1.p2.amzn2023.0.3             installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
sysctl-defaults                            1.0-3.amzn2023                       installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
sysstat                                    12.5.6-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
system-release                             2023.0.20230315-1.amzn2023           installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
systemd                                    252.4-1161.amzn2023.0.3              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
systemd-libs                               252.4-1161.amzn2023.0.3              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
systemd-networkd                           252.4-1161.amzn2023.0.3              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
systemd-pam                                252.4-1161.amzn2023.0.3              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
systemd-resolved                           252.4-1161.amzn2023.0.3              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
systemd-udev                               252.4-1161.amzn2023.0.3              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
systemtap-runtime                          4.8-3.amzn2023.0.5                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
tar                                        1.34-1.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
tbb                                        2020.3-7.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
tcpdump                                    4.99.1-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
tcsh                                       6.24.07-1.amzn2023                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
time                                       1.9-16.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
traceroute                                 2.1.0-13.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
tzdata                                     2022g-1.amzn2023.0.1                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
unzip                                      6.0-57.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
update-motd                                2.0-1.amzn2023.0.3                   installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
userspace-rcu                              0.12.1-3.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
util-linux                                 2.37.4-1.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
util-linux-core                            2.37.4-1.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
vim-common                                 9.0.1314-1.amzn2023.0.2              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
vim-data                                   9.0.1314-1.amzn2023.0.2              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
vim-enhanced                               9.0.1314-1.amzn2023.0.2              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
vim-filesystem                             9.0.1314-1.amzn2023.0.2              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
vim-minimal                                9.0.1314-1.amzn2023.0.2              installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
wget                                       1.21.3-1.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
which                                      2.21-26.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
words                                      3.0-37.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
xfsdump                                    3.1.11-2.amzn2023.0.2                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
xfsprogs                                   5.18.0-1.amzn2023.0.3                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
xxhash-libs                                0.8.0-3.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
xz                                         5.2.5-9.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
xz-libs                                    5.2.5-9.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
yum                                        4.12.0-2.amzn2023.0.4                installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
zip                                        3.0-28.amzn2023.0.2                  installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
zlib                                       1.2.11-33.amzn2023.0.4               installed          supported          2028-03-15         Amazon Linux 2023 end-of-life
zstd                                       1.5.2-1.amzn2023.0.2                 installed          supported          2028-03-15         Amazon Linux 2023 end-of-life

Package กับ version Amazon Linux 2023 ทั้งหมด ที่ Release ในวันที่ 2023/3/15 สามารถตรวจสอบได้ที่ AWS Official Document ด้านล่างนี้ครับ โดยมี package ทั้งหมด 2177 อย่างครับ

รายการ Service

$ systemctl list-unit-files --type=service
UNIT FILE                              STATE           PRESET
acpid.service                          disabled        disabled
amazon-cloudwatch-agent.service        disabled        disabled
amazon-ssm-agent.service               enabled         enabled
arp-ethers.service                     disabled        disabled
atd.service                            enabled         enabled
auditd.service                         enabled         enabled
auth-rpcgss-module.service             static          -
[email protected]                        alias           -
cfn-hup.service                        generated       -
chrony-wait.service                    disabled        disabled
chronyd.service                        enabled         enabled
cloud-config.service                   enabled         disabled
cloud-final.service                    enabled         disabled
cloud-init-hotplugd.service            static          -
cloud-init-local.service               enabled         disabled
cloud-init.service                     enabled         disabled
console-getty.service                  disabled        disabled
[email protected]               static          -
dbus-broker.service                    enabled         enabled
dbus-org.freedesktop.hostname1.service alias           -
dbus-org.freedesktop.locale1.service   alias           -
dbus-org.freedesktop.login1.service    alias           -
dbus-org.freedesktop.network1.service  alias           -
dbus-org.freedesktop.portable1.service alias           -
dbus-org.freedesktop.resolve1.service  alias           -
dbus-org.freedesktop.timedate1.service alias           -
dbus.service                           alias           -
debug-shell.service                    disabled        disabled
dnf-makecache.service                  static          -
dracut-cmdline.service                 static          -
dracut-initqueue.service               static          -
dracut-mount.service                   static          -
dracut-pre-mount.service               static          -
dracut-pre-pivot.service               static          -
dracut-pre-trigger.service             static          -
dracut-pre-udev.service                static          -
dracut-shutdown.service                static          -
emergency.service                      static          -
fstrim.service                         static          -
[email protected]                         enabled         enabled
grub-boot-indeterminate.service        static          -
grub2-systemd-integration.service      static          -
gssproxy.service                       disabled        disabled
hibinit-agent.service                  enabled         enabled
import-state.service                   enabled         enabled
initrd-cleanup.service                 static          -
initrd-parse-etc.service               static          -
initrd-switch-root.service             static          -
initrd-udevadm-cleanup-db.service      static          -
irqbalance.service                     enabled         enabled
kmod-static-nodes.service              static          -
kpatch.service                         disabled        disabled
ldconfig.service                       static          -
libstoragemgmt.service                 enabled         enabled
loadmodules.service                    disabled        disabled
logrotate.service                      static          -
man-db-cache-update.service            static          -
man-db-restart-cache-update.service    disabled        disabled
[email protected]                      static          -
nfs-blkmap.service                     disabled        disabled
nfs-convert.service                    enabled         disabled
nfs-idmapd.service                     static          -
nfs-mountd.service                     static          -
nfs-server.service                     disabled        disabled
nfs-utils.service                      static          -
nfsdcld.service                        static          -
nis-domainname.service                 disabled        disabled
pam_namespace.service                  static          -
[email protected]                 static          -
psacct.service                         disabled        disabled
quotaon.service                        static          -
rc-local.service                       static          -
rdisc.service                          disabled        disabled
[email protected]         static          -
rescue.service                         static          -
rngd.service                           enabled         enabled
rpc-gssd.service                       static          -
rpc-statd-notify.service               static          -
rpc-statd.service                      static          -
rpcbind.service                        disabled        disabled
rpmdb-rebuild.service                  enabled         enabled
selinux-autorelabel-mark.service       enabled         enabled
selinux-autorelabel.service            static          -
selinux-check-proper-disable.service   disabled        disabled
[email protected]                  indirect        disabled
[email protected]                   disabled        disabled
sshd.service                           enabled         enabled
[email protected]                          static          -
sssd-autofs.service                    indirect        disabled
sssd-kcm.service                       indirect        disabled
sssd-nss.service                       indirect        disabled
sssd-pac.service                       indirect        disabled
sssd-pam.service                       indirect        disabled
sssd-ssh.service                       indirect        disabled
sssd-sudo.service                      indirect        disabled
sssd.service                           enabled         enabled
sysstat-collect.service                static          -
sysstat-summary.service                static          -
sysstat.service                        enabled         enabled
system-update-cleanup.service          static          -
systemd-ask-password-console.service   static          -
systemd-ask-password-wall.service      static          -
[email protected]             static          -
systemd-binfmt.service                 static          -
systemd-boot-check-no-failures.service disabled        disabled
[email protected]              static          -
systemd-exit.service                   static          -
systemd-firstboot.service              static          -
systemd-fsck-root.service              enabled-runtime disabled
[email protected]                  static          -
systemd-halt.service                   static          -
[email protected]      static          -
systemd-hibernate.service              static          -
systemd-homed-activate.service         disabled        disabled
systemd-homed.service                  disabled        enabled
systemd-hostnamed.service              static          -
systemd-hwdb-update.service            static          -
systemd-hybrid-sleep.service           static          -
systemd-initctl.service                static          -
systemd-journal-catalog-update.service static          -
systemd-journal-flush.service          static          -
systemd-journald.service               static          -
[email protected]              static          -
systemd-kexec.service                  static          -
systemd-localed.service                static          -
systemd-logind.service                 static          -
systemd-machine-id-commit.service      static          -
systemd-modules-load.service           static          -
systemd-network-generator.service      enabled         enabled
systemd-networkd-wait-online.service   enabled         disabled
[email protected]  disabled        disabled
systemd-networkd.service               enabled         enabled
systemd-oomd.service                   disabled        disabled
systemd-portabled.service              static          -
systemd-poweroff.service               static          -
systemd-pstore.service                 disabled        enabled
systemd-quotacheck.service             static          -
systemd-random-seed.service            static          -
systemd-reboot.service                 static          -
systemd-remount-fs.service             enabled-runtime disabled
systemd-repart.service                 static          -
systemd-resolved.service               enabled         enabled
systemd-rfkill.service                 static          -
systemd-suspend-then-hibernate.service static          -
systemd-suspend.service                static          -
systemd-sysctl.service                 static          -
systemd-sysext.service                 disabled        disabled
systemd-sysupdate-reboot.service       indirect        disabled
systemd-sysupdate.service              indirect        disabled
systemd-sysusers.service               static          -
systemd-time-wait-sync.service         disabled        disabled
systemd-timedated.service              static          -
systemd-timesyncd.service              disabled        disabled
systemd-tmpfiles-clean.service         static          -
systemd-tmpfiles-setup-dev.service     static          -
systemd-tmpfiles-setup.service         static          -
systemd-udev-settle.service            static          -
systemd-udev-trigger.service           static          -
systemd-udevd.service                  static          -
systemd-update-done.service            static          -
systemd-update-utmp-runlevel.service   static          -
systemd-update-utmp.service            static          -
systemd-user-sessions.service          static          -
systemd-userdbd.service                indirect        disabled
systemd-vconsole-setup.service         static          -
systemd-volatile-root.service          static          -
update-motd.service                    enabled         enabled
[email protected]              static          -
[email protected]                          static          -

169 unit files listed.

รายการ process

$ sudo ps auxf
USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root           2  0.0  0.0      0     0 ?        S    22:00   0:00 [kthreadd]
root           3  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [rcu_gp]
root           4  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [rcu_par_gp]
root           5  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [slub_flushwq]
root           6  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [netns]
root           8  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [kworker/0:0H-events_highpri]
root          10  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [mm_percpu_wq]
root          11  0.0  0.0      0     0 ?        I    22:00   0:00  \_ [rcu_tasks_kthread]
root          12  0.0  0.0      0     0 ?        I    22:00   0:00  \_ [rcu_tasks_rude_kthread]
root          13  0.0  0.0      0     0 ?        I    22:00   0:00  \_ [rcu_tasks_trace_kthread]
root          14  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [ksoftirqd/0]
root          15  0.0  0.0      0     0 ?        I    22:00   0:00  \_ [rcu_preempt]
root          16  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [migration/0]
root          18  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [cpuhp/0]
root          19  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [cpuhp/1]
root          20  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [migration/1]
root          21  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [ksoftirqd/1]
root          23  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [kworker/1:0H-events_highpri]
root          25  0.0  0.0      0     0 ?        I    22:00   0:00  \_ [kworker/u4:1-events_unbound]
root          26  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [kdevtmpfs]
root          27  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [inet_frag_wq]
root          28  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [kauditd]
root          29  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [khungtaskd]
root          30  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [oom_reaper]
root          32  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [writeback]
root          33  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [kcompactd0]
root          34  0.0  0.0      0     0 ?        SN   22:00   0:00  \_ [khugepaged]
root          35  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [kintegrityd]
root          36  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [kblockd]
root          37  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [blkcg_punt_bio]
root          39  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [tpm_dev_wq]
root          40  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [md]
root          41  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [edac-poller]
root          42  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [watchdogd]
root          43  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [kworker/1:1H-xfs-log/nvme0n1p1]
root          60  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [kswapd0]
root          63  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [xfsalloc]
root          64  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [xfs_mru_cache]
root          66  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [kthrotld]
root          69  0.0  0.0      0     0 ?        I    22:00   0:00  \_ [kworker/1:2-mm_percpu_wq]
root          82  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [xenbus_probe]
root         113  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [nvme-wq]
root         115  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [nvme-reset-wq]
root         117  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [nvme-delete-wq]
root         124  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [mld]
root         143  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [ipv6_addrconf]
root         162  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [kstrp]
root         174  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [zswap-shrink]
root         242  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [kworker/u5:0]
root         243  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [kworker/0:1H-xfs-log/nvme0n1p1]
root         361  0.0  0.0      0     0 ?        I    22:00   0:00  \_ [kworker/0:3-cgroup_destroy]
root         706  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [xfs-buf/nvme0n1]
root         707  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [xfs-conv/nvme0n]
root         708  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [xfs-reclaim/nvm]
root         709  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [xfs-blockgc/nvm]
root         710  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [xfs-inodegc/nvm]
root         711  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [xfs-log/nvme0n1]
root         712  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [xfs-cil/nvme0n1]
root         713  0.0  0.0      0     0 ?        S    22:00   0:00  \_ [xfsaild/nvme0n1p1]
root        1157  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [ena]
root        1179  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [cryptd]
root        1340  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [rpciod]
root        1341  0.0  0.0      0     0 ?        I<   22:00   0:00  \_ [xprtiod]
root        2034  0.0  0.0      0     0 ?        I    22:06   0:00  \_ [kworker/0:1-mm_percpu_wq]
root        2088  0.0  0.0      0     0 ?        I    22:06   0:00  \_ [kworker/1:0-events]
root        2203  0.0  0.0      0     0 ?        I    22:10   0:00  \_ [kworker/u4:0-events_unbound]
root        2265  0.0  0.0      0     0 ?        I    22:13   0:00  \_ [kworker/1:1-mm_percpu_wq]
root        2322  0.0  0.0      0     0 ?        I    22:13   0:00  \_ [kworker/0:0-events]
root        2329  0.0  0.0      0     0 ?        D    22:15   0:00  \_ [kworker/u4:2+events_unbound]
root        2454  0.0  0.0      0     0 ?        I    22:17   0:00  \_ [kworker/u4:3-events_unbound]
root           1  0.2  1.7 105312 16896 ?        Ss   22:00   0:02 /usr/lib/systemd/systemd --switched-root --system --deseria
root         756  0.0  1.5  42264 14964 ?        Ss   22:00   0:00 /usr/lib/systemd/systemd-journald
root        1127  0.0  1.1  30288 10460 ?        Ss   22:00   0:00 /usr/lib/systemd/systemd-udevd
systemd+    1140  0.0  1.5  21036 14512 ?        Ss   22:00   0:00 /usr/lib/systemd/systemd-resolved
root        1142  0.0  0.2  36024  2776 ?        S<sl 22:00   0:00 /sbin/auditd
root        1191  0.0  0.6  15260  6528 ?        Ss   22:00   0:00 /usr/bin/systemd-inhibit --what=handle-suspend-key:handle-h
root        1358  0.0  0.1   2668  1132 ?        S    22:00   0:00  \_ /usr/sbin/acpid -f
root        1194  0.0  0.3  81328  2940 ?        Ssl  22:00   0:00 /usr/sbin/irqbalance --foreground
libstor+    1195  0.0  0.2   2752  2040 ?        Ss   22:00   0:00 /usr/bin/lsmd -d
root        1196  3.7  0.7 164768  6868 ?        Ssl  22:00   0:37 /usr/sbin/rngd -f -x pkcs11 -x nist
root        1197  0.0  1.1 240020 10684 ?        Ss   22:00   0:00 /usr/sbin/sssd -i --logger=files
root        1263  0.0  1.3 243644 12684 ?        S    22:00   0:00  \_ /usr/libexec/sssd/sssd_be --domain implicit_files --uid
root        1283  0.0  4.1 267284 39504 ?        S    22:00   0:00  \_ /usr/libexec/sssd/sssd_nss --uid 0 --gid 0 --logger=fil
dbus        1199  0.0  0.4   8372  3884 ?        Ss   22:00   0:00 /usr/bin/dbus-broker-launch --scope system --audit
dbus        1217  0.0  0.3   5264  2904 ?        S    22:00   0:00  \_ dbus-broker --log 4 --controller 9 --machine-id ec26934
systemd+    1200  0.0  1.0 235712  9592 ?        Ss   22:00   0:00 /usr/lib/systemd/systemd-networkd
chrony      1213  0.0  0.4  86864  4152 ?        S    22:00   0:00 /usr/sbin/chronyd -F 2
root        1242  0.0  0.3 281008  3532 ?        Ssl  22:00   0:00 /usr/sbin/gssproxy -D
root        1334  0.0  1.0  17600  9864 ?        Ss   22:00   0:00 /usr/lib/systemd/systemd-logind
root        1495  0.0  0.2  20544  2624 ?        Ss   22:00   0:00 /usr/sbin/atd -f
root        1496  0.0  0.1 221344  1068 tty1     Ss+  22:00   0:00 /sbin/agetty -o -p -- \u --noclear - linux
root        1497  0.0  0.1 221388  1064 ttyS0    Ss+  22:00   0:00 /sbin/agetty -o -p -- \u --keep-baud 115200,57600,38400,960
root        1503  0.0  0.7  29104  7096 ?        Ss   22:00   0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root        1840  0.0  1.6 1247744 15776 ?       Ssl  22:01   0:00 /usr/bin/amazon-ssm-agent
root        1880  0.0  2.8 1484360 26732 ?       Sl   22:01   0:00  \_ /usr/bin/ssm-agent-worker
root        2009  0.1  2.3 1326884 21740 ?       Sl   22:05   0:01      \_ /usr/bin/ssm-session-worker <IAMロール名>-03f3f
ssm-user    2029  0.0  0.4 232300  4200 pts/0    Ss   22:05   0:00          \_ sh
root        2392  1.0  0.8 260288  8448 pts/0    S+   22:17   0:00              \_ sudo ps auxf
root        2463  0.0  0.3 232680  2912 pts/0    R+   22:17   0:00                  \_ ps auxf
root        2395  4.0  0.6  15260  6528 ?        Ss   22:17   0:00 /usr/lib/systemd/systemd-userdbd
root        2410  0.0  0.8  24876  7684 ?        S    22:17   0:00  \_ systemd-userwork
root        2412  0.0  0.7  15612  6672 ?        S    22:17   0:00  \_ systemd-userwork
root        2413  0.0  0.7  15612  6684 ?        S    22:17   0:00  \_ systemd-userwork
root        2451  6.0  1.3  19836 12912 ?        Ss   22:17   0:00 /usr/lib/systemd/systemd --user
root        2456  0.0  0.7 115676  6800 ?        S    22:17   0:00  \_ (sd-pam)

รายการ Port ที่ใช้งานอยู่

$ sudo ss -antup
Netid      State          Recv-Q      Send-Q                           Local Address:Port              Peer Address:PortProcess
udp        UNCONN         0           0                            172.31.7.233%ens5:68                     0.0.0.0:* users:(("systemd-network",pid=1200,fd=17))
udp        UNCONN         0           0                                    127.0.0.1:323                    0.0.0.0:* users:(("chronyd",pid=1213,fd=5))
udp        UNCONN         0           0                [fe80::4:4dff:fe6f:d56b]%ens5:546                       [::]:* users:(("systemd-network",pid=1200,fd=19))
udp        UNCONN         0           0                                        [::1]:323                       [::]:* users:(("chronyd",pid=1213,fd=6))
tcp        LISTEN         0           128                                    0.0.0.0:22                     0.0.0.0:* users:(("sshd",pid=1503,fd=4))
tcp        ESTAB          0           0                                 172.31.7.233:44510           67.220.240.167:443 users:(("ssm-agent-worke",pid=1880,fd=10))
tcp        ESTAB          0           0                                 172.31.7.233:59786            209.54.182.89:443 users:(("ssm-session-wor",pid=2009,fd=16))
tcp        TIME-WAIT      0           0                                 172.31.7.233:33134            52.119.198.91:443
tcp        ESTAB          0           0                                 172.31.7.233:53100           209.54.181.213:443 users:(("ssm-agent-worke",pid=1880,fd=14))
tcp        LISTEN         0           128                                       [::]:22                        [::]:* users:(("sshd",pid=1503,fd=6))

รายการ Disk size

$ df -h
Filesystem      Size  Used Avail Use% Mounted on
devtmpfs        4.0M     0  4.0M   0% /dev
tmpfs           460M     0  460M   0% /dev/shm
tmpfs           184M  384K  184M   1% /run
/dev/nvme0n1p1  8.0G  1.8G  6.3G  22% /
tmpfs           460M     0  460M   0% /tmp

รายการ File System ที่ถูก mount

$ findmnt
TARGET                        SOURCE     FSTYPE     OPTIONS
/                             /dev/nvme0n1p1
│                                        xfs        rw,noatime,seclabel,attr2,inode64,logbufs=8,logbsize=32k,sunit=1024,swidth
├─/proc                       proc       proc       rw,nosuid,nodev,noexec,relatime
│ └─/proc/sys/fs/binfmt_misc  systemd-1  autofs     rw,relatime,fd=29,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=1
├─/sys                        sysfs      sysfs      rw,nosuid,nodev,noexec,relatime,seclabel
│ ├─/sys/kernel/security      securityfs securityfs rw,nosuid,nodev,noexec,relatime
│ ├─/sys/fs/cgroup            cgroup2    cgroup2    rw,nosuid,nodev,noexec,relatime,seclabel,nsdelegate,memory_recursiveprot
│ ├─/sys/fs/pstore            pstore     pstore     rw,nosuid,nodev,noexec,relatime,seclabel
│ ├─/sys/firmware/efi/efivars efivarfs   efivarfs   rw,nosuid,nodev,noexec,relatime
│ ├─/sys/fs/bpf               bpf        bpf        rw,nosuid,nodev,noexec,relatime,mode=700
│ ├─/sys/fs/selinux           selinuxfs  selinuxfs  rw,nosuid,noexec,relatime
│ ├─/sys/kernel/debug         debugfs    debugfs    rw,nosuid,nodev,noexec,relatime,seclabel
│ ├─/sys/kernel/tracing       tracefs    tracefs    rw,nosuid,nodev,noexec,relatime,seclabel
│ ├─/sys/kernel/config        configfs   configfs   rw,nosuid,nodev,noexec,relatime
│ └─/sys/fs/fuse/connections  fusectl    fusectl    rw,nosuid,nodev,noexec,relatime
├─/dev                        devtmpfs   devtmpfs   rw,nosuid,seclabel,size=4096k,nr_inodes=114352,mode=755
│ ├─/dev/shm                  tmpfs      tmpfs      rw,nosuid,nodev,seclabel
│ ├─/dev/pts                  devpts     devpts     rw,nosuid,noexec,relatime,seclabel,gid=5,mode=620,ptmxmode=000
│ ├─/dev/hugepages            hugetlbfs  hugetlbfs  rw,relatime,seclabel,pagesize=2M
│ └─/dev/mqueue               mqueue     mqueue     rw,nosuid,nodev,noexec,relatime,seclabel
├─/run                        tmpfs      tmpfs      rw,nosuid,nodev,seclabel,size=188280k,nr_inodes=819200,mode=755
│ ├─/run/credentials/systemd-sysctl.service
│ │                           ramfs      ramfs      ro,nosuid,nodev,noexec,relatime,seclabel,mode=700
│ ├─/run/credentials/systemd-tmpfiles-setup-dev.service
│ │                           ramfs      ramfs      ro,nosuid,nodev,noexec,relatime,seclabel,mode=700
│ └─/run/credentials/systemd-tmpfiles-setup.service
│                             ramfs      ramfs      ro,nosuid,nodev,noexec,relatime,seclabel,mode=700
├─/tmp                        tmpfs      tmpfs      rw,nosuid,nodev,seclabel,nr_inodes=1048576
├─/boot/efi                   systemd-1  autofs     rw,relatime,fd=38,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=1
└─/var/lib/nfs/rpc_pipefs     sunrpc     rpc_pipefs rw,relatime

รายการ User

$ cat /etc/passwd
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
systemd-network:x:192:192:systemd Network Management:/:/usr/sbin/nologin
systemd-oom:x:999:999:systemd Userspace OOM Killer:/:/usr/sbin/nologin
systemd-resolve:x:193:193:systemd Resolver:/:/usr/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/usr/share/empty.sshd:/sbin/nologin
rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin
libstoragemgmt:x:997:997:daemon account for libstoragemgmt:/:/usr/sbin/nologin
systemd-coredump:x:996:996:systemd Core Dumper:/:/usr/sbin/nologin
systemd-timesync:x:995:995:systemd Time Synchronization:/:/usr/sbin/nologin
ec2-instance-connect:x:994:994::/home/ec2-instance-connect:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
chrony:x:993:993:chrony system user:/var/lib/chrony:/sbin/nologin
tcpdump:x:72:72::/:/sbin/nologin
ec2-user:x:1000:1000:EC2 Default User:/home/ec2-user:/bin/bash
cwagent:x:992:992:Cloudwatch Agent:/home/cwagent:/sbin/nologin
ssm-user:x:1001:1001::/home/ssm-user:/bin/bash

รายการ Group

$ cat /etc/group
root:x:0:
bin:x:1:
daemon:x:2:
sys:x:3:
adm:x:4:ec2-user
tty:x:5:
disk:x:6:
lp:x:7:
mem:x:8:
kmem:x:9:
wheel:x:10:ec2-user
cdrom:x:11:
mail:x:12:
man:x:15:
dialout:x:18:
floppy:x:19:
games:x:20:
tape:x:33:
video:x:39:
ftp:x:50:
lock:x:54:
audio:x:63:
users:x:100:
nobody:x:65534:
utmp:x:22:
utempter:x:35:
dbus:x:81:
input:x:104:
kvm:x:36:
render:x:105:
sgx:x:106:
systemd-journal:x:190:ec2-user
systemd-network:x:192:
systemd-oom:x:999:
systemd-resolve:x:193:
ssh_keys:x:998:
sshd:x:74:
rpc:x:32:
libstoragemgmt:x:997:
systemd-coredump:x:996:
systemd-timesync:x:995:
ec2-instance-connect:x:994:
stapusr:x:156:
stapsys:x:157:
stapdev:x:158:
rpcuser:x:29:
chrony:x:993:
tcpdump:x:72:
screen:x:84:
ec2-user:x:1000:
cwagent:x:992:
ssm-user:x:1001:

แนะนำให้ทดสอบกับ OS library ก่อนจะใช้ Amazon Linux 2023

เราได้แนะนำเกี่ยวกับ Amazon Linux 2023 Release อย่างเป็นทางการกันไปแล้วครับ

ระยะเวลาการซัพพอร์ทของ Amazon Linux 2 ถูกยืดไปถึงเดือน 6 ปี 2025 ครับ แต่ก็แนะนำให้รีบทดสอบกับ OS library แล้วเปลี่ยนไปใช้ Amazon Linux 2023 เร็วๆดีกว่าครับ

ตอนที่จะทดสอบก็สามารถดูบทความด้านล่างที่เกี่ยวกับความแตกต่างระหว่าง Amazon Linux 2 กับ Amazon Linux 2023 ประกอบการตัดสินใจได้ครับ

หากบทความนี้เป็นประโยชน์ต่อใครสักคนก็ดีใจแล้วครับ

แล้วเจอกันใหม่ในบทความต่อไป สวัสดีครับ

บทความต้นฉบับ

Amazon Linux 2023がGAされました | DevelopersIO

บทความอ้างอิง

Share this article

facebook logohatena logotwitter logo

© Classmethod, Inc. All rights reserved.