How can I deploy greengrass lambda and group with another user ID/group ID lambda runtime environment ? about aws-greengrass-provisioner

[timmattison]

deployment.default.conf's uid/gid should do it but I'll test it out right now.

[timmattison]

Oops, I meant function.default.conf. The top level uid and gid values are what you are looking for I believe.

I updated the bare function.default.conf to look like this:

conf {
  encodingType = Json
  connectedShadows = []
  localDeviceResources = []
  localVolumeResources = []
  localS3Resources = []
  localSageMakerResources = []
  localSecretsManagerResources = []
  accessSysFs = false
  memorySizeInKb = 32768
  greengrassContainer = true
  environmentVariables = {
    GROUP_ID = ${GROUP_ID}
    AWS_IOT_THING_NAME = ${AWS_IOT_THING_NAME}
    AWS_IOT_THING_ARN = ${AWS_IOT_THING_ARN}
    AWS_GREENGRASS_GROUP_NAME = ${AWS_GREENGRASS_GROUP_NAME}
  }
  uid = 1000
  gid = 1000
  javaJsonHandler = "handleJsonRequest"
  javaBinaryHandler = "handleBinaryRequest"
}

And the corresponding Hello World function looked like this in my process list:

ubuntu   13900  0.3  1.9 215036 18672 ?        Ssl  17:15   0:00 python3.7 -u /runtime/python/lambda_runtime.py --handler=HelloWorldPython3.function_handler

In this case user ubuntu is uid/gid 1000.

Going back to the default file makes this process run as ggc_user which is uid 111 on my system.

ggc_user 13938  0.8  1.9 215036 18640 ?        Ssl  17:18   0:00 python3.7 -u /runtime/python/lambda_runtime.py --handler=HelloWorldPython3.function_handler

[timmattison]

@kimsehwan96 is that what you're looking for?

[timmattison]

Closing for now but please re-open the ticket if this isn't what you needed. Thanks!