cloudformation-guard: v2.1 Fails install on Codebuild

We install cfn-guard on a codebuild image (aws/codebuild/amazonlinux2-x86_64-standard:3.0) and run in as a part of our build pipelines. On June 30, our builds started failing b/c cfn-guard could not be installed. This appears to coincide with the release of cfn-guard 2.1. The install fails with the error: “/root/.guard/bin/cfn-guard: /lib64/libc.so.6: version `GLIBC_2.28’ not found”.

We logged a ticket with the CodeBuild team and were told nothing has changed with the standard:3.0 CodeBuild image Screen Shot 2022-07-05 at 10 12 37 AM .

About this issue

  • Original URL
  • State: closed
  • Created 2 years ago
  • Reactions: 1
  • Comments: 15 (7 by maintainers)

Most upvoted comments

HI @mandeepgoyat I’ll re-open this and we’ll take a look soon.

Hi @ajmax @saiprasanthrajavarapu

We are closing this issue as it was validated to work on our end. If you face any problems on your end, please feel free to comment and re-open.

Thanks!

Figured out the root cause for the issue, the binary that was previously uploaded for Linux was compiled using GLIBC 2.28 which is not backward compatible with the GLIBC 2.26 that’s distributed with AL2 image, I have updated the binary to now be independent of any versions of GLIBC on system, it’s currently compiled using musl compiler instead.

@ajmax If you could retry the same script, the binary should now just work. Let us know in case the issue still persists. Happy to help.