Bug: Invoke failed error=ErrAgentNameCollision

[billyjbryant]

Description:

I am writing a CDK Stack that deploys a Lambda that uses the Parameters and Secrets extension. When I try to local invoke it fails with the error Invoke failed error=ErrAgentNameCollision.

I have seen a few other closed tickets regarding issues like this, namely #7123

Steps to reproduce:

1. cdk synth
2. sam build -t ./cdk.out/<template>
3. sam local invoke <FunctionName> --no-event
4. Get error

Observed result:

sam local invoke output

sam local invoke TokenRotateLambda -e sam_event_create.json --debug
2024-09-27 11:28:49,897 | No config file found in this directory.                                                                                                                                       
2024-09-27 11:28:49,899 | OSError occurred while reading TOML file: [Errno 2] No such file or directory: '/Users/billybryant/github/mapbox/mbx-token-rotate-lambda/samconfig.toml'                      
2024-09-27 11:28:49,901 | Config file location: /Users/billybryant/github/mapbox/mbx-token-rotate-lambda/samconfig.toml                                                                                 
2024-09-27 11:28:49,901 | Config file '/Users/billybryant/github/mapbox/mbx-token-rotate-lambda/samconfig.toml' does not exist                                                                          
2024-09-27 11:28:49,932 | Using SAM Template at /Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build/template.yaml                                                                   
2024-09-27 11:28:50,156 | OSError occurred while reading TOML file: [Errno 2] No such file or directory: '/Users/billybryant/github/mapbox/mbx-token-rotate-lambda/samconfig.toml'                      
2024-09-27 11:28:50,157 | Using config file: samconfig.toml, config environment: default                                                                                                                
2024-09-27 11:28:50,158 | Expand command line arguments to:                                                                                                                                             
2024-09-27 11:28:50,159 | --template_file=/Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build/template.yaml --event=sam_event_create.json --function_logical_id=TokenRotateLambda   
--no_event --layer_cache_basedir=/Users/billybryant/.aws-sam/layers-pkg --container_host=localhost --container_host_interface=127.0.0.1                                                                 
2024-09-27 11:28:50,160 | local invoke command is called                                                                                                                                                
2024-09-27 11:29:30,685 | Collected default values for parameters: {'BootstrapVersion': '/cdk-bootstrap/hnb659fds/version'}                                                                             
2024-09-27 11:29:30,726 | CDK Path for resource AccessTokenSecret6B182B02 is ['MbxTokenRotateMapboxStack', 'AccessTokenSecret', 'Resource']                                                             
2024-09-27 11:29:30,727 | CDK Path for resource ClientTokenSecret919470FA is ['MbxTokenRotateMapboxStack', 'ClientTokenSecret', 'Resource']                                                             
2024-09-27 11:29:30,728 | CDK Path for resource DeletionSecretA07AD565 is ['MbxTokenRotateMapboxStack', 'DeletionSecret', 'Resource']                                                                   
2024-09-27 11:29:30,729 | CDK Path for resource ConfigParameterD4506805 is ['MbxTokenRotateMapboxStack', 'ConfigParameter', 'Resource']                                                                 
2024-09-27 11:29:30,730 | CDK Path for resource TokenRotateLambdaRoleF782553E is ['MbxTokenRotateMapboxStack', 'TokenRotateLambdaRole', 'Resource']                                                     
2024-09-27 11:29:30,731 | CDK Path for resource TokenRotateLambdaRoleDefaultPolicy79AC3D7A is ['MbxTokenRotateMapboxStack', 'TokenRotateLambdaRole', 'DefaultPolicy', 'Resource']                       
2024-09-27 11:29:30,731 | Sam customer defined id is more priority than other IDs. Customer defined id for resource TokenRotateLambdaC07C2948 is TokenRotateLambda                                      
2024-09-27 11:29:30,734 | CDK Path for resource TokenRotateSchedulerPolicy3A235043 is ['MbxTokenRotateMapboxStack', 'TokenRotateSchedulerPolicy', 'Resource']                                           
2024-09-27 11:29:30,736 | CDK Path for resource TokenRotateLambdaTriggerF84E16B9 is ['MbxTokenRotateMapboxStack', 'TokenRotateLambdaTrigger', 'Resource', 'Default']                                    
2024-09-27 11:29:30,737 | CDK Path for resource TokenRotateLambdaTriggerCustomResourcePolicy0328249E is ['MbxTokenRotateMapboxStack', 'TokenRotateLambdaTrigger', 'CustomResourcePolicy', 'Resource']   
2024-09-27 11:29:30,738 | CDK Path for resource AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2 is ['MbxTokenRotateMapboxStack', 'AWS679f53fac002430cb0da5b7982bd2287', 'ServiceRole',           
'Resource']                                                                                                                                                                                             
2024-09-27 11:29:30,739 | Sam customer defined id is more priority than other IDs. Customer defined id for resource AWS679f53fac002430cb0da5b7982bd22872D164C4C is AWS679f53fac002430cb0da5b7982bd2287  
2024-09-27 11:29:30,740 | CDK Path for resource CDKMetadata is ['MbxTokenRotateMapboxStack', 'CDKMetadata', 'Default']                                                                                  
2024-09-27 11:29:30,742 | Unable to resolve property ACCESS_TOKEN_SECRET: OrderedDict([('Fn::Join', ['-', [OrderedDict([('Fn::Select', [0, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select', 
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'AccessTokenSecret6B182B02')])])])])])])])])]), OrderedDict([('Fn::Select', [1, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select',  
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'AccessTokenSecret6B182B02')])])])])])])])])]), OrderedDict([('Fn::Select', [2, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select',  
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'AccessTokenSecret6B182B02')])])])])])])])])])]])]). Leaving as is.                                                                           
2024-09-27 11:29:30,750 | Unable to resolve property CLIENT_TOKEN_SECRET: OrderedDict([('Fn::Join', ['-', [OrderedDict([('Fn::Select', [0, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select', 
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'ClientTokenSecret919470FA')])])])])])])])])]), OrderedDict([('Fn::Select', [1, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select',  
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'ClientTokenSecret919470FA')])])])])])])])])]), OrderedDict([('Fn::Select', [2, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select',  
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'ClientTokenSecret919470FA')])])])])])])])])])]])]). Leaving as is.                                                                           
2024-09-27 11:29:30,766 | Unable to resolve property DELETION_SECRET: OrderedDict([('Fn::Join', ['-', [OrderedDict([('Fn::Select', [0, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select', [6, 
OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'DeletionSecretA07AD565')])])])])])])])])]), OrderedDict([('Fn::Select', [1, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select', [6,     
OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'DeletionSecretA07AD565')])])])])])])])])]), OrderedDict([('Fn::Select', [2, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select', [6,     
OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'DeletionSecretA07AD565')])])])])])])])])])]])]). Leaving as is.                                                                                  
2024-09-27 11:29:30,774 | Unable to resolve property SEED_TOKEN: None. Leaving as is.                                                                                                                   
2024-09-27 11:29:30,776 | 0 stacks found in the template                                                                                                                                                
2024-09-27 11:29:30,777 | Collected default values for parameters: {'BootstrapVersion': '/cdk-bootstrap/hnb659fds/version'}                                                                             
2024-09-27 11:29:30,797 | CDK Path for resource AccessTokenSecret6B182B02 is ['MbxTokenRotateMapboxStack', 'AccessTokenSecret', 'Resource']                                                             
2024-09-27 11:29:30,799 | CDK Path for resource ClientTokenSecret919470FA is ['MbxTokenRotateMapboxStack', 'ClientTokenSecret', 'Resource']                                                             
2024-09-27 11:29:30,799 | CDK Path for resource DeletionSecretA07AD565 is ['MbxTokenRotateMapboxStack', 'DeletionSecret', 'Resource']                                                                   
2024-09-27 11:29:30,800 | CDK Path for resource ConfigParameterD4506805 is ['MbxTokenRotateMapboxStack', 'ConfigParameter', 'Resource']                                                                 
2024-09-27 11:29:30,801 | CDK Path for resource TokenRotateLambdaRoleF782553E is ['MbxTokenRotateMapboxStack', 'TokenRotateLambdaRole', 'Resource']                                                     
2024-09-27 11:29:30,801 | CDK Path for resource TokenRotateLambdaRoleDefaultPolicy79AC3D7A is ['MbxTokenRotateMapboxStack', 'TokenRotateLambdaRole', 'DefaultPolicy', 'Resource']                       
2024-09-27 11:29:30,802 | Sam customer defined id is more priority than other IDs. Customer defined id for resource TokenRotateLambdaC07C2948 is TokenRotateLambda                                      
2024-09-27 11:29:30,802 | CDK Path for resource TokenRotateSchedulerPolicy3A235043 is ['MbxTokenRotateMapboxStack', 'TokenRotateSchedulerPolicy', 'Resource']                                           
2024-09-27 11:29:30,803 | CDK Path for resource TokenRotateLambdaTriggerF84E16B9 is ['MbxTokenRotateMapboxStack', 'TokenRotateLambdaTrigger', 'Resource', 'Default']                                    
2024-09-27 11:29:30,803 | CDK Path for resource TokenRotateLambdaTriggerCustomResourcePolicy0328249E is ['MbxTokenRotateMapboxStack', 'TokenRotateLambdaTrigger', 'CustomResourcePolicy', 'Resource']   
2024-09-27 11:29:30,804 | CDK Path for resource AWS679f53fac002430cb0da5b7982bd2287ServiceRoleC1EA0FF2 is ['MbxTokenRotateMapboxStack', 'AWS679f53fac002430cb0da5b7982bd2287', 'ServiceRole',           
'Resource']                                                                                                                                                                                             
2024-09-27 11:29:30,805 | Sam customer defined id is more priority than other IDs. Customer defined id for resource AWS679f53fac002430cb0da5b7982bd22872D164C4C is AWS679f53fac002430cb0da5b7982bd2287  
2024-09-27 11:29:30,806 | CDK Path for resource CDKMetadata is ['MbxTokenRotateMapboxStack', 'CDKMetadata', 'Default']                                                                                  
2024-09-27 11:29:30,807 | Unable to resolve property ACCESS_TOKEN_SECRET: OrderedDict([('Fn::Join', ['-', [OrderedDict([('Fn::Select', [0, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select', 
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'AccessTokenSecret6B182B02')])])])])])])])])]), OrderedDict([('Fn::Select', [1, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select',  
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'AccessTokenSecret6B182B02')])])])])])])])])]), OrderedDict([('Fn::Select', [2, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select',  
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'AccessTokenSecret6B182B02')])])])])])])])])])]])]). Leaving as is.                                                                           
2024-09-27 11:29:30,809 | Unable to resolve property CLIENT_TOKEN_SECRET: OrderedDict([('Fn::Join', ['-', [OrderedDict([('Fn::Select', [0, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select', 
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'ClientTokenSecret919470FA')])])])])])])])])]), OrderedDict([('Fn::Select', [1, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select',  
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'ClientTokenSecret919470FA')])])])])])])])])]), OrderedDict([('Fn::Select', [2, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select',  
[6, OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'ClientTokenSecret919470FA')])])])])])])])])])]])]). Leaving as is.                                                                           
2024-09-27 11:29:30,813 | Unable to resolve property DELETION_SECRET: OrderedDict([('Fn::Join', ['-', [OrderedDict([('Fn::Select', [0, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select', [6, 
OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'DeletionSecretA07AD565')])])])])])])])])]), OrderedDict([('Fn::Select', [1, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select', [6,     
OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'DeletionSecretA07AD565')])])])])])])])])]), OrderedDict([('Fn::Select', [2, OrderedDict([('Fn::Split', ['-', OrderedDict([('Fn::Select', [6,     
OrderedDict([('Fn::Split', [':', OrderedDict([('Ref', 'DeletionSecretA07AD565')])])])])])])])])])]])]). Leaving as is.                                                                                  
2024-09-27 11:29:30,816 | Unable to resolve property SEED_TOKEN: None. Leaving as is.                                                                                                                   
2024-09-27 11:29:30,817 | 13 resources found in the stack                                                                                                                                               
2024-09-27 11:29:30,817 | Found Lambda function with name='TokenRotateLambdaC07C2948' and CodeUri='TokenRotateLambdaC07C2948'                                                                           
2024-09-27 11:29:30,818 | --base-dir is not presented, adjusting uri TokenRotateLambdaC07C2948 relative to /Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build/template.yaml        
2024-09-27 11:29:30,819 | Found Lambda function with name='AWS679f53fac002430cb0da5b7982bd22872D164C4C' and CodeUri='AWS679f53fac002430cb0da5b7982bd22872D164C4C'                                       
2024-09-27 11:29:30,820 | --base-dir is not presented, adjusting uri AWS679f53fac002430cb0da5b7982bd22872D164C4C relative to                                                                            
/Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build/template.yaml                                                                                                                   
2024-09-27 11:29:31,255 | Found one Lambda function with name 'TokenRotateLambda'                                                                                                                       
2024-09-27 11:29:31,256 | Invoking index.handler (nodejs18.x)                                                                                                                                           
2024-09-27 11:29:31,257 | Loading AWS credentials from session with profile 'None'                                                                                                                      
2024-09-27 11:29:31,378 | Resolving code path. Cwd=/Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build,                                                                             
CodeUri=/Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build/TokenRotateLambdaC07C2948                                                                                               
2024-09-27 11:29:31,380 | Resolved absolute path to code is /Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build/TokenRotateLambdaC07C2948                                           
2024-09-27 11:29:31,380 | Resolving code path. Cwd=/Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build,                                                                             
CodeUri=/Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build/TokenRotateLambdaC07C2948                                                                                               
2024-09-27 11:29:31,381 | Resolved real code path to /Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build/TokenRotateLambdaC07C2948                                                  
2024-09-27 11:29:31,381 | Code /Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build/TokenRotateLambdaC07C2948 is not a zip/jar file                                                  
2024-09-27 11:29:31,382 | arn:aws:lambda:us-west-2:345057560386:layer:AWS-Parameters-and-Secrets-Lambda-Extension:4 is already cached. Skipping download                                                
2024-09-27 11:29:31,477 | Unknown 404 - Unable to check if base image is current.                                                                                                                       
                                                                                                                                                                                                        
Possible incompatible Docker engine clone employed. Consider `--skip-pull-image` for improved speed, the tradeoff being not running the latest image.                                                   
Building image.............................
2024-09-27 11:29:35,510 | Checking free port on 127.0.0.1:8578                                                                                                                                          
2024-09-27 11:29:35,522 | Using local image: samcli/lambda-nodejs:18-x86_64-a764cc4d3574aacc660cec553.                                                                                                  
                                                                                                                                                                                                        
2024-09-27 11:29:35,523 | Mounting /Users/billybryant/github/mapbox/mbx-token-rotate-lambda/.aws-sam/build/TokenRotateLambdaC07C2948 as /var/task:ro,delegated, inside runtime container                
2024-09-27 11:29:35,822 | Starting a timer for 3 seconds for function 'TokenRotateLambda'                                                                                                               
2024-09-27 11:29:35,823 | Getting lock for the key localhost-8578                                                                                                                                       
2024-09-27 11:29:35,823 | Waiting to retrieve the lock (localhost-8578) to start invocation                                                                                                             
START RequestId: 896f2ed8-7156-42b2-a99f-d911102dac31 Version: $LATEST
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 PARAMETERS_SECRETS_EXTENSION_LOG_LEVEL is debug. Log level set to debug.
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 DEBUG PARAMETERS_SECRETS_EXTENSION_CACHE_ENABLED is true.
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 DEBUG PARAMETERS_SECRETS_EXTENSION_CACHE_SIZE is 1000 objects.
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 DEBUG SECRETS_MANAGER_TTL is 5m0s
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 DEBUG SSM_PARAMETER_STORE_TTL is 5m0s.
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 DEBUG SECRETS_MANAGER_TIMEOUT_MILLIS is 0s.
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 DEBUG SSM_PARAMETER_STORE_TIMEOUT_MILLIS is 0s.
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 DEBUG PARAMETERS_SECRETS_EXTENSION_MAX_CONNECTIONS is 3.
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 DEBUG PARAMETERS_SECRETS_EXTENSION_HTTP_PORT is 2773.
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 INFO Systems Manager Parameter Store and Secrets Manager Lambda Extension 1.0.103
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 DEBUG Creating a new cache with size 1000
[AWS Parameters and Secrets Lambda Extension] 2024/09/27 18:29:36 INFO Serving on port 2773
qemu-x86_64-static: QEMU internal SIGSEGV {code=MAPERR, addr=0x20}
27 Sep 2024 18:29:37,634 [ERROR] (rapid) Init failed InvokeID= error=Runtime exited with error: signal: segmentation fault
27 Sep 2024 18:29:37,656 [ERROR] (rapid) Invoke failed error=ErrAgentNameCollision InvokeID=73a23bf3-065d-4eda-be06-997a4006babb
27 Sep 2024 18:29:37,659 [ERROR] (rapid) Invoke DONE failed: Sandbox.Failure
2024-09-27 11:29:37,502 | Failed to deserialize response from RIE, returning the raw response as is                                                                                                     

2024-09-27 11:29:38,523 | [Container state] OOMKilled False                                                                                                                                             
2024-09-27 11:29:38,784 | Cleaning all decompressed code dirs                                                                                                                                           
2024-09-27 11:29:38,787 | Telemetry endpoint configured to be https://aws-serverless-tools-telemetry.us-west-2.amazonaws.com/metrics                                                                    
2024-09-27 11:29:38,789 | Telemetry endpoint configured to be https://aws-serverless-tools-telemetry.us-west-2.amazonaws.com/metrics                                                                    
2024-09-27 11:29:38,790 | Unable to find Click Context for getting session_id.                                                                                                                          
2024-09-27 11:29:38,792 | Telemetry endpoint configured to be https://aws-serverless-tools-telemetry.us-west-2.amazonaws.com/metrics                                                                    

Expected result:

Expected the lambda function to invoke for debugging.

Additional environment details (Ex: Windows, Mac, Amazon Linux etc)

{
  "version": "1.125.0",
  "system": {
    "python": "3.8.20",
    "os": "macOS-14.6.1-arm64-arm-64bit"
  },
  "additional_dependencies": {
    "docker_engine": "5.0.3",
    "aws_cdk": "2.160.0 (build 7a8ae02)",
    "terraform": "1.5.7"
  },
  "available_beta_feature_env_vars": [
    "SAM_CLI_BETA_FEATURES",
    "SAM_CLI_BETA_BUILD_PERFORMANCE",
    "SAM_CLI_BETA_TERRAFORM_SUPPORT",
    "SAM_CLI_BETA_RUST_CARGO_LAMBDA"
  ]
}

I am also using Podman instead of docker:

podman info

podman info
host:
  arch: arm64
  buildahVersion: 1.35.4
  cgroupControllers:
  - cpu
  - io
  - memory
  - pids
  cgroupManager: systemd
  cgroupVersion: v2
  conmon:
    package: conmon-2.1.10-1.fc40.aarch64
    path: /usr/bin/conmon
    version: 'conmon version 2.1.10, commit: '
  cpuUtilization:
    idlePercent: 99.92
    systemPercent: 0.05
    userPercent: 0.03
  cpus: 4
  databaseBackend: sqlite
  distribution:
    distribution: fedora
    variant: coreos
    version: "40"
  eventLogger: journald
  freeLocks: 2045
  hostname: localhost.localdomain
  idMappings:
    gidmap:
    - container_id: 0
      host_id: 1000
      size: 1
    - container_id: 1
      host_id: 100000
      size: 1000000
    uidmap:
    - container_id: 0
      host_id: 502
      size: 1
    - container_id: 1
      host_id: 100000
      size: 1000000
  kernel: 6.8.8-300.fc40.aarch64
  linkmode: dynamic
  logDriver: journald
  memFree: 463388672
  memTotal: 2045435904
  networkBackend: netavark
  networkBackendInfo:
    backend: netavark
    dns:
      package: aardvark-dns-1.10.0-1.fc40.aarch64
      path: /usr/libexec/podman/aardvark-dns
      version: aardvark-dns 1.10.0
    package: netavark-1.10.3-3.fc40.aarch64
    path: /usr/libexec/podman/netavark
    version: netavark 1.10.3
  ociRuntime:
    name: crun
    package: crun-1.14.4-1.fc40.aarch64
    path: /usr/bin/crun
    version: |-
      crun version 1.14.4
      commit: a220ca661ce078f2c37b38c92e66cf66c012d9c1
      rundir: /run/user/502/crun
      spec: 1.0.0
      +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +LIBKRUN +WASM:wasmedge +YAJL
  os: linux
  pasta:
    executable: /usr/bin/pasta
    package: passt-0^20240426.gd03c4e2-1.fc40.aarch64
    version: |
      pasta 0^20240426.gd03c4e2-1.fc40.aarch64-pasta
      Copyright Red Hat
      GNU General Public License, version 2 or later
        <https://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
      This is free software: you are free to change and redistribute it.
      There is NO WARRANTY, to the extent permitted by law.
  remoteSocket:
    exists: true
    path: /run/user/502/podman/podman.sock
  rootlessNetworkCmd: ""
  security:
    apparmorEnabled: false
    capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
    rootless: true
    seccompEnabled: true
    seccompProfilePath: /usr/share/containers/seccomp.json
    selinuxEnabled: true
  serviceIsRemote: true
  slirp4netns:
    executable: /usr/bin/slirp4netns
    package: slirp4netns-1.2.2-2.fc40.aarch64
    version: |-
      slirp4netns version 1.2.2
      commit: 0ee2d87523e906518d34a6b423271e4826f71faf
      libslirp: 4.7.0
      SLIRP_CONFIG_VERSION_MAX: 4
      libseccomp: 2.5.3
  swapFree: 0
  swapTotal: 0
  uptime: 19h 47m 25.00s (Approximately 0.79 days)
  variant: v8
plugins:
  authorization: null
  log:
  - k8s-file
  - none
  - passthrough
  - journald
  network:
  - bridge
  - macvlan
  - ipvlan
  volume:
  - local
registries:
  search:
  - docker.io
store:
  configFile: /var/home/core/.config/containers/storage.conf
  containerStore:
    number: 2
    paused: 0
    running: 0
    stopped: 2
  graphDriverName: overlay
  graphOptions: {}
  graphRoot: /var/home/core/.local/share/containers/storage
  graphRootAllocated: 106769133568
  graphRootUsed: 17794359296
  graphStatus:
    Backing Filesystem: xfs
    Native Overlay Diff: "true"
    Supports d_type: "true"
    Supports shifting: "false"
    Supports volatile: "true"
    Using metacopy: "false"
  imageCopyTmpDir: /var/tmp
  imageStore:
    number: 76
  runRoot: /run/user/502/containers
  transientStore: false
  volumePath: /var/home/core/.local/share/containers/storage/volumes
version:
  APIVersion: 5.0.3
  Built: 1715299200
  BuiltTime: Thu May  9 17:00:00 2024
  GitCommit: ""
  GoVersion: go1.22.2
  Os: linux
  OsArch: linux/arm64
  Version: 5.0.3

[hawflau]

Hi @billyjbryant thanks for raising the issue. As investigated in the other issue you quoted, it seems like an issue with RIE. I'll check with RIE Team again. Meanwhile, arn:aws:lambda:us-west-2:345057560386:layer:AWS-Parameters-and-Secrets-Lambda-Extension:4 seems to be quite old according to https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-integration-lambda-extensions.html#ps-integration-lambda-extensions-add. Could you please try a newer layer version of the extension to see if the same issue occurs?

[hawflau]

@billyjbryant I checked with RIE Team. One issue they saw that returned the same error code was that the architecture of extension does not match the architecture where the RIE container is ran.

For your case, I noticed you were using Apple Silicon, but the extension is probably x86. Could you please try arn:aws:lambda:us-west-2:345057560386:layer:AWS-Parameters-and-Secrets-Lambda-Extension-Arm64:12

[hnnasit]

Closing the issue as it has been stale for a while. Please open a new issue if you still have questions or concerns.

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.