feat(templates): add amazonlinux-2023 distro

This commit adds a simple template for the Amazon Linux 2023 operating
system's 2025-12-08 version. The OS is scheduled to release every two weeks,
therefore, a new script called hack/update-template-amazonlinux-2023.sh
is added next to the other template updater scripts.

Find the latest images here:
cdn.amazonlinux.com/al2023/os-images/latest/

This patch:
- Adds amazonlinux-2023 template with 2025-12-08 release by default
  (fallback).
- Resolves mount issues on AL2023 with host OS.
- Introduces a script on VM init where it updates the system to latest
release.
- Adds update-template-amazonlinux-2023.sh script to help maintainers
automatically update the verison.

Signed-off-by: Gyokhan Kochmarla <[email protected]>

Author: electricalgorithm

hack/update-template-amazonlinux.sh

@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+
+# SPDX-FileCopyrightText: Copyright The Lima Authors
+# SPDX-License-Identifier: Apache-2.0
+
+set -eu -o pipefail
+
+# check if the script is executed or sourced
+# shellcheck disable=SC1091
+if [[ ${BASH_SOURCE[0]} == "${0}" ]]; then
+	scriptdir=$(dirname "${BASH_SOURCE[0]}")
+	# shellcheck source=./cache-common-inc.sh
+	. "${scriptdir}/cache-common-inc.sh"
+
+	# shellcheck source=/dev/null
+	. "${scriptdir}/update-template.sh"
+else
+	# this script is sourced
+	if [[ -v SUPPORTED_DISTRIBUTIONS ]]; then
+		SUPPORTED_DISTRIBUTIONS+=("amazonlinux")
+	else
+		declare -a SUPPORTED_DISTRIBUTIONS=("amazonlinux")
+	fi
+
+	function amazonlinux_cache_key_for_image_kernel() {
+		local location=$1
+		case "${location}" in
+		https://cdn.amazonlinux.com/al2023/os-images/*) ;;
+		*) return 1 ;;
+		esac
+		# Create a cache key based on the location
+		# We don't cache based on the resolved version because `update-template.sh` loop structure
+		# and cache key usage implies one-to-one mapping if possible, but here we just return a unique key for the input.
+		echo "amazonlinux_${location}"
+	}
+
+	function amazonlinux_image_entry_for_image_kernel() {
+		local location=$1
+		case "${location}" in
+		https://cdn.amazonlinux.com/al2023/os-images/*) ;;
+		*) return 1 ;;
+		esac
+
+		local latest_url
+		# Get the redirect URL
+		latest_url=$(curl -Ls -o /dev/null -w %{url_effective} https://cdn.amazonlinux.com/al2023/os-images/latest/)
+		local version
+		version=$(basename "${latest_url}")
+
+		local arch
+		if [[ "${location}" == *"x86_64"* ]]; then
+			arch="x86_64"
+		elif [[ "${location}" == *"aarch64"* ]]; then
+			arch="aarch64"
+		else
+			error_exit "Unknown arch for amazonlinux location: ${location}"
+		fi
+
+		local folder="kvm"
+		[[ "${arch}" == "aarch64" ]] && folder="kvm-arm64"
+
+		local base_url="https://cdn.amazonlinux.com/al2023/os-images/${version}/${folder}"
+		local checksums
+		checksums=$(download_to_cache "${base_url}/SHA256SUMS")
+
+		local filename digest line
+		# Find the qcow2 file in SHA256SUMS
+		line=$(grep "\.qcow2$" "${checksums}" | head -n 1)
+		[[ -n ${line} ]] || error_exit "No qcow2 image found in ${base_url}/SHA256SUMS"
+		
+		digest=$(echo "${line}" | awk '{print "sha256:"$1}')
+		filename=$(echo "${line}" | awk '{print $2}')
+		local new_location="${base_url}/${filename}"
+
+		json_vars location="${new_location}" arch="${arch}" digest="${digest}"
+	}
+
+	return 0
+fi

hack/update-template.sh

@@ -170,6 +170,8 @@ if [[ ${BASH_SOURCE[0]} == "${0}" ]]; then
 	. "${scriptdir}/update-template-fedora.sh"
 	# shellcheck source=./update-template-opensuse.sh
 	. "${scriptdir}/update-template-opensuse.sh"
+	# shellcheck source=./update-template-amazonlinux.sh
+	. "${scriptdir}/update-template-amazonlinux.sh"
 else
 	# this script is sourced
 	return 0

pkg/cidata/cidata.TEMPLATE.d/boot/04-amazonlinux-virtiofs.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+
+# SPDX-FileCopyrightText: Copyright The Lima Authors
+# SPDX-License-Identifier: Apache-2.0
+
+set -eux -o pipefail
+
+# Workaround for Amazon Linux 2023
+if [ -f /etc/os-release ] && grep -q "Amazon Linux" /etc/os-release; then
+	# 1. Create missing mount.virtiofs helper
+	if [ ! -e /sbin/mount.virtiofs ]; then
+		cat >/sbin/mount.virtiofs <<'EOF'
+#!/bin/sh
+exec mount -i -t virtiofs "$@"
+EOF
+		chmod +x /sbin/mount.virtiofs
+	fi
+fi

templates/amazonlinux-2023.yaml

@@ -0,0 +1,35 @@
+minimumLimaVersion: 2.0.0
+
+images:
+- location: "https://cdn.amazonlinux.com/al2023/os-images/2023.9.20251208.0/kvm/al2023-kvm-2023.9.20251208.0-kernel-6.1-x86_64.xfs.gpt.qcow2"
+  arch: "x86_64"
+  digest: "sha256:c91f244483d9a460869738f7fcfb5e37eb402aec8582d10456cf0c108e1a4d4c"
+- location: "https://cdn.amazonlinux.com/al2023/os-images/2023.9.20251208.0/kvm-arm64/al2023-kvm-2023.9.20251208.0-kernel-6.1-arm64.xfs.gpt.qcow2"
+  arch: "aarch64"
+  digest: "sha256:7aef1f189076a0416cd16062bbf7e0928d81061e68411cab8904447e1bd5eafd"
+
+provision:
+- mode: system
+  script: |
+    #!/bin/bash
+    set -eux -o pipefail
+ 
+    # Lima seemingly uses 'mount0' tag on this setup but Guest Agent expects path.
+    MOUNT_POINT="/mnt/host"
+    
+    if ! mountpoint -q "${MOUNT_POINT}"; then
+      mkdir -p "${MOUNT_POINT}"
+      mount -t virtiofs mount0 "${MOUNT_POINT}" || true
+    fi
+- mode: system
+  script: |
+    #!/bin/bash
+    set -eux -o pipefail
+    # Update to the latest release on the first boot
+    if [ ! -f /etc/lima-al2023-updated ]; then
+      dnf upgrade -y --releasever=latest
+    fi
+
+mounts:
+- location: "~"
+  mountPoint: "/mnt/host"

templates/amazonlinux.yaml

@@ -0,0 +1 @@
+amazonlinux-2023.yaml