EC2 Ubuntu 18.04 LTS Ephemeral disk format and swapfile

ephemeraldisk.service

[Unit]
Description=Ephemeral disk and swap setup script

[Service]
ExecStart=/usr/local/sbin/mount-instance-store.sh

[Install]
WantedBy=multi-user.target

mount-instance-store.sh

#!/bin/bash
# /dev/nvme1n1 is ephemeral SSD
yes | mkfs.ext4 -E nodiscard -m0 /dev/nvme1n1
[ -d /ssd ] && echo "/ssd mount point exists" || mkdir /ssd
mount -o discard /dev/nvme1n1 /ssd
chown ubuntu:ubuntu /ssd
[ -f /swapfile ] && swapoff /swapfile && rm /swapfile || echo "/swapfile not found - skipping removal"
# Create a new swap file of the desired size.
dd if=/dev/zero of=/ssd/swapfile bs=1M count=8192
# Assign it read/write permissions for root only (not strictly needed, but it tightens security)
chmod 600 /ssd/swapfile
# Format the file as swap:
mkswap /ssd/swapfile
# Want to activate swap for the current session:
swapon /ssd/swapfile

setup.sh

sudo apt-get update
sudo apt-get upgrade
sudo apt-get install -y fail2ban
sudo systemctl enable fail2ban
sudo systemctl start fail2ban

sudo cp mount-instance-store.sh /usr/local/sbin/mount-instance-store.sh
sudo chmod +x /usr/local/sbin/mount-instance-store.sh

sudo cp ephemeraldisk.service /etc/systemd/system/ephemeraldisk.service
sudo systemctl enable ephemeraldisk