ECR and Processor Image

The processor Lambda processor Lambda
Processor Lambda container — runs PyTECGg calibration per SQS message; adopted when a Batch on Fargate parallel-execution quota increase was rejected. Image from `ghcr.io/platformfuzz/tec-processor-image` mirrored to ECR. runs as a container image sourced from ghcr.io/platformfuzz/tec-processor-image. Terraform Terraform
HashiCorp Terraform — provisions all platform infrastructure through five modules in `terraform/`. creates an ECR ECR
Amazon Elastic Container Registry — stores the mirrored processor Lambda container image at deploy time. repository; you mirror the image before applying the full processing stack.

Step 1 — Create the ECR repository

From the demo repo root, target only the ECR resource:

terraform -chdir=terraform apply -target=module.processing[0].aws_ecr_repository.processor_image

Type yes when prompted. This creates the tec-processor-image ECR repository without deploying the processor Lambda yet.

Step 2 — Mirror the image from GHCR to ECR

./scripts/sync-processor-image.sh

By default the script syncs the latest tag, which must match processor_image_tag in Terraform (default: latest).

To use a specific tag:

./scripts/sync-processor-image.sh <tag>

Note

The tag must resolve to a single-platform Docker v2 or OCI manifest — not a multi-arch index. The script validates the manifest type before pushing.

Verify the manifest (optional)

Before mirroring, confirm the GHCR tag is single-platform:

docker manifest inspect ghcr.io/platformfuzz/tec-processor-image:latest

Prerequisites

• Docker with buildx support (docker buildx version)
• AWS CLI credentials with ECR push permissions
• ECR repository created in Step 1

Use a different image tag

./scripts/sync-processor-image.sh <tag>
terraform -chdir=terraform apply -var="processor_image_tag=<tag>"

Troubleshooting

Symptom	Fix
ECR push denied	Confirm AWS credentials and aws ecr get-login-password region
Multi-arch manifest rejected	Pick a single-platform tag or inspect with docker manifest inspect
Processor Lambda fails on apply	Ensure tag in ECR matches processor_image_tag variable

See Common Issues — Processor Lambda for post-deploy image problems.

Next step

Continue to Staged Apply once the image is in ECR.