Permissions trouble on AWS Lambda, can’t spawn child process

Question 1

So I’ve created this nice little lambda, which runs great locally, however not so much when actually out in the wild.

The lambda takes an event, with html in the event source, converts that html to a PDF (using the html-pdf node module), passes that pdf to an s3 bucket, and then hands back a signed url that expires in 60 seconds.

Or at least that is what ought to happen (again, works locally). When testing on Lambda, I get the following error:

{
   "errorMessage": "spawn EACCES",
   "errorType": "Error",
   "stackTrace": [
       "exports._errnoException (util.js:870:11)",
       "ChildProcess.spawn (internal/child_process.js:298:11)",
       "Object.exports.spawn (child_process.js:362:9)",
       "PDF.PdfExec [as exec] (/var/task/node_modules/html-pdf/lib/pdf.js:87:28)",
       "PDF.PdfToFile [as toFile] (/var/task/node_modules/html-pdf/lib/pdf.js:83:8)",
       "/var/task/index.js:72:43",
       "Promise._execute (/var/task/node_modules/bluebird/js/release/debuggability.js:272:9)",
       "Promise._resolveFromExecutor (/var/task/node_modules/bluebird/js/release/promise.js:473:18)",
       "new Promise   (/var/task/node_modules/bluebird/js/release/promise.js:77:14)",
       "createPDF (/var/task/index.js:71:19)",
       "main (/var/task/index.js:50:5)"
  ]
}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

{

"errorMessage": "spawn EACCES",

"errorType": "Error",

"stackTrace": [

"exports._errnoException (util.js:870:11)",

"ChildProcess.spawn (internal/child_process.js:298:11)",

"Object.exports.spawn (child_process.js:362:9)",

"PDF.PdfExec [as exec] (/var/task/node_modules/html-pdf/lib/pdf.js:87:28)",

"PDF.PdfToFile [as toFile] (/var/task/node_modules/html-pdf/lib/pdf.js:83:8)",

"/var/task/index.js:72:43",

"Promise._execute (/var/task/node_modules/bluebird/js/release/debuggability.js:272:9)",

"Promise._resolveFromExecutor (/var/task/node_modules/bluebird/js/release/promise.js:473:18)",

"new Promise (/var/task/node_modules/bluebird/js/release/promise.js:77:14)",

"createPDF (/var/task/index.js:71:19)",

"main (/var/task/index.js:50:5)"

]

}

Here’s the code itself (not compiled, there’s a handy gulp task for that)

if(typeof regeneratorRuntime === 'undefined') {
    require("babel/polyfill")
}

import fs from 'fs'
import pdf from 'html-pdf'
import md5 from 'md5'
import AWS from 'aws-sdk'
import Promise from 'bluebird'
import moment from 'moment'

const tempDir = '/tmp'
const config = require('./config')
const s3 = new AWS.S3()

export const main = (event, context) => {
    console.log("Got event: ", event)

    AWS.config.update({
        accessKeyId: config.awsKey,
        secretAccessKey: config.awsSecret,
        region: 'us-east-1'
    })

    const filename = md5(event.html) + ".pdf"

    createPDF(event.html, filename).then(function(result) {
        uploadToS3(filename, result.filename).then(function(result) {
            getOneTimeUrl(filename).then(function(result) {
                return context.succeed(result)
            }, function(err) {
                console.log(err)
                return context.fail(err)
            })
        }, function(err) {
            console.log(err)
            return context.fail(err)
        })
    }, function(err) {
        console.log(err)
        return context.fail(err)
    })
}

const createPDF = (html, filename) => {
    console.log("Creating PDF")
    var promise = new Promise(function(resolve, reject) {
        pdf.create(html).toFile(filename, function(err, res) {
            if (err) {
                reject(err)
            } else {
                resolve(res)
            }
        })
    })
    return promise
}

const uploadToS3 = (filename, filePath) => {
    console.log("Pushing to S3")
    var promise = new Promise(function(resolve, reject) {

        var fileToUpload = fs.createReadStream(filePath)
        var expiryDate = moment().add(1, 'm').toDate()

        var uploadParams = {
            Bucket: config.pdfBucket,
            Key: filename,
            Body: fileToUpload
        }

        s3.upload(uploadParams, function(err, data) {
            if(err) {
                reject(err)
            } else {
                resolve(data)
            }
        })
    })
    return promise
}

const getOneTimeUrl = (filename) => {
    var promise = new Promise(function(resolve, reject) {
        var params = {
            Bucket: config.pdfBucket,
            Key: filename,
            Expires: 60
        }

        s3.getSignedUrl('getObject', params, function(err, url) {
            if (err) {
                reject(err)
            } else {
                resolve(url)
            }
        })
    })
    return promise
}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

if(typeof regeneratorRuntime === 'undefined') {

require("babel/polyfill")

}

import fs from 'fs'

import pdf from 'html-pdf'

import md5 from 'md5'

import AWS from 'aws-sdk'

import Promise from 'bluebird'

import moment from 'moment'

const tempDir = '/tmp'

const config = require('./config')

const s3 = new AWS.S3()

export const main = (event, context) => {

console.log("Got event: ", event)

AWS.config.update({

accessKeyId: config.awsKey,

secretAccessKey: config.awsSecret,

region: 'us-east-1'

})

const filename = md5(event.html) + ".pdf"

createPDF(event.html, filename).then(function(result) {

uploadToS3(filename, result.filename).then(function(result) {

getOneTimeUrl(filename).then(function(result) {

return context.succeed(result)

}, function(err) {

console.log(err)

return context.fail(err)

})

}, function(err) {

console.log(err)

return context.fail(err)

})

}, function(err) {

console.log(err)

return context.fail(err)

})

}

const createPDF = (html, filename) => {

console.log("Creating PDF")

var promise = new Promise(function(resolve, reject) {

pdf.create(html).toFile(filename, function(err, res) {

if (err) {

reject(err)

} else {

resolve(res)

}

})

return promise

}

const uploadToS3 = (filename, filePath) => {

console.log("Pushing to S3")

var promise = new Promise(function(resolve, reject) {

var fileToUpload = fs.createReadStream(filePath)

var expiryDate = moment().add(1, 'm').toDate()

var uploadParams = {

Bucket: config.pdfBucket,

Key: filename,

Body: fileToUpload

}

s3.upload(uploadParams, function(err, data) {

if(err) {

reject(err)

} else {

resolve(data)

}

})

return promise

}

const getOneTimeUrl = (filename) => {

var promise = new Promise(function(resolve, reject) {

var params = {

Bucket: config.pdfBucket,

Key: filename,

Expires: 60

}

s3.getSignedUrl('getObject', params, function(err, url) {

if (err) {

reject(err)

} else {

resolve(url)

}

})

return promise

}

Seems like a problem within html-pdf. I thought it might be a problem with PhantomJS (which html-pdf depends on) due to some reading I did here: https://engineering.fundingcircle.com/blog/2015/04/09/aws-lambda-for-great-victory/ , however, since Lambda has bumped the max zip size to 50mb, I don’t have a problem uploading the binary.

Any thoughts?

Question 2

html-pdf uses phantomjs under the hood, which needs to compile some binaries when being installed. I guess your problem is that you are deploying those locally compiled binaries but Lambda needs the binaries compiled on Amazon Linux.

You can solve this problem by building your deploy package on an EC2 instance that is running Amazon Linux and then e.g. directly deploy it from there like it is explained in this tutorial.

Also check out this answer on a similar problem.

Permissions trouble on AWS Lambda, can’t spawn child process

Question:

Answer:

Leave a Reply Cancel reply