From 813ef66cb021580f173be8b11c662ca778e71e22 Mon Sep 17 00:00:00 2001
From: "Timothy J. Aveni" <tja@berkeley.edu>
Date: Sat, 20 Jun 2026 11:31:29 -0700
Subject: [PATCH] Tag AMI root snapshots during publish

---
 publish-ami.sh | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/publish-ami.sh b/publish-ami.sh
index a173b15..cc769fd 100755
--- a/publish-ami.sh
+++ b/publish-ami.sh
@@ -208,6 +208,16 @@ root_snapshot_id="$(
     --output text
 )"
 
+aws ec2 create-tags \
+  --region "$aws_region" \
+  --resources "$root_snapshot_id" \
+  --tags \
+    "Key=Name,Value=${name}-root-${architecture}-${input_hash:0:12}" \
+    "Key=InputHash,Value=${input_hash}" \
+    "Key=BuilderGitRev,Value=${builder_git_rev}" \
+    "Key=FlakeLockRev,Value=${flake_lock_rev}" \
+    "Key=NixosSystemClosure,Value=${nixos_system_closure}"
+
 run_args=(
   --region "$aws_region"
   --image-id "$root_ami_id"