Auto-approve AMI builder cleanup

README.md

@@ -31,7 +31,8 @@ boot generation that expects `/nix`, and powers off.
 
 After the instance is stopped, `publish-ami.sh` creates the final AMI from the
 stopped instance, tags the AMI and snapshots, writes `artifact.json`, and then
-destroys the temporary builder resources. Use `--keep-builder` when debugging.
+destroys the temporary builder resources without a confirmation prompt. Use
+`--keep-builder` when debugging.
 
 The OpenTofu state in this directory owns only temporary builder resources.
 The published AMI and its snapshots are created by the script and are not in

publish-ami.sh

@@ -301,6 +301,7 @@ jq -n \
 
 if [ "$keep_builder" = false ]; then
   tofu destroy \
+    -auto-approve \
     -var "aws_region=$aws_region" \
     -var "name=$name" \
     -var "system=$system" \