Packer

# macOS
brew install packer

packer version
# timestamp,target,type,data
packer -machine-readable version

packer -autocomplete-install

packer build template.json

# console
# 实验变量替换
# help exit variables
packer console my_template.json
echo {{timestamp}} | packer console

# hcl2 console - 1.6+
packer console folder/
packer console file.pkr.hcl
echo "1 + 5" | packer console --config-type=hcl2
packer console --config-type=hcl2

packer fix old.json > new.json
packer inspect template.json
packer validate my-template.json

# 使用 JQ 删除评论
jq 'walk(if type == "object" then del(._comment) else . end)' commented_template.json > uncommented_template.json

# 手动安装
# https://packer.io/downloads.html
ver=$(curl -sfL https://api.github.com/repos/hashicorp/packer/releases/latest | jq .tag_name -r)
ver=${ver##v}
curl -LOC- https://releases.hashicorp.com/packer/${ver}/packer_${ver}_linux_amd64.zip

# 全局定义可复用的 builder
source "docker" "base" {
  image = "wener/base"
  discard = true
  pull = false
}

# 本地变量
locals {
    # 直接引用
    wee = local.baz
    # 字符串中替换
    baz = "Foo is '${var.foo}' but not '${local.wee}'"
}

# 变量定义
variable "foo" {
    type = string
    default = "the default value of the `foo` variable"
    description = "description of the `foo` variable"
}

# 构建
build {
  name = "test-build"
  # 引用
  source "docker.base" {}
  # 多个
  # source = [ "source.docker.first", "source.docker.second" ]

  provisioner "shell" {
    # 指定 source 执行
    only = ["source.docker.base"]
    # 等待指定时间
    pause_before = "10s"
    max_retries = 5
    timeout = "5m"

    inline = [ "echo Tesing" ]
  }

  post-processor "shell-local" {
    inline = ["echo Down working"]
  }

  post-processor "checksum" {
    checksum_types = [ "md5", "sha512" ]
    keep_input_artifact = true
    only = ["source.amazon-ebs.example"]
  }
}

{
  "_comment": "This is a comment",
  // 必须 - 定义一个或多个 builder
  "builders": [{}],
  "description": "",
  // packer 最小版本
  "min_packer_version": "",
  // 后处理步骤
  "post-processors": [{}],
  // 安装配置和包的步骤
  "provisioners": [{}],
  // 错误时执行
  "error-cleanup-provisioner": {
    "type": "shell-local",
    "inline": ["echo 'rubber ducky'> ducky.txt"]
  },
  // 变量定义
  "variables": {
    "my_secret": "{{env `MY_SECRET`}}",
    "not_a_secret": "plaintext",
    "foo": "bar"
  },
  // 定义敏感变量
  "sensitive-variables": ["my_secret", "foo"]
}

{
  "type": "shell-local",
  "command": "if [ ! -z \"{{user `do_nexpose_scan`}}\" ]; then python -u trigger_nexpose_scan.py; fi"
}

{
  "variables": {
    "home": "{{env `HOME`}}"
  },
  "builders": [
    {
      "type": "google",
      "account_file": "{{ user `home` }}/.secrets/gcp-{{ user `env` }}.json"
    }
  ]
}

{
  "communicator": "ssh",
  "ssh_username": "myuser",
  "pause_before_connecting": "10m"
}

{
  "builders": [
    {
      "type": "docker",
      // 基础镜像
      "image": "ubuntu",
      // 三选一 commit, discard, export_path
      // 提交
      "commit": true,
      // 丢弃
      "discard": true,
      // 导出到文件
      "export_path": "image.tar"
    }
  ],
  "post-processors": [
    [
      {
        "type": "docker-import",
        "repository": "hashicorp/packer",
        "tag": "0.7"
      },
      "docker-push"
    ]
  ]
}

-cdrom /xxx/packer_cache/xxx.iso
-name packer-alpine
-vnc 127.0.0.1:92
-boot once=d
-netdev user,id=user.0,hostfwd=tcp::4287-:22
-device virtio-net,netdev=user.0
# 挂载为 /dev/vda
-drive file=output-alpine/packer-alpine,if=virtio,cache=writeback,discard=ignore,format=qcow2
-m 512M
-machine type=pc,accel=hvf