1
packer {
2
  required_plugins {
3
    qemu = {
4
      version = "~> 1"
5
      source  = "github.com/hashicorp/qemu"
6
    }
7
    ansible = {
8
      version = "~> 1"
9
      source  = "github.com/hashicorp/ansible"
10
    }
11
  }
12
}
13

14
# --- 変数の宣言
15

16
# 同一名でvariableとlocalを指定しているのは変数のデフォルト値として関数を使うため
17
# cf. https://github.com/hashicorp/packer/issues/9430
18
variable "image_id" {
19
  type = string
20
  default = null
21
}
22

23
local "image_id" {
24
  expression = var.image_id != null ? var.image_id : formatdate("YYYYMMDDhhmmss",timestamp())
25
}
26

27
variable "build_production" {
28
  type = bool
29
  default = false
30
}
31

32
# --- KVMイメージ用Builderの設定
33
source "qemu" "ubuntu-2404-kubernetes" {
34
  output_directory = "./image-repository-local/ubuntu-2404-kubernetes-${local.image_id}"
35

36
  iso_url          = "https://cloud-images.ubuntu.com/noble/20240710/noble-server-cloudimg-amd64.img"
37
  iso_checksum     = "5d482ff93a2ba3cf7e609551733ca238ed81a6afdaafcdce53140546b09a6195"
38
  headless         = true
39
  vm_name          = "${source.name}.qcow2"
40
  cpus             = 2
41
  memory           = 2048
42
  disk_size        = "20G"
43
  disk_image       = true
44
  format           = "qcow2"
45
  accelerator      = "kvm"
46
  ssh_username     = "packer"
47
  ssh_password     = "password"
48
  ssh_timeout      = "20m"
49
  boot_wait        = "10s"
50
  cd_label = "cidata"
51
  cd_content = {
52
    "meta-data"      = ""
53
    "vendor-data"    = ""
54
    "network-config" = <<EOF
55
      network:
56
      version: 2
57
      renderer: networkd
58
      ethernets:
59
        mainif:
60
          match:
61
            driver: "virt*"
62
          dhcp4: true
63
          dhcp6: true
64
    EOF
65
    "user-data"      = <<EOF
66
      #cloud-config
67
      ssh_pwauth: true
68
      users:
69
        - name: packer
70
          groups: sudo
71
          plain_text_passwd: password
72
          lock_passwd: false
73
          sudo: ALL=(ALL) NOPASSWD:ALL
74
    EOF
75
  }
76
}
77

78
# --- 各種Provisioner設定によって実際にイメージをビルド
79
build {
80
  dynamic "source" {
81
    for_each = var.build_production ? ["production", "development"] : ["development"]
82
    labels = ["qemu.ubuntu-2404-kubernetes"]
83

84
    content {
85
      name = source.value
86
    }
87
  }
88

89
  # cloud-initによる初期化が終了するのを待機
90
  provisioner "shell" {
91
    execute_command  = "sudo sh -c '{{ .Vars }} {{ .Path }}'"
92
    valid_exit_codes = [0, 2]
93
    inline = [
94
      "cloud-init status --wait",
95
    ]
96
  }
97

98
  # それぞれの環境に対し動的に変数を読み込んでAnsibleプレイブックを実行
99
  provisioner "ansible" {
100
    playbook_file = "./ansible-provisioner/kubernetes-node.yaml"
101
    ansible_env_vars = [
102
      "ANSIBLE_ROLES_PATH=../roles"
103
      ]
104
    extra_arguments = [
105
      "--extra-vars",
106
      "@ansible-provisioner/var-${source.name}.yaml"
107
    ]
108
  }
109

110
  # イメージビルド用の一時情報を消去しイメージ起動時にcloud-initによる設定を可能にする
111
  provisioner "shell" {
112
    execute_command = "sudo sh -c '{{ .Vars }} {{ .Path }}'"
113
    inline = [
114
      "rm /etc/netplan/50-cloud-init.yaml",
115
      "rm /etc/sudoers.d/90-cloud-init-users",
116
      "/usr/bin/truncate --size 0 /etc/machine-id",
117
      "rm -r /var/lib/cloud /var/lib/dbus/machine-id ",
118
      # Shell provisioner is responsible for deleting packer user
119
      "sed -i '/^packer/d' /etc/passwd",
120
      "sed -i '/^packer/d' /etc/shadow",
121
      "rm -rf /home/packer",
122
      "/bin/sync",
123
      "/sbin/fstrim -v /"
124
    ]
125
  }
126
}

1
---
2
- name: Apply common settings
3
  hosts: default
4
  tasks:
5
    - ansible.builtin.import_role: name=common
6
    - ansible.builtin.import_role: name=vault-ssh-otp
7
    - ansible.builtin.import_role: name=kubernetes_common
8
    - name: Delete information of packer user
9
      # Error occurs when deleting user itself using ansible.
10
      # So, Shell provisioner is responsible for deleting user.
11
      block:
12
        - name: Delete packer group from /etc/group
13
          ansible.builtin.lineinfile:
14
            path: /etc/group
15
            regexp: '^packer.*'
16
            state: absent
17
          become: true
18

19
        - name: Delete packer group from /etc/gshadow
20
          ansible.builtin.lineinfile:
21
            path: /etc/gshadow
22
            regexp: '^packer.*'
23
            state: absent
24
          become: true
25

26
        - name: Delete packer user from /etc/subuid
27
          ansible.builtin.lineinfile:
28
            path: /etc/subuid
29
            regexp: '^packer.*'
30
            state: absent
31
          become: true
32

33
        - name: Delete packer user from /etc/subgid
34
          ansible.builtin.lineinfile:
35
            path: /etc/subgid
36
            regexp: '^packer.*'
37
            state: absent
38
          become: true
39

40
        - name: Remove packer user from sudo group in /etc/group
41
          ansible.builtin.lineinfile:
42
            path: /etc/group
43
            regexp: '^(sudo.*)packer'
44
            backrefs: true
45
            line: '\1'
46
          become: true
47

48
        - name: Remove packer user from sudo group in /etc/gshadow
49
          ansible.builtin.lineinfile:
50
            path: /etc/gshadow
51
            regexp: '^(sudo.*)packer'
52
            backrefs: true
53
            line: '\1'
54
          become: true

1
stage: development
2
kubernetes_major_minor_version: 1.29
3
kubernetes_patch_version: 9
4
cilium_version: 0.16.8
5

6
# var-production.yaml
7
stage: production
8
kubernetes_major_minor_version: 1.28
9
kubernetes_patch_version: 2
10
cilium_version: 0.15.8