iSharkFly-Docs
/
packer-cn
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
packer-cn/builder/jdcloud/step_config_credentials.go

75 lines
2.5 KiB
Go
Raw Normal View History

Rewrite all files, remove sensitive information
2019-08-09 03:00:23 -04:00
package jdcloud
import (
"context"
"fmt"
build using HCL2 (#8423) This follows #8232 which added the code to generate the code required to parse HCL files for each packer component. All old config files of packer will keep on working the same. Packer takes one argument. When a directory is passed, all files in the folder with a name ending with “.pkr.hcl” or “.pkr.json” will be parsed using the HCL2 format. When a file ending with “.pkr.hcl” or “.pkr.json” is passed it will be parsed using the HCL2 format. For every other case; the old packer style will be used. ## 1. the hcl2template pkg can create a packer.Build from a set of HCL (v2) files I had to make the packer.coreBuild (which is our one and only packer.Build ) a public struct with public fields ## 2. Components interfaces get a new ConfigSpec Method to read a file from an HCL file. This is a breaking change for packer plugins. a packer component can be a: builder/provisioner/post-processor each component interface now gets a `ConfigSpec() hcldec.ObjectSpec` which allows packer to tell what is the layout of the hcl2 config meant to configure that specific component. This ObjectSpec is sent through the wire (RPC) and a cty.Value is now sent through the already existing configuration entrypoints: Provisioner.Prepare(raws ...interface{}) error Builder.Prepare(raws ...interface{}) ([]string, error) PostProcessor.Configure(raws ...interface{}) error close #1768 Example hcl files: ```hcl // file amazon-ebs-kms-key/run.pkr.hcl build { sources = [ "source.amazon-ebs.first", ] provisioner "shell" { inline = [ "sleep 5" ] } post-processor "shell-local" { inline = [ "sleep 5" ] } } // amazon-ebs-kms-key/source.pkr.hcl source "amazon-ebs" "first" { ami_name = "hcl2-test" region = "us-east-1" instance_type = "t2.micro" kms_key_id = "c729958f-c6ba-44cd-ab39-35ab68ce0a6c" encrypt_boot = true source_ami_filter { filters { virtualization-type = "hvm" name = "amzn-ami-hvm-????.??.?.????????-x86_64-gp2" root-device-type = "ebs" } most_recent = true owners = ["amazon"] } launch_block_device_mappings { device_name = "/dev/xvda" volume_size = 20 volume_type = "gp2" delete_on_termination = "true" } launch_block_device_mappings { device_name = "/dev/xvdf" volume_size = 500 volume_type = "gp2" delete_on_termination = true encrypted = true } ami_regions = ["eu-central-1"] run_tags { Name = "packer-solr-something" stack-name = "DevOps Tools" } communicator = "ssh" ssh_pty = true ssh_username = "ec2-user" associate_public_ip_address = true } ```
2019-12-17 05:25:56 -05:00
"io/ioutil"
remove sdk
2020-12-17 16:29:25 -05:00
"github.com/hashicorp/packer-plugin-sdk/multistep"
packersdk "github.com/hashicorp/packer-plugin-sdk/packer"
Rewrite all files, remove sensitive information
2019-08-09 03:00:23 -04:00
"github.com/jdcloud-api/jdcloud-sdk-go/services/vm/apis"
)
type stepConfigCredentials struct {
InstanceSpecConfig *JDCloudInstanceSpecConfig
move Ui definition into the packer plugin sdk.
2020-11-19 14:54:31 -05:00
ui packersdk.Ui
Rewrite all files, remove sensitive information
2019-08-09 03:00:23 -04:00
}
func (s *stepConfigCredentials) Run(_ context.Context, state multistep.StateBag) multistep.StepAction {
move Ui definition into the packer plugin sdk.
2020-11-19 14:54:31 -05:00
s.ui = state.Get("ui").(packersdk.Ui)
Rewrite all files, remove sensitive information
2019-08-09 03:00:23 -04:00
password := s.InstanceSpecConfig.Comm.SSHPassword
privateKeyPath := s.InstanceSpecConfig.Comm.SSHPrivateKeyFile
privateKeyName := s.InstanceSpecConfig.Comm.SSHKeyPairName
newKeyName := s.InstanceSpecConfig.Comm.SSHTemporaryKeyPairName
if len(privateKeyPath) > 0 && len(privateKeyName) > 0 {
s.ui.Message("\t Private key detected, we are going to login with this private key :)")
return s.ReadExistingPair()
}
if len(newKeyName) > 0 {
s.ui.Message("\t We are going to create a new key pair with its name=" + newKeyName)
return s.CreateRandomKeyPair(newKeyName)
}
if len(password) > 0 {
s.ui.Message("\t Password detected, we are going to login with this password :)")
return multistep.ActionContinue
}
s.ui.Error("[ERROR] Didn't detect any credentials, you have to specify either " +
"{password} or " +
"{key_name+local_private_key_path} or " +
"{temporary_key_pair_name} cheers :)")
return multistep.ActionHalt
}
func (s *stepConfigCredentials) ReadExistingPair() multistep.StepAction {
privateKeyBytes, err := ioutil.ReadFile(s.InstanceSpecConfig.Comm.SSHPrivateKeyFile)
if err != nil {
s.ui.Error("Cannot read local private-key, were they correctly placed? Here's the error" + err.Error())
return multistep.ActionHalt
}
s.ui.Message("\t\t Keys read successfully :)")
s.InstanceSpecConfig.Comm.SSHPrivateKey = privateKeyBytes
return multistep.ActionContinue
}
func (s *stepConfigCredentials) CreateRandomKeyPair(keyName string) multistep.StepAction {
req := apis.NewCreateKeypairRequest(Region, keyName)
resp, err := VmClient.CreateKeypair(req)
if err != nil || resp.Error.Code != FINE {
s.ui.Error(fmt.Sprintf("[ERROR] Cannot create a new key pair for you, \n error=%v \n response=%v", err, resp))
return multistep.ActionHalt
}
s.ui.Message("\t\t Keys created successfully :)")
s.InstanceSpecConfig.Comm.SSHPrivateKey = []byte(resp.Result.PrivateKey)
s.InstanceSpecConfig.Comm.SSHKeyPairName = keyName
return multistep.ActionContinue
}
func (s *stepConfigCredentials) Cleanup(state multistep.StateBag) {
}