first
This commit is contained in:
Samuel Aubertin
commit
2bd6efcadb
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
||||
src/cache/
|
||||
13
LICENSE
Normal file
13
LICENSE
Normal file
@ -0,0 +1,13 @@
|
||||
Copyright (c) 2023 Samuel 'sk4nz' AUBERTIN sk4nz@www.sk4.nz
|
||||
|
||||
Permission to use, copy, modify, and distribute this software for any
|
||||
purpose with or without fee is hereby granted, provided that the above
|
||||
copyright notice and this permission notice appear in all copies.
|
||||
|
||||
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
||||
WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
||||
MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
|
||||
ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
||||
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
||||
ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
|
||||
OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
||||
7
Makefile
Normal file
7
Makefile
Normal file
@ -0,0 +1,7 @@
|
||||
OPACK_TARGET= demo
|
||||
OPACK_SYS_HEADLESS= false
|
||||
|
||||
include src/opack.mk
|
||||
|
||||
all: opack
|
||||
|
||||
100
README.md
Normal file
100
README.md
Normal file
@ -0,0 +1,100 @@
|
||||
# skz-opack
|
||||
Sk4nZ OpenBSD Packer
|
||||
-----
|
||||
*Samuel 'sk4nz' AUBERTIN*
|
||||
|
||||
**skz-opack** enables simple execution of [OpenBSD](https://www.openbsd.org) virtual machines from a Linux host or Google Cloud Compute, leveraging Packer and Vagrant, from a Makefile target named `opack`.
|
||||
|
||||
## Installation Instructions
|
||||
|
||||
To get started with **skz-opack**, follow these steps:
|
||||
|
||||
1. Clone the repository using the following command:
|
||||
```sh
|
||||
git clone https://www.sk4.nz/skz-opack.git
|
||||
```
|
||||
2. Ensure you have the following dependencies installed:
|
||||
- GNU Make
|
||||
- [libvirt](https://libvirt.org/)
|
||||
- [Vagrant](https://www.vagrantup.com/)
|
||||
- [Vagrant-Libvirt module](https://github.com/vagrant-libvirt/vagrant-libvirt)
|
||||
|
||||
3. Use the project by including `path/to/skz-opack/src/opack.mk` and invoking the `opack` target in your Makefile to create and manage OpenBSD virtual machines with Packer and Vagrant.
|
||||
|
||||
## Available make targets
|
||||
Available make target are `opack`, `clean` and `cleancache`.
|
||||
|
||||
## Examples
|
||||
### Quick example
|
||||
|
||||
Here is the shortest Makefile that can be used to leverage skz-opack:
|
||||
|
||||
```make
|
||||
OPACK_TARGET= demo # the VM name
|
||||
include path/to/src/opack.mk # mandatory
|
||||
```
|
||||
|
||||
After invokation with `make opack`, it will download, install, and run the latest OpenBSD release in a local VM.
|
||||
Once executed, the VM is running and it is possible to log into it using the `vagrant ssh` command.
|
||||
Then, `make clean` will remove the VM, but not the vagrant image. When reinvoking `make opack`, the already existing image will be reused.
|
||||
|
||||
### Complex Example
|
||||
|
||||
In this example, we will demonstrate how to use **skz-opack** to create an OpenBSD -current virtual machine with 4 CPUs, 1GB of RAM, and name it "run-current."
|
||||
|
||||
```make
|
||||
OPACK_TARGET= run-current
|
||||
OPACK_SYS_VERSION= snapshots
|
||||
OPACK_SYS_CPU= 4
|
||||
OPACK_SYS_MEMORY= 1024
|
||||
|
||||
include path/to/src/opack.mk
|
||||
|
||||
all: opack
|
||||
vagrant ssh -c "uname -a; sysctl kern.version"
|
||||
```
|
||||
|
||||
In this Makefile:
|
||||
|
||||
- **OPACK_TARGET** specifies the name of the virtual machine as "run-current."
|
||||
- **OPACK_SYS_VERSION** sets the OpenBSD version to "snapshots," indicating the -current version.
|
||||
- **OPACK_SYS_CPU** allocates 4 CPUs to the VM.
|
||||
- **OPACK_SYS_MEMORY** assigns 1GB of RAM to the VM.
|
||||
|
||||
Making "opack" a dependency target of "all" will ensure **skz-opack** operates before any command in the "all" target. Try it with `make all` !
|
||||
|
||||
Once the "opack" target dependency is finished, the Vm is running and the system kernel version is outputted. This example showcases how to customize and run **skz-opack** for your specific needs. Every option ending with an `?` in "src/options.mk" can be overrided in the invoking Makefile.
|
||||
|
||||
### GCP example
|
||||
|
||||
TODO
|
||||
|
||||
## Troubleshooting
|
||||
|
||||
Overrides should happen before the include of "opack.mk".
|
||||
|
||||
## Structure
|
||||
|
||||
In the "src" directory, are located the following files:
|
||||
|
||||
- **autodisklabel**: This file provides the partitioning layout for the installer and can be customized by using the `OPACK_AUTODISKLABEL_FILE` option.
|
||||
- **defines.mk**: Contains internal skz-opack definitions for Packer and Vagrant.
|
||||
- **opack.mk**: To use skz-opack in your projects, simply include this file in your Makefiles.
|
||||
- **opack-provision.sh**: This file is executed for post-installation provisioning with Packer and can be customized using the `OPACK_PROVISION_FILE` option.
|
||||
- **options.mk**: This file is where all skz-opack options are declared. Options are always in the `OPACK_[OPTION NAME]` format.
|
||||
- **packerfile-gcp.mk**: Special Packerfile for Google Cloud Compute upload.
|
||||
- **packerfile.mk**: Generic Packerfile for local execution.
|
||||
- **vagrantfile.mk**: Contains Vagrantfile definitions for local execution.
|
||||
- **vagrant-provision.sh**: This file is executed for pre-run provisioning with Vagrant and can be customized using the `OPACK_RUNTIME_PROVISION_FILE` option.
|
||||
|
||||
## License
|
||||
|
||||
**skz-opack** is distributed under the [OpenBSD License](https://www.openbsd.org/policy.html). See the [LICENSE](LICENSE) file for more details.
|
||||
|
||||
## References
|
||||
|
||||
For more information on the tools used in this project, refer to the following resources:
|
||||
|
||||
- [Packer](https://www.packer.io/)
|
||||
- [Vagrant](https://www.vagrantup.com/)
|
||||
|
||||
2
src/autodisklabel
Normal file
2
src/autodisklabel
Normal file
@ -0,0 +1,2 @@
|
||||
/ 256M-* 90%
|
||||
swap 1G-16G 10%
|
||||
57
src/defines.mk
Normal file
57
src/defines.mk
Normal file
@ -0,0 +1,57 @@
|
||||
define newline
|
||||
|
||||
|
||||
endef
|
||||
|
||||
define OPACK_INSTALL_CONTENT =
|
||||
Choose your keyboard layout = fr
|
||||
System hostname = $(OPACK_SYS_HOSTNAME)-$(OPACK_TARGET)
|
||||
Which network interface = vio0
|
||||
IPv4 address for vio0 = dhcp
|
||||
IPv6 address for vio0 = none
|
||||
Password for root account = $(OPACK_SYS_PASSWORD)
|
||||
Public ssh key for root account = $(OPACK_SYS_SSH_KEY)
|
||||
Allow root ssh login = prohibit-password
|
||||
Do you expect to run the X Window System = $(OPACK_SYS_XENOCARA)
|
||||
Setup a user = $(OPACK_SYS_USER)
|
||||
Password for user $(OPACK_SYS_USER) = $(OPACK_SYS_PASSWORD)
|
||||
Public ssh key for $(OPACK_SYS_USER) = $(OPACK_SYS_SSH_KEY)
|
||||
Allow root ssh login = prohibit-password
|
||||
What timezone = $(OPACK_SYS_TIMEZONE)
|
||||
Which disk = sd0
|
||||
Use (W)hole disk or (E)dit the MBR = whole
|
||||
URL to autopartitioning template for disklabel = file:/autodisklabel
|
||||
Use (A)uto layout, (E)dit auto layout, or create (C)ustom layout = A
|
||||
Location of sets = $(OPACK_SYS_SETS_LOCATION)
|
||||
HTTP Server = $(OPACK_SYS_SERVER)
|
||||
Server directory = pub/OpenBSD/$(OPACK_SYS_VERSION)/$(OPACK_SYS_ARCHITECTURE)
|
||||
Unable to connect using https. Use http instead = yes
|
||||
Pathname to the sets = $(OPACK_SYS_VERSION_MAJOR).$(OPACK_SYS_VERSION_MINOR)/amd64
|
||||
Set name(s) = $(OPACK_SYS_SETS) done
|
||||
Directory does not contain SHA256.sig. Continue without verification = $(OPACK_NO_SIGCHK)
|
||||
Signature check of SHA256.sig failed. Continue without verification = no
|
||||
Cannot determine prefetch area. Continue without verification = yes
|
||||
Location of sets? = done
|
||||
|
||||
endef
|
||||
|
||||
define OPACK_METADATA_CONTENT =
|
||||
{
|
||||
"name": "$(OPACK_BOX_TAG)",
|
||||
"description": "OPACK - $(OPACK_COMMIT)",
|
||||
"versions": [
|
||||
{
|
||||
"version": "$(OPACK_BOX_VERSION)",
|
||||
"providers": [
|
||||
{
|
||||
"name": "libvirt",
|
||||
"url": "$(OPACK_BOX_FILE)",
|
||||
"checksum_type": "sha256",
|
||||
"checksum": "$(OPACK_BOX_FILE_SHA256)"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
endef
|
||||
18
src/opack-provision.sh
Normal file
18
src/opack-provision.sh
Normal file
@ -0,0 +1,18 @@
|
||||
#!/bin/sh
|
||||
set -e
|
||||
set +x
|
||||
|
||||
(
|
||||
echo OPACK: Starting provisioning.
|
||||
sysctl -n kern.version
|
||||
printf 'permit nopass :wheel\n' > /etc/doas.conf
|
||||
printf 'PasswordAuthentication yes\nPermitRootLogin yes\n' >> /etc/ssh/sshd_config
|
||||
pkg_add -u 2> /dev/null || pkg_add -u -D snap 2> /dev/null
|
||||
rm -f /etc/ssh/ssh_host*
|
||||
find /var/log -type f | while read f; do echo -ne '' > $f; done
|
||||
find /tmp -type f | while read f; do echo -ne '' > $f; done
|
||||
sync
|
||||
sync
|
||||
echo OPACK: provisionning done.
|
||||
)
|
||||
exit 0
|
||||
93
src/opack.mk
Normal file
93
src/opack.mk
Normal file
@ -0,0 +1,93 @@
|
||||
.PHONY: clean cleancache cleanall opack
|
||||
.DEFAULT_GOAL := opack
|
||||
|
||||
OPACK_DIR := $(dir $(abspath $(lastword $(MAKEFILE_LIST))))
|
||||
|
||||
define OPACK_BANNER
|
||||
________ __
|
||||
\_____ \ ___________ ____ | | __
|
||||
/ | \\____ \__ \ _/ ___\| |/ /
|
||||
/ | \ |_> > __ \\ \___| <
|
||||
\_______ / __(____ /\___ >__|_ \
|
||||
\/|__| \/ \/ \/
|
||||
|
||||
endef
|
||||
|
||||
$(info $(OPACK_BANNER))
|
||||
|
||||
include $(OPACK_DIR)/options.mk
|
||||
include $(OPACK_DIR)/defines.mk
|
||||
include $(OPACK_DIR)/packerfile.mk
|
||||
include $(OPACK_DIR)/packerfile-gcp.mk
|
||||
include $(OPACK_DIR)/vagrantfile.mk
|
||||
|
||||
$(OPACK_PACKER_HTTP_DIR) $(OPACK_PACKER_DIR) ../$(OPACK_CACHE_DIR):
|
||||
@mkdir -p $@
|
||||
|
||||
$(OPACK_PACKER_DIR)/vagrant.key: | $(OPACK_PACKER_DIR)
|
||||
@curl -s -o $@ https://raw.githubusercontent.com/hashicorp/vagrant/master/keys/vagrant
|
||||
|
||||
$(OPACK_PACKER_DIR)/opack.json: | $(OPACK_PACKER_DIR)
|
||||
@printf '$(subst $(newline),\n,$(OPACK_PACKER_CONTENT))' > $@
|
||||
|
||||
$(OPACK_PACKER_DIR)/bucket.json:
|
||||
@printf '{ "name": "$(GCE_BUCKET)", "location": "$(GCE_BUCKET_LOCATION)", "storageClass": "STANDARD", "iamConfiguration": {"uniformBucketLevelAccess": { "enabled": true }, } }' > $@
|
||||
|
||||
$(OPACK_PACKER_DIR)/opack-cloud.json: | $(OPACK_PACKER_DIR) $(OPACK_PACKER_DIR)/bucket.json
|
||||
@printf '$(subst $(newline),\n,$(OPACK_PACKER_CLOUD_CONTENT))' > $@
|
||||
@curl -X POST -s -o /dev/null \
|
||||
--data-binary @$(OPACK_PACKER_DIR)/bucket.json \
|
||||
-H "Authorization: Bearer $(STORAGE_TOKEN)" \
|
||||
-H "Content-Type: application/json" \
|
||||
"https://storage.googleapis.com/storage/v1/b?project=$(GCE_PROJECT)"
|
||||
@curl -X DELETE -s -o /dev/null \
|
||||
-H "Authorization: Bearer $(IMAGE_TOKEN)" \
|
||||
"https://compute.googleapis.com/compute/v1/projects/$(GCE_PROJECT)/global/images/$(OPACK_TARGET)"
|
||||
|
||||
$(OPACK_PACKER_HTTP_DIR)/install.conf: | $(OPACK_PACKER_HTTP_DIR)
|
||||
@printf '$(subst $(newline),\n,$(OPACK_INSTALL_CONTENT))' > $@
|
||||
|
||||
$(OPACK_PACKER_HTTP_DIR)/autodisklabel: | $(OPACK_PACKER_HTTP_DIR)
|
||||
@cp $(OPACK_AUTODISKLABEL_FILE) $@
|
||||
|
||||
$(OPACK_PROVISION_FILE):
|
||||
@echo you need to write $@ && exit 1
|
||||
|
||||
../id_ed25519:
|
||||
@echo you need to generate the ssh key with 'make sshkey' && exit 1
|
||||
|
||||
$(OPACK_BOX_FILE): | $(OPACK_PACKER_DIR)/opack.json $(OPACK_PACKER_DIR)/vagrant.key $(OPACK_PROVISION_FILE) $(OPACK_PACKER_HTTP_DIR)/install.conf $(OPACK_PACKER_HTTP_DIR)/autodisklabel
|
||||
@cd $(OPACK_PACKER_DIR) &&\
|
||||
CHECKPOINT_DISABLE=1 PACKER_CACHE_DIR=../../$(OPACK_CACHE_DIR)\
|
||||
packer build\
|
||||
-timestamp-ui opack.json &&\
|
||||
rm -rf $(OPACK_PACKER_DIR)
|
||||
|
||||
$(OPACK_META_FILE): $(OPACK_BOX_FILE)
|
||||
@printf '$(subst $(OPACK_BOX_FILE_SHA256),$(shell sha256sum $(OPACK_BOX_FILE) | awk '{print $$1}'),$(subst $(newline),\n,$(OPACK_METADATA_CONTENT)))' > $@
|
||||
@vagrant box add -f --name $(OPACK_BOX_TAG) $(OPACK_META_FILE)
|
||||
|
||||
$(OPACK_VAGRANT_FILE):
|
||||
@printf '$(subst $(newline),\n,$(OPACK_VAGRANT_CONTENT))' > $@
|
||||
|
||||
|
||||
opack: $(OPACK_META_FILE) $(OPACK_VAGRANT_FILE)
|
||||
@vagrant up
|
||||
|
||||
opack-cloud: | $(OPACK_PACKER_DIR)/opack-cloud.json ../id_ed25519 $(OPACK_PROVISION_FILE) $(OPACK_PACKER_HTTP_DIR)/install.conf $(OPACK_PACKER_HTTP_DIR)/autodisklabel
|
||||
@cd $(OPACK_PACKER_DIR) &&\
|
||||
CHECKPOINT_DISABLE=1 PACKER_CACHE_DIR=../../$(OPACK_CACHE_DIR)\
|
||||
packer build\
|
||||
-timestamp-ui opack-cloud.json | tee -a ../$@ &&\
|
||||
rm -rf $(OPACK_PACKER_DIR)
|
||||
|
||||
clean:
|
||||
@-vagrant destroy -f 2>/dev/null
|
||||
@-cd terraform_??????? 2>/dev/null && terraform destroy -auto-approve && cd .. && rm -rf terraform_???????
|
||||
@-rm -rf $(OPACK_VAGRANT_FILE) opack_build_$(OPACK_SHORT_REV) *.log ssh-config .vagrant *.json
|
||||
|
||||
cleancache:
|
||||
@-vagrant box remove -f --all $(OPACK_BOX_TAG) 2>/dev/null
|
||||
@-rm -rf $(OPACK_CACHE_DIR)
|
||||
|
||||
cleanall: clean cleancache
|
||||
128
src/options.mk
Normal file
128
src/options.mk
Normal file
@ -0,0 +1,128 @@
|
||||
OPACK_DEBUG=yes
|
||||
# Enable debugging mode if OPACK_DEBUG is set to 'yes'
|
||||
|
||||
ifndef OPACK_DEBUG
|
||||
.SILENT:
|
||||
$(info OPACK_DEBUG)
|
||||
else
|
||||
endif
|
||||
|
||||
OPACK_SYS_HOSTNAME?= opack
|
||||
# Set the hostname of the virtual machine to 'opack' if not specified
|
||||
|
||||
OPACK_SYS_USER?= opack
|
||||
# Set the username for the virtual machine to 'opack' if not specified
|
||||
|
||||
OPACK_SYS_PASSWORD?= opack
|
||||
# Set the password for the virtual machine to 'opack' if not specified
|
||||
|
||||
OPACK_SYS_DISK_SIZE?= 4096
|
||||
# Set the disk size of the virtual machine to 4096 MB if not specified
|
||||
|
||||
OPACK_SYS_MEMORY?= 512
|
||||
# Set the memory (RAM) size of the virtual machine to 512 MB if not specified
|
||||
|
||||
OPACK_SYS_CPU?= 1
|
||||
# Set the number of CPUs for the virtual machine to 1 if not specified
|
||||
|
||||
OPACK_SYS_SERVER?=cdn.openbsd.org
|
||||
# Set the OpenBSD package server to 'cdn.openbsd.org' if not specified
|
||||
|
||||
OPACK_SYS_ARCHITECTURE?=amd64
|
||||
# Set the architecture for the virtual machine to 'amd64' if not specified
|
||||
|
||||
OPACK_SYS_RELEASE?=$(shell basename -s .html $(shell curl -s https://www.openbsd.org/ | grep released | cut -d '"' -f 2))
|
||||
# Automatically determine the OpenBSD release based on the OpenBSD website
|
||||
|
||||
OPACK_SYS_VERSION_MAJOR=$(shell echo $(OPACK_SYS_RELEASE) | cut -c 1)
|
||||
OPACK_SYS_VERSION_MINOR=$(shell echo $(OPACK_SYS_RELEASE) | cut -c 2)
|
||||
OPACK_SYS_VERSION?=$(OPACK_SYS_VERSION_MAJOR).$(OPACK_SYS_VERSION_MINOR)
|
||||
# Extract major and minor version components from the release and construct the version string
|
||||
|
||||
ifeq ($(OPACK_SYS_VERSION), snapshots)
|
||||
ifeq ($(shell (curl -s https://$(OPACK_SYS_SERVER)/pub/OpenBSD/snapshots/$(OPACK_SYS_ARCHITECTURE)/SHA256 | grep cd$(OPACK_SYS_RELEASE).iso > /dev/null && echo OK) || echo KO), KO)
|
||||
$(eval OPACK_SYS_RELEASE=$(shell echo $$(($(OPACK_SYS_RELEASE)+1))))
|
||||
OPACK_SYS_VERSION_MAJOR=$(shell echo $(OPACK_SYS_RELEASE) | cut -c 1)
|
||||
OPACK_SYS_VERSION_MINOR=$(shell echo $(OPACK_SYS_RELEASE) | cut -c 2)
|
||||
endif
|
||||
endif
|
||||
# Check if the OpenBSD version is 'snapshots' and automatically increment it if needed
|
||||
|
||||
OPACK_SYS_XENOCARA?=no
|
||||
# Set whether to include Xenocara (X Window System) in the virtual machine to 'no' by default
|
||||
|
||||
OPACK_SYS_SETS?=+* -x* +xbase* -game* -comp* -man* -bsd.rd
|
||||
# Define the sets of files/packages to install in the virtual machine
|
||||
|
||||
OPACK_SYS_TIMEZONE?=Europe/Paris
|
||||
# Set the timezone for the virtual machine to 'Europe/Paris' by default
|
||||
|
||||
OPACK_SYS_SSH_KEY?=$(shell curl -s https://raw.githubusercontent.com/hashicorp/vagrant/master/keys/vagrant.pub)
|
||||
# Automatically fetch the Vagrant SSH key
|
||||
|
||||
OPACK_PACKER_VERSION?=$$(curl -s https://checkpoint-api.hashicorp.com/v1/check/packer | jq -r .current_version)
|
||||
# Automatically fetch the latest Packer version
|
||||
|
||||
OPACK_PACKER_HTTP_DIR?=$(OPACK_PACKER_DIR)/http
|
||||
# Define the Packer HTTP directory
|
||||
|
||||
OPACK_SYS_ISO_URL?=https://$(OPACK_SYS_SERVER)/pub/OpenBSD/$(OPACK_SYS_VERSION)/$(OPACK_SYS_ARCHITECTURE)/cd$(OPACK_SYS_RELEASE).iso
|
||||
# Define the URL to fetch the OpenBSD ISO image
|
||||
|
||||
OPACK_SYS_ISO_SHA256SUM?=$(shell curl -s https://$(OPACK_SYS_SERVER)/pub/OpenBSD/$(OPACK_SYS_VERSION)/$(OPACK_SYS_ARCHITECTURE)/SHA256 | grep cd$(OPACK_SYS_RELEASE).iso | cut -d"=" -f2 | tr -d ' ')
|
||||
# Calculate the SHA256 sum of the OpenBSD ISO image
|
||||
|
||||
OPACK_COMMIT?=$(shell git log --oneline -n 1 --abbrev-commit --date=short --pretty=format:"%h %ad %s" 2&>/dev/null || echo latest)
|
||||
OPACK_SHORT_REV?=$(shell git rev-parse --short HEAD 2&>/dev/null || echo latest)
|
||||
# Obtain Git commit information
|
||||
|
||||
OPACK_SYS_SETS_LOCATION?=http
|
||||
# Set the location to fetch the sets from to 'http'
|
||||
|
||||
OPACK_NO_SIGCHK?=no
|
||||
# Set whether to skip signature checking to 'no' by default
|
||||
|
||||
OPACK_SYS_HEADLESS?=true
|
||||
# Set whether the virtual machine runs in headless mode to 'true' by default
|
||||
|
||||
OPACK_CACHE_DIR?=$(OPACK_DIR)cache
|
||||
# Define the directory for caching
|
||||
|
||||
OPACK_BOX_FILE?=$(OPACK_CACHE_DIR)/$(OPACK_TARGET).box
|
||||
$(info BOX $(OPACK_BOX_FILE))
|
||||
# Define the path to the Vagrant box file and output info
|
||||
|
||||
OPACK_META_FILE?=$(OPACK_TARGET).json
|
||||
# Define the metadata file for the Vagrant box
|
||||
|
||||
OPACK_BOX_VERSION?=1.$(shell date +%s).$(OPACK_SHORT_REV)
|
||||
# Define the version of the Vagrant box
|
||||
|
||||
OPACK_BOX_FILE_SHA256?=XXXtoreplaceXXX
|
||||
# Define the SHA256 sum for the Vagrant box file
|
||||
|
||||
OPACK_BOX_TAG?=opack/$(OPACK_TARGET)
|
||||
# Define the Docker image tag for the Vagrant box
|
||||
|
||||
OPACK_PACKER_DIR?=opack_build_$(OPACK_SHORT_REV)
|
||||
# Define the directory for Packer build
|
||||
|
||||
OPACK_PROVISION_FILE?=$(OPACK_DIR)opack-provision.sh
|
||||
# Define the provisioning script for Packer
|
||||
|
||||
OPACK_AUTODISKLABEL_FILE?=$(OPACK_DIR)autodisklabel
|
||||
# Define the autodisklabel file
|
||||
|
||||
OPACK_VAGRANT_FILE=Vagrantfile
|
||||
# Define the Vagrantfile
|
||||
|
||||
OPACK_RUNTIME_PROVISION_FILE?=$(OPACK_DIR)vagrant-provision.sh
|
||||
# Define the runtime provisioning script for Vagrant
|
||||
|
||||
ifdef OPACK_DEBUG
|
||||
$(info HOSTNAME = $(OPACK_SYS_HOSTNAME) USER = $(OPACK_SYS_USER) PASSWORD = $(OPACK_SYS_PASSWORD))
|
||||
$(info DISK-SIZE = $(OPACK_SYS_DISK_SIZE)m ARCH = $(OPACK_SYS_ARCHITECTURE) CPU = $(OPACK_SYS_CPU) MEMORY = $(OPACK_SYS_MEMORY)m)
|
||||
$(info RELEASE = $(OPACK_SYS_RELEASE) VERSION = $(OPACK_SYS_VERSION) SERVER = $(OPACK_SYS_SERVER))
|
||||
$(info X = $(OPACK_SYS_XENOCARA) SETS = $(OPACK_SYS_SETS) NO-SIGNATURE = $(OPACK_NO_SIGCHK) HEADLESS = $(OPACK_SYS_HEADLESS))
|
||||
endif
|
||||
|
||||
81
src/packerfile-gcp.mk
Normal file
81
src/packerfile-gcp.mk
Normal file
@ -0,0 +1,81 @@
|
||||
define OPACK_PACKER_CLOUD_CONTENT =
|
||||
{
|
||||
"description": "OpenBSD $(OPACK_SYS_VERSION) $(OPACK_SYS_ARCHITECTURE) cloud",
|
||||
"variables": {
|
||||
"box_tag": "$(OPACK_SYS_HOSTNAME)-$(OPACK_TARGET)-{{ timestamp }}",
|
||||
"disk_size": "$(OPACK_SYS_DISK_SIZE)",
|
||||
"memory": "$(OPACK_SYS_MEMORY)",
|
||||
"cpus": "$(OPACK_SYS_CPU)",
|
||||
"gcloud_account_json": "../../$(GCE_JSON_KEY)",
|
||||
"gcloud_project_id": "$(GCE_PROJECT)",
|
||||
"version": "$(OPACK_BOX_VERSION)" },
|
||||
"builders": [ {
|
||||
"type": "qemu",
|
||||
"format": "raw",
|
||||
"vm_name": "disk.raw",
|
||||
"cpus": "{{user `cpus`}}",
|
||||
"memory": "{{user `memory`}}",
|
||||
"headless": $(OPACK_SYS_HEADLESS),
|
||||
"boot_key_interval": "10ms",
|
||||
"disk_size": "{{user `disk_size`}}",
|
||||
"disk_interface": "virtio",
|
||||
"disk_compression": true,
|
||||
"http_directory": "./http",
|
||||
"iso_urls": "$(OPACK_SYS_ISO_URL)",
|
||||
"iso_checksum": "sha256:$(OPACK_SYS_ISO_SHA256SUM)",
|
||||
"net_device": "virtio-net",
|
||||
"communicator": "ssh",
|
||||
"ssh_username": "root",
|
||||
"ssh_private_key_file": "$(OPACK_SYS_SSH_PRIVATE_KEY)",
|
||||
"ssh_wait_timeout": "60m",
|
||||
"shutdown_command": "shutdown -p now",
|
||||
"boot_wait": "30s",
|
||||
"boot_command": [ "S<enter><wait>",
|
||||
"# ~~~ OPACK - OpenBSD Packing ~~~~<enter>",
|
||||
"# $(OPACK_COMMIT) <enter>",
|
||||
"ifconfig vio0 inet autoconf & ",
|
||||
"sleep 1 && ",
|
||||
"wait && "
|
||||
"ftp http://{{ .HTTPIP }}:{{ .HTTPPort }}/install.conf && ",
|
||||
"ftp http://{{ .HTTPIP }}:{{ .HTTPPort }}/autodisklabel && ",
|
||||
"install -af install.conf && ",
|
||||
"echo permit nopass :wheel > /mnt/etc/doas.conf && ",
|
||||
"echo inet autoconf > /mnt/etc/hostname.vio0 && ",
|
||||
"echo PubkeyAcceptedAlgorithms +ssh-rsa >> /mnt/etc/ssh/sshd_config && ",
|
||||
"reboot<enter>" ]
|
||||
} ],
|
||||
"provisioners": [
|
||||
{
|
||||
"type": "file",
|
||||
"source": "$(PROTECME_TOP_DIR)/src",
|
||||
"destination": "/root/magma"
|
||||
},
|
||||
{
|
||||
"type": "file",
|
||||
"source": "$(PROTECME_SPEC_DIR)/openbsd",
|
||||
"destination": "/var/spec2006src"
|
||||
},
|
||||
{
|
||||
"type": "shell",
|
||||
"scripts": ["$(OPACK_PROVISION_FILE)"]
|
||||
}
|
||||
],
|
||||
"post-processors": [ [
|
||||
{ "name": "Compress",
|
||||
"type": "compress",
|
||||
"compression_level": 9,
|
||||
"output": "disk.raw.tar.gz"
|
||||
},
|
||||
{ "name": "GCP Import",
|
||||
"type": "googlecompute-import",
|
||||
"project_id": "{{user `gcloud_project_id`}}",
|
||||
"account_file": "{{user `gcloud_account_json`}}",
|
||||
"bucket": "$(GCE_BUCKET)",
|
||||
"image_name": "$(OPACK_TARGET)",
|
||||
"image_description": "$(OPACK_COMMIT)",
|
||||
"image_family": "openbsd",
|
||||
"keep_input_artifact": true
|
||||
}
|
||||
] ]
|
||||
}
|
||||
endef
|
||||
58
src/packerfile.mk
Normal file
58
src/packerfile.mk
Normal file
@ -0,0 +1,58 @@
|
||||
define OPACK_PACKER_CONTENT =
|
||||
{
|
||||
"description": "OpenBSD $(OPACK_SYS_VERSION) $(OPACK_SYS_ARCHITECTURE)",
|
||||
"variables": {
|
||||
"box_tag": "$(OPACK_SYS_HOSTNAME)-$(OPACK_TARGET)-{{ timestamp }}",
|
||||
"disk_size": "$(OPACK_SYS_DISK_SIZE)",
|
||||
"memory": "$(OPACK_SYS_MEMORY)",
|
||||
"cpus": "$(OPACK_SYS_CPU)",
|
||||
"version": "$(OPACK_BOX_VERSION)" },
|
||||
"builders": [ {
|
||||
"type": "qemu",
|
||||
"vm_name": "$(OPACK_SYS_HOSTNAME)-$(OPACK_TARGET)",
|
||||
"cpus": "{{user `cpus`}}",
|
||||
"memory": "{{user `memory`}}",
|
||||
"headless": $(OPACK_SYS_HEADLESS),
|
||||
"boot_key_interval": "10ms",
|
||||
"disk_size": "{{user `disk_size`}}",
|
||||
"disk_interface": "virtio",
|
||||
"disk_compression": true,
|
||||
"http_directory": "./http",
|
||||
"iso_urls": "$(OPACK_SYS_ISO_URL)",
|
||||
"iso_checksum": "sha256:$(OPACK_SYS_ISO_SHA256SUM)",
|
||||
"net_device": "virtio-net",
|
||||
"communicator": "ssh",
|
||||
"ssh_username": "root",
|
||||
"ssh_private_key_file": "vagrant.key",
|
||||
"ssh_wait_timeout": "60m",
|
||||
"shutdown_command": "shutdown -p now",
|
||||
"boot_wait": "30s",
|
||||
"boot_command": [ "S<enter><wait>",
|
||||
"# ~~~ OPACK - OpenBSD Packing ~~~~<enter>",
|
||||
"# $(OPACK_COMMIT) <enter>",
|
||||
"ifconfig vio0 inet autoconf & ",
|
||||
"sleep 1 && ",
|
||||
"wait && ",
|
||||
"ftp http://{{ .HTTPIP }}:{{ .HTTPPort }}/install.conf && ",
|
||||
"ftp http://{{ .HTTPIP }}:{{ .HTTPPort }}/autodisklabel && ",
|
||||
"install -af install.conf && ",
|
||||
"echo permit nopass :wheel > /mnt/etc/doas.conf && ",
|
||||
"echo inet autoconf > /mnt/etc/hostname.vio0 && ",
|
||||
"echo PubkeyAcceptedAlgorithms +ssh-rsa >> /mnt/etc/ssh/sshd_config && ",
|
||||
"reboot<enter>" ]
|
||||
} ],
|
||||
"provisioners": [
|
||||
{
|
||||
"type": "shell",
|
||||
"scripts": ["$(OPACK_PROVISION_FILE)"]
|
||||
}
|
||||
],
|
||||
"post-processors": [ [
|
||||
{ "name": "vagrant",
|
||||
"type": "vagrant",
|
||||
"compression_level": 9,
|
||||
"output": "$(OPACK_BOX_FILE)" }
|
||||
] ]
|
||||
}
|
||||
endef
|
||||
|
||||
4
src/vagrant-provision.sh
Normal file
4
src/vagrant-provision.sh
Normal file
@ -0,0 +1,4 @@
|
||||
#!/bin/sh
|
||||
|
||||
echo OPACK: Sucess > /opack
|
||||
echo To run your own script, override OPACK_RUNTIME_PROVISION_FILE >> /opack
|
||||
21
src/vagrantfile.mk
Normal file
21
src/vagrantfile.mk
Normal file
@ -0,0 +1,21 @@
|
||||
define OPACK_VAGRANT_CONTENT =
|
||||
# -*- mode: ruby -*-
|
||||
# vi: set ft=ruby :
|
||||
|
||||
ENV["VAGRANT_DEFAULT_PROVIDER"] = "libvirt"
|
||||
Vagrant.configure("2") do |config|
|
||||
config.vm.define "$(OPACK_TARGET)"
|
||||
config.vm.box = "$(OPACK_BOX_TAG)"
|
||||
config.ssh.shell = "ksh -l"
|
||||
config.ssh.username = "root"
|
||||
config.ssh.extra_args = "-tt"
|
||||
config.ssh.sudo_command = "doas env %c"
|
||||
config.vm.synced_folder ".", "/vagrant", disabled: true
|
||||
config.vm.provision "shell", path: "$(OPACK_RUNTIME_PROVISION_FILE)"
|
||||
config.vm.provider "libvirt" do |l|
|
||||
l.cpus = $(OPACK_SYS_CPU)
|
||||
l.memory = $(OPACK_SYS_MEMORY)
|
||||
end
|
||||
end
|
||||
|
||||
endef
|
||||
Loading…
Reference in New Issue
Block a user