HashiCorp packer 制作AWS AMI镜像示例

准备工作

验证AWS

可以先手动启动一个EC2实例验证自己创建的VPC, subnet, internet gateway 和routetable等, 确保实例创建后不会出现连接不上的情况.
可以按照下面的链接配置避免连接超时
https://docs.aws.amazon.com/zh_cn/AWSEC2/latest/UserGuide/TroubleshootingInstancesConnecting.html#TroubleshootingInstancesConnectionTimeout

当手动启动的实例能正常启动并连接时说明VPC, subnet等配置没有问题, 可以记录下来用于后续步骤

packer操作

创建HCL文件

参考官方文档 将 下面的内容保存成aws-ubuntu.pkr.hcl 注意: vpc_id, subnet_id, ssh_keypair_name, ssh_private_key_file 这几个参数要替换成自己对应的参数或者注释掉

packer { required_plugins { amazon = { version = ">= 1.2.1" source = "github.com/hashicorp/amazon" } } 
} source "amazon-ebs" "ubuntu" { #AMI名称ami_name = "learn-packer-linux-aws" instance_type = "t2.micro" #可用区域region = "eu-central-1" source_ami_filter { filters = { #name = "ubuntu/images/*ubuntu-xenial-16.04-amd64-server-*" 				#packer示例的镜像已经不可用,可以在AWS的AMI里面找到可用镜像name = "ubuntu/images/hvm-ssd/ubuntu-jammy-22.04-amd64-server-20230208" root-device-type = "ebs" virtualization-type = "hvm" } most_recent = true owners = ["099720109477"] } #用户名ssh_username = "ubuntu" skip_region_validation = true ssh_agent_auth = false #是否分配公网ipassociate_public_ip_address = true #ssh登录连接超时设置, public_ip表示通过公网ip连接,private_ip表示通过局域网ip连接ssh_interface = "public_ip" ssh_timeout = "5m" #AWS的VPC和subnet,不指定的话会使用默认的VPC和subnet, 这里必须替换成自己的vpc_id = "vpc-015962cc334246a68" subnet_id = "subnet-038a40d7d3eac7" #AWS keypair,可以用已经存在的keypair,不设置keypair相关参数的话packer会自动生成keypair, 这里必须替换成自己的或者注释掉ssh_keypair_name = "keypair" ssh_private_key_file = "packer_tutorial/keypair.pem" 
} build { name = "learn-packer" sources = [ "source.amazon-ebs.ubuntu" ] 
} 

如果启动实例时需要指定tag 的话可以在source模块里面加上tags和run_tags 这两个参数来指定, 例如:

source "amazon-ebs" "ubuntu" { tags = { appname = "app1" }run_tags = { appname = "app1" }#AMI名称ami_name = "learn-packer-linux-aws" instance_type = "t2.micro" #可用区域region = "eu-central-1" source_ami_filter { filters = { name = "ubuntu/images/hvm-ssd/ubuntu-jammy-22.04-amd64-server-20230208" root-device-type = "ebs" virtualization-type = "hvm" } most_recent = true owners = ["099720109477"] } 
}	

更多参数可参考 https://developer.hashicorp.com/packer/plugins/builders/amazon/ebs

设置环境变量

通过下面的方式设置AWS_ACCESS_KEY_ID 和AWS_SECRET_ACCESS_KEY环境变量

export AWS_ACCESS_KEY_ID="<YOUR_AWS_ACCESS_KEY_ID>"
export AWS_SECRET_ACCESS_KEY="<YOUR_AWS_SECRET_ACCESS_KEY>"

也可以在builder模块中指定, 例如:

 "builders": [{"type": "amazon-ebs","access_key": "YOUR_AWS_ACCESS_KEY_ID","secret_key": "YOUR_AWS_SECRET_ACCESS_KEY"}]

创建AMI

执行下面的命令,然后在aws中观察实例状态即可

packer init .
packer fmt .
packer validate .
packer build aws-ubuntu.pkr.hcl

参考

1. https://developer.hashicorp.com/packer/tutorials/aws-get-started/aws-get-started-build-image
2. https://developer.hashicorp.com/packer/plugins/builders/amazon/ebs
3. https://thefirstapril.com/2019/07/03/Using-Packer-to-create-AMI-Amazon-Machine-Images
4. https://stackoverflow.com/questions/59440394/where-does-packer-store-the-private-key