From af90456b31423f5d707c02767410158691e554c1 Mon Sep 17 00:00:00 2001 From: Nishchay Date: Fri, 3 Jul 2026 18:31:29 -0700 Subject: [PATCH] fix: stop building deprecated flatcar images, freeze to 0619 --- .pipelines/.vsts-vhd-builder-release.yaml | 57 -- e2e/config/vhd.go | 20 - e2e/node_config.go | 8 - e2e/scenario_test.go | 173 ---- packer.mk | 10 - pkg/agent/datamodel/sig_config.go | 7 +- pkg/agent/datamodel/sig_config_test.go | 2 - .../vhd-image-builder-flatcar-arm64.json | 815 ----------------- .../packer/vhd-image-builder-flatcar.json | 820 ------------------ 9 files changed, 5 insertions(+), 1907 deletions(-) delete mode 100644 vhdbuilder/packer/vhd-image-builder-flatcar-arm64.json delete mode 100644 vhdbuilder/packer/vhd-image-builder-flatcar.json diff --git a/.pipelines/.vsts-vhd-builder-release.yaml b/.pipelines/.vsts-vhd-builder-release.yaml index ae7819d6f19..96322388321 100644 --- a/.pipelines/.vsts-vhd-builder-release.yaml +++ b/.pipelines/.vsts-vhd-builder-release.yaml @@ -125,14 +125,6 @@ parameters: displayName: Build 2204 Minimal Gen2 Containerd type: boolean default: false - - name: buildflatcargen2 - displayName: Build Flatcar Gen2 - type: boolean - default: true - - name: buildflatcargen2arm64 - displayName: Build Flatcar Gen2 ARM64 - type: boolean - default: true - name: buildacltlgen2 displayName: Build Azure Container Linux TL Gen2 type: boolean @@ -819,55 +811,6 @@ stages: useOverrides: ${{ parameters.useOverrides }} overrideBranch: ${{ parameters.overrideBranch }} artifactName: 2204-minimal-gen2-containerd - - job: buildflatcargen2 - condition: eq('${{ parameters.buildflatcargen2 }}', true) - dependsOn: [ ] - timeoutInMinutes: 360 - steps: - - bash: | - echo '##vso[task.setvariable variable=OS_SKU]Flatcar' - echo '##vso[task.setvariable variable=OS_VERSION]flatcar' - echo '##vso[task.setvariable variable=IMG_PUBLISHER]kinvolk' - echo '##vso[task.setvariable variable=IMG_OFFER]flatcar-container-linux-corevm-amd64' - echo '##vso[task.setvariable variable=IMG_SKU]alpha-gen2' - echo '##vso[task.setvariable variable=IMG_VERSION]latest' - echo '##vso[task.setvariable variable=HYPERV_GENERATION]V2' - echo '##vso[task.setvariable variable=AZURE_VM_SIZE]Standard_D16ds_v5' - echo '##vso[task.setvariable variable=FEATURE_FLAGS]None' - echo '##vso[task.setvariable variable=ARCHITECTURE]X86_64' - echo '##vso[task.setvariable variable=ENABLE_FIPS]false' - echo '##vso[task.setvariable variable=ENABLE_TRUSTED_LAUNCH]False' - displayName: Setup Build Variables - - template: ./templates/.builder-release-template.yaml - parameters: - useOverrides: ${{ parameters.useOverrides }} - overrideBranch: ${{ parameters.overrideBranch }} - artifactName: flatcar-gen2 - - job: buildflatcargen2arm64 - condition: eq('${{ parameters.buildflatcargen2arm64 }}', true) - dependsOn: [ ] - timeoutInMinutes: 360 - steps: - - bash: | - echo '##vso[task.setvariable variable=OS_SKU]Flatcar' - echo '##vso[task.setvariable variable=OS_VERSION]flatcar' - echo '##vso[task.setvariable variable=IMG_PUBLISHER]kinvolk' - echo '##vso[task.setvariable variable=IMG_OFFER]flatcar-container-linux-corevm' - echo '##vso[task.setvariable variable=IMG_SKU]alpha' - echo '##vso[task.setvariable variable=IMG_VERSION]latest' - echo '##vso[task.setvariable variable=HYPERV_GENERATION]V2' - echo '##vso[task.setvariable variable=AZURE_VM_SIZE]Standard_D16pds_v5' - echo '##vso[task.setvariable variable=FEATURE_FLAGS]None' - - echo '##vso[task.setvariable variable=ARCHITECTURE]ARM64' - echo '##vso[task.setvariable variable=ENABLE_FIPS]false' - echo '##vso[task.setvariable variable=ENABLE_TRUSTED_LAUNCH]False' - displayName: Setup Build Variables - - template: ./templates/.builder-release-template.yaml - parameters: - useOverrides: ${{ parameters.useOverrides }} - overrideBranch: ${{ parameters.overrideBranch }} - artifactName: flatcar-gen2-arm64 - job: buildacltlgen2 condition: eq('${{ parameters.buildacltlgen2 }}', true) dependsOn: [ ] diff --git a/e2e/config/vhd.go b/e2e/config/vhd.go index 9c2904da622..595b83b1246 100644 --- a/e2e/config/vhd.go +++ b/e2e/config/vhd.go @@ -180,26 +180,6 @@ var ( Gallery: imageGalleryLinux, } - VHDFlatcarGen2 = &Image{ - Name: "flatcargen2", - OS: OSFlatcar, - Arch: "amd64", - Distro: datamodel.AKSFlatcarGen2, - Gallery: imageGalleryLinux, - Flatcar: true, - OSDiskSizeGB: 60, - } - - VHDFlatcarGen2Arm64 = &Image{ - Name: "flatcargen2arm64", - OS: OSFlatcar, - Arch: "arm64", - Distro: datamodel.AKSFlatcarArm64Gen2, - Gallery: imageGalleryLinux, - Flatcar: true, - OSDiskSizeGB: 60, - } - VHDAzureLinuxV3Gen2Arm64 = &Image{ Name: "azurelinuxv3gen2arm64", OS: OSAzureLinux, diff --git a/e2e/node_config.go b/e2e/node_config.go index 3472d383501..b68699bb40e 100644 --- a/e2e/node_config.go +++ b/e2e/node_config.go @@ -852,10 +852,6 @@ func baseTemplateLinux(t testing.TB, location string, k8sVersion string, arch st GalleryName: "AKSUbuntuEdgeZone", ResourceGroup: "AKS-Ubuntu-EdgeZone", }, - "AKSFlatcar": { - GalleryName: "aksflatcar", - ResourceGroup: "resourcegroup", - }, }, }, IsARM64: false, @@ -1060,10 +1056,6 @@ DXRqvV7TWO2hndliQq3BW385ZkiephlrmpUVM= r2k1@arturs-mbp.lan`, GalleryName: "AKSUbuntuEdgeZone", ResourceGroup: "AKS-Ubuntu-EdgeZone", }, - "AKSFlatcar": { - GalleryName: "aksflatcar", - ResourceGroup: "resourcegroup", - }, }, }, } diff --git a/e2e/scenario_test.go b/e2e/scenario_test.go index 40d93503dd3..95fe5c87e8a 100644 --- a/e2e/scenario_test.go +++ b/e2e/scenario_test.go @@ -36,66 +36,6 @@ func Test_AzureLinux3OSGuard(t *testing.T) { }) } -func Test_Flatcar(t *testing.T) { - RunScenario(t, &Scenario{ - Description: "Tests that a node using a Flatcar VHD can be properly bootstrapped and custom CA was correctly added", - Config: Config{ - Cluster: ClusterKubenet, - VHD: config.VHDFlatcarGen2, - BootstrapConfigMutator: func(_ *Cluster, nbc *datamodel.NodeBootstrappingConfiguration) { - nbc.CustomCATrustConfig = &datamodel.CustomCATrustConfig{ - CustomCATrustCerts: []string{ - encodedTestCert, - }, - } - }, - Validator: func(ctx context.Context, s *Scenario) { - ValidateFileHasContent(ctx, s, "/etc/protocols", "protocols definition file") - ValidateFileIsRegularFile(ctx, s, "/etc/ssl/certs/ca-certificates.crt") - ValidateNonEmptyDirectory(ctx, s, "/opt/certs") - // openssl x509 -hash of input cert - ValidateFileExists(ctx, s, "/etc/ssl/certs/5c3b39ed.0") - }, - }, - }) -} - -func Test_Flatcar_Scriptless(t *testing.T) { - RunScenario(t, &Scenario{ - Description: "Tests that a node using a Flatcar and the self-contained installer can be properly bootstrapped", - Config: Config{ - Cluster: ClusterKubenet, - VHD: config.VHDFlatcarGen2, - BootstrapConfigMutator: func(_ *Cluster, nbc *datamodel.NodeBootstrappingConfiguration) { - }, - Validator: func(ctx context.Context, s *Scenario) { - ValidateFileHasContent(ctx, s, "/var/log/azure/aks-node-controller.log", "aks-node-controller finished successfully") - }, - AKSNodeConfigMutator: func(_ *Cluster, config *aksnodeconfigv1.Configuration) { - }, - }, - }) -} - -func Test_Flatcar_ARM64(t *testing.T) { - RunScenario(t, &Scenario{ - Description: "Tests that a node using a Flatcar VHD on ARM64 architecture can be properly bootstrapped", - Config: Config{ - Cluster: ClusterKubenet, - VHD: config.VHDFlatcarGen2Arm64, - BootstrapConfigMutator: func(_ *Cluster, nbc *datamodel.NodeBootstrappingConfiguration) { - nbc.AgentPoolProfile.VMSize = "Standard_D2pds_V5" - nbc.IsARM64 = true - }, - Validator: func(ctx context.Context, s *Scenario) { - }, - VMConfigMutator: func(vmss *armcompute.VirtualMachineScaleSet) { - vmss.SKU.Name = to.Ptr("Standard_D2pds_V5") - }, - }, - }) -} - func Test_AzureLinuxV3_ARM64(t *testing.T) { RunScenario(t, &Scenario{ Description: "Tests that a node using a AzureLinuxV3 VHD on ARM64 architecture can be properly bootstrapped", @@ -115,25 +55,6 @@ func Test_AzureLinuxV3_ARM64(t *testing.T) { }) } -func Test_Flatcar_AzureCNI(t *testing.T) { - RunScenario(t, &Scenario{ - Description: "Flatcar scenario on a cluster configured with Azure CNI and the chrony service restarts if it is killed", - Config: Config{ - Cluster: ClusterAzureNetwork, - VHD: config.VHDFlatcarGen2, - BootstrapConfigMutator: func(_ *Cluster, nbc *datamodel.NodeBootstrappingConfiguration) { - nbc.ContainerService.Properties.OrchestratorProfile.KubernetesConfig.NetworkPlugin = string(armcontainerservice.NetworkPluginAzure) - nbc.AgentPoolProfile.KubernetesConfig.NetworkPlugin = string(armcontainerservice.NetworkPluginAzure) - }, - Validator: func(ctx context.Context, s *Scenario) { - ServiceCanRestartValidator(ctx, s, "chronyd", 10) - ValidateFileHasContent(ctx, s, "/etc/systemd/system/chronyd.service.d/10-chrony-restarts.conf", "Restart=always") - ValidateFileHasContent(ctx, s, "/etc/systemd/system/chronyd.service.d/10-chrony-restarts.conf", "RestartSec=5") - }, - }, - }) -} - func Test_Ubuntu2204_AzureCNI(t *testing.T) { RunScenario(t, &Scenario{ Description: "Ubuntu 22.04 scenario on a cluster configured with Azure CNI", @@ -152,48 +73,6 @@ func Test_Ubuntu2204_AzureCNI(t *testing.T) { }) } -func Test_Flatcar_AzureCNI_ChronyRestarts_Scriptless(t *testing.T) { - RunScenario(t, &Scenario{ - Description: "Test Flatcar scenario on a cluster configured with Azure CNI and the chrony service restarts if it is killed", - Config: Config{ - Cluster: ClusterAzureNetwork, - VHD: config.VHDFlatcarGen2, - BootstrapConfigMutator: func(_ *Cluster, nbc *datamodel.NodeBootstrappingConfiguration) { - nbc.ContainerService.Properties.OrchestratorProfile.KubernetesConfig.NetworkPlugin = string(armcontainerservice.NetworkPluginAzure) - nbc.AgentPoolProfile.KubernetesConfig.NetworkPlugin = string(armcontainerservice.NetworkPluginAzure) - }, - AKSNodeConfigMutator: func(_ *Cluster, config *aksnodeconfigv1.Configuration) { - config.NetworkConfig.NetworkPlugin = aksnodeconfigv1.NetworkPlugin_NETWORK_PLUGIN_AZURE - }, - Validator: func(ctx context.Context, s *Scenario) { - ServiceCanRestartValidator(ctx, s, "chronyd", 10) - ValidateFileHasContent(ctx, s, "/etc/systemd/system/chronyd.service.d/10-chrony-restarts.conf", "Restart=always") - ValidateFileHasContent(ctx, s, "/etc/systemd/system/chronyd.service.d/10-chrony-restarts.conf", "RestartSec=5") - }, - }, - }) -} - -func Test_Flatcar_SecureTLSBootstrapping_BootstrapToken_Fallback(t *testing.T) { - RunScenario(t, &Scenario{ - Description: "Tests that a node using a Flatcar Gen2 VHD can be properly bootstrapped even if secure TLS bootstrapping fails", - Tags: Tags{ - BootstrapTokenFallback: true, - }, - Config: Config{ - Cluster: ClusterKubenet, - VHD: config.VHDFlatcarGen2, - BootstrapConfigMutator: func(_ *Cluster, nbc *datamodel.NodeBootstrappingConfiguration) { - nbc.SecureTLSBootstrappingConfig = &datamodel.SecureTLSBootstrappingConfig{ - Enabled: true, - GetAccessTokenTimeout: (10 * time.Second).String(), - UserAssignedIdentityID: "invalid", // use an unexpected user-assigned identity ID to force a secure TLS bootstrapping failure - } - }, - }, - }) -} - func Test_ACL(t *testing.T) { RunScenario(t, &Scenario{ Description: "Tests that a node using an ACL VHD can be properly bootstrapped and custom CA was correctly added", @@ -1021,58 +900,6 @@ func Test_Ubuntu2204_DisableSSH(t *testing.T) { }) } -func Test_Flatcar_DisableSSH(t *testing.T) { - RunScenario(t, &Scenario{ - Description: "Tests that a node using Flatcar VHD with SSH disabled can be properly bootstrapped and SSH daemon is disabled", - Config: Config{ - Cluster: ClusterKubenet, - VHD: config.VHDFlatcarGen2, - BootstrapConfigMutator: func(_ *Cluster, nbc *datamodel.NodeBootstrappingConfiguration) { - nbc.SSHStatus = datamodel.SSHOff - }, - SkipSSHConnectivityValidation: true, // Skip SSH connectivity validation since SSH is down - SkipDefaultValidation: true, // Skip default validation since it requires SSH connectivity - Validator: func(ctx context.Context, s *Scenario) { - // Validate SSH daemon is disabled via RunCommand - ValidateSSHServiceDisabled(ctx, s) - }, - }, - }) -} - -func Test_Flatcar_NetworkIsolatedCluster_NonAnonymousACR(t *testing.T) { - RunScenario(t, &Scenario{ - Description: "Tests that a node using Flatcar VHD with network isolated cluster enabled", - Tags: Tags{ - NetworkIsolated: true, - NonAnonymousACR: true, - }, - Config: Config{ - Cluster: ClusterAzureNetworkIsolated, - VHD: config.VHDFlatcarGen2, - BootstrapConfigMutator: func(_ *Cluster, nbc *datamodel.NodeBootstrappingConfiguration) { - nbc.OutboundType = datamodel.OutboundTypeBlock - nbc.ContainerService.Properties.SecurityProfile = &datamodel.SecurityProfile{ - PrivateEgress: &datamodel.PrivateEgress{ - Enabled: true, - ContainerRegistryServer: fmt.Sprintf("%s.azurecr.io/aks-managed-repository", config.PrivateACRNameNotAnon(config.Config.DefaultLocation)), - }, - } - nbc.ContainerService.Properties.OrchestratorProfile.KubernetesConfig.UseManagedIdentity = true - nbc.AgentPoolProfile.KubernetesConfig.UseManagedIdentity = true - nbc.K8sComponents.LinuxCredentialProviderURL = fmt.Sprintf( - "https://packages.aks.azure.com/cloud-provider-azure/v%s/binaries/azure-acr-credential-provider-linux-amd64-v%s.tar.gz", - nbc.ContainerService.Properties.OrchestratorProfile.OrchestratorVersion, - nbc.ContainerService.Properties.OrchestratorProfile.OrchestratorVersion) - nbc.KubeletConfig["--image-credential-provider-config"] = "/var/lib/kubelet/credential-provider-config.yaml" - nbc.KubeletConfig["--image-credential-provider-bin-dir"] = "/var/lib/kubelet/credential-provider" - }, - Validator: func(ctx context.Context, s *Scenario) { - }, - }, - }) -} - func Test_ACL_NetworkIsolatedCluster_NonAnonymousACR(t *testing.T) { RunScenario(t, &Scenario{ Description: "Tests that a node using ACL VHD with network isolated cluster enabled", diff --git a/packer.mk b/packer.mk index 65a457d9478..de6619d2ad9 100755 --- a/packer.mk +++ b/packer.mk @@ -25,9 +25,6 @@ else ifeq (${OS_SKU},CBLMariner) else ifeq (${OS_SKU},AzureLinux) @echo "Using packer template file vhd-image-builder-mariner-arm64.json" @packer build -timestamp-ui -var-file=vhdbuilder/packer/settings.json vhdbuilder/packer/vhd-image-builder-mariner-arm64.json -else ifeq (${OS_SKU},Flatcar) - @echo "Using packer template file vhd-image-builder-flatcar-arm64.json" - @packer build -timestamp-ui -var-file=vhdbuilder/packer/settings.json vhdbuilder/packer/vhd-image-builder-flatcar-arm64.json else ifeq (${OS_SKU},AzureContainerLinux) @echo "Using packer template file vhd-image-builder-acl-arm64.json" @packer build -timestamp-ui -var-file=vhdbuilder/packer/settings.json vhdbuilder/packer/vhd-image-builder-acl-arm64.json @@ -61,9 +58,6 @@ else @echo "Using packer template file vhd-image-builder-mariner.json" @packer build -timestamp-ui -var-file=vhdbuilder/packer/settings.json vhdbuilder/packer/vhd-image-builder-mariner.json endif -else ifeq (${OS_SKU},Flatcar) - @echo "Using packer template file vhd-image-builder-flatcar.json" - @packer build -timestamp-ui -var-file=vhdbuilder/packer/settings.json vhdbuilder/packer/vhd-image-builder-flatcar.json else ifeq (${OS_SKU},AzureContainerLinux) @echo "Using packer template file vhd-image-builder-acl.json" @packer build -timestamp-ui -var-file=vhdbuilder/packer/settings.json vhdbuilder/packer/vhd-image-builder-acl.json @@ -163,10 +157,6 @@ build-lister-binary: @echo "Building lister binary for $(GOARCH)" @bash -c "pushd vhdbuilder/lister && GOEXPERIMENT=ms_nocgo_opensslcrypto CGO_ENABLED=0 GOOS=linux GOARCH=$(GOARCH) go build -o bin/lister main.go && popd" -generate-flatcar-customdata: vhdbuilder/packer/flatcar-customdata.json -vhdbuilder/packer/flatcar-customdata.json: vhdbuilder/packer/flatcar-customdata.yaml | hack/tools/bin/butane - @hack/tools/bin/butane --strict $< -o $@ - generate-acl-customdata: vhdbuilder/packer/acl-customdata.json vhdbuilder/packer/acl-customdata.json: vhdbuilder/packer/acl-customdata.yaml | hack/tools/bin/butane @hack/tools/bin/butane --strict $< -o $@ diff --git a/pkg/agent/datamodel/sig_config.go b/pkg/agent/datamodel/sig_config.go index ca54f612ad0..869dea7acb8 100644 --- a/pkg/agent/datamodel/sig_config.go +++ b/pkg/agent/datamodel/sig_config.go @@ -402,6 +402,9 @@ const ( // Check with Keith and Alex before changing the frozen NVIDIA GB image version. FrozenUbuntuArm64GB200Containerd2404Gen2SIGImageVersion string = "202602.19.0" + // Flatcar is deprecated on June 8th. + FrozenFlatcarSIGImageVersion string = "202607.02.0" + // We do not use AKS Windows image versions in AgentBaker. These fake values are only used for unit tests. Windows2019SIGImageVersion string = "17763.2019.221114" Windows2022SIGImageVersion string = "20348.2022.221114" @@ -752,14 +755,14 @@ var ( ResourceGroup: AKSFlatcarResourceGroup, Gallery: AKSFlatcarGalleryName, Definition: "flatcargen2", - Version: LinuxSIGImageVersion, + Version: FrozenFlatcarSIGImageVersion, } SIGFlatcarArm64Gen2ImageConfigTemplate = SigImageConfigTemplate{ ResourceGroup: AKSFlatcarResourceGroup, Gallery: AKSFlatcarGalleryName, Definition: "flatcargen2arm64", - Version: LinuxSIGImageVersion, + Version: FrozenFlatcarSIGImageVersion, } SIGACLGen2TLImageConfigTemplate = SigImageConfigTemplate{ diff --git a/pkg/agent/datamodel/sig_config_test.go b/pkg/agent/datamodel/sig_config_test.go index 80039f642b6..5db19eb5539 100644 --- a/pkg/agent/datamodel/sig_config_test.go +++ b/pkg/agent/datamodel/sig_config_test.go @@ -36,8 +36,6 @@ var _ = Describe("GetMaintainedLinuxSIGImageConfigMap", func() { AKSAzureLinuxV3Gen2TL: SIGAzureLinuxV3TLImageConfigTemplate.WithOptions(), AKSAzureLinuxV3CVMGen2: SIGAzureLinuxV3CVMGen2ImageConfigTemplate.WithOptions(), AKSAzureLinuxV3OSGuardGen2FIPSTL: SIGAzureLinuxV3OSGuardGen2FIPSTLImageConfigTemplate.WithOptions(), - AKSFlatcarGen2: SIGFlatcarGen2ImageConfigTemplate.WithOptions(), - AKSFlatcarArm64Gen2: SIGFlatcarArm64Gen2ImageConfigTemplate.WithOptions(), AKSACLGen2TL: SIGACLGen2TLImageConfigTemplate.WithOptions(), AKSACLArm64Gen2TL: SIGACLArm64Gen2TLImageConfigTemplate.WithOptions(), AKSACLGen2FIPSTL: SIGACLGen2FIPSTLImageConfigTemplate.WithOptions(), diff --git a/vhdbuilder/packer/vhd-image-builder-flatcar-arm64.json b/vhdbuilder/packer/vhd-image-builder-flatcar-arm64.json deleted file mode 100644 index 669a381cce3..00000000000 --- a/vhdbuilder/packer/vhd-image-builder-flatcar-arm64.json +++ /dev/null @@ -1,815 +0,0 @@ -{ - "variables": { - "subscription_id": "{{env `AZURE_SUBSCRIPTION_ID`}}", - "gallery_subscription_id": "{{user `gallery_subscription_id`}}", - "location": "{{env `PACKER_BUILD_LOCATION`}}", - "vm_size": "{{env `AZURE_VM_SIZE`}}", - "build_definition_name": "{{env `BUILD_DEFINITION_NAME`}}", - "build_number": "{{env `BUILD_NUMBER`}}", - "build_id": "{{env `BUILD_ID`}}", - "commit": "{{env `GIT_VERSION`}}", - "feature_flags": "{{env `FEATURE_FLAGS`}}", - "image_version": "{{env `IMAGE_VERSION`}}", - "os_version": "{{env `OS_VERSION`}}", - "sku_name": "{{env `SKU_NAME`}}", - "hyperv_generation": "{{env `HYPERV_GENERATION`}}", - "sig_gallery_name": "{{env `SIG_GALLERY_NAME`}}", - "sig_image_name": "{{env `SIG_IMAGE_NAME`}}", - "sig_image_version": "{{env `SIG_IMAGE_VERSION`}}", - "container_runtime": "{{env `CONTAINER_RUNTIME`}}", - "captured_sig_version": "{{env `${CAPTURED_SIG_VERSION`}}", - "enable_fips": "{{env `ENABLE_FIPS`}}", - "img_publisher": "{{env `IMG_PUBLISHER`}}", - "img_offer": "{{env `IMG_OFFER`}}", - "img_sku": "{{env `IMG_SKU`}}", - "img_version": "{{env `IMG_VERSION`}}", - "vnet_resource_group_name": "{{env `VNET_RESOURCE_GROUP_NAME`}}", - "vnet_name": "{{env `VNET_NAME`}}", - "subnet_name": "{{env `SUBNET_NAME`}}", - "private_packages_url": "{{env `PRIVATE_PACKAGES_URL`}}", - "branch": "{{env `BRANCH`}}", - "vhd_build_timestamp": "{{user `VHD_BUILD_TIMESTAMP`}}" - }, - "builders": [ - { - "custom_data_file": "./vhdbuilder/packer/flatcar-customdata.json", - "type": "azure-arm", - "subscription_id": "{{user `subscription_id`}}", - "virtual_network_resource_group_name": "{{user `vnet_resource_group_name`}}", - "virtual_network_name": "{{user `vnet_name`}}", - "virtual_network_subnet_name": "{{user `subnet_name`}}", - "ssh_read_write_timeout": "5m", - "os_type": "Linux", - "os_disk_size_gb": 60, - "image_publisher": "{{user `img_publisher`}}", - "image_offer": "{{user `img_offer`}}", - "image_sku": "{{user `img_sku`}}", - "image_version": "{{user `img_version`}}", - "azure_tags": { - "buildDefinitionName": "{{user `build_definition_name`}}", - "buildNumber": "{{user `build_number`}}", - "buildId": "{{user `build_id`}}", - "SkipLinuxAzSecPack": "true", - "os": "Linux", - "now": "{{user `create_time`}}", - "createdBy": "aks-vhd-pipeline", - "image_sku": "{{user `img_sku`}}", - "branch": "{{user `branch`}}" - }, - "location": "{{user `location`}}", - "vm_size": "{{user `vm_size`}}", - "use_azure_cli_auth": "true", - "polling_duration_timeout": "1h", - "managed_image_storage_account_type": "Premium_LRS", - "shared_image_gallery_destination": { - "subscription": "{{user `gallery_subscription_id`}}", - "resource_group": "{{user `resource_group_name`}}", - "gallery_name": "{{user `sig_gallery_name`}}", - "image_name": "{{user `sig_image_name`}}", - "image_version": "{{user `captured_sig_version`}}", - "replication_regions": [ - "{{user `location`}}" - ] - }, - "user_assigned_managed_identities": "{{user `msi_resource_strings`}}" - } - ], - "provisioners": [ - { - "type": "shell", - "inline": [ - "sudo mkdir -p /opt/azure/containers", - "sudo mkdir -p /opt/scripts", - "sudo mkdir -p /opt/certs" - ] - }, - { - "type": "file", - "source": "vhdbuilder/lister/bin/lister", - "destination": "/home/packer/lister" - }, - { - "type": "file", - "source": "image-fetcher/bin/image-fetcher-linux-arm64", - "destination": "/home/packer/image-fetcher" - }, - { - "type": "file", - "source": "aks-node-controller/bin/aks-node-controller-linux-arm64", - "destination": "/home/packer/aks-node-controller" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-node-controller.service", - "destination": "/home/packer/aks-node-controller.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-node-controller-wrapper.sh", - "destination": "/home/packer/aks-node-controller-wrapper.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cloud-init-status-check.sh", - "destination": "/home/packer/cloud-init-status-check.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/prefetch.sh", - "destination": "/home/packer/prefetch.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/cleanup-vhd.sh", - "destination": "/home/packer/cleanup-vhd.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/packer_source.sh", - "destination": "/home/packer/packer_source.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_install.sh", - "destination": "/home/packer/provision_installs.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/flatcar/cse_install_flatcar.sh", - "destination": "/home/packer/provision_installs_distro.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_helpers.sh", - "destination": "/home/packer/provision_source.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_benchmark_functions.sh", - "destination": "/home/packer/provision_source_benchmarks.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/flatcar/cse_helpers_flatcar.sh", - "destination": "/home/packer/provision_source_distro.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_config.sh", - "destination": "/home/packer/provision_configs.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_main.sh", - "destination": "/home/packer/provision.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_preload.sh", - "destination": "/home/packer/provision_preload.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_start.sh", - "destination": "/home/packer/provision_start.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/containerd_exec_start.conf", - "destination": "/home/packer/containerd_exec_start.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/kubelet.service", - "destination": "/home/packer/kubelet.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/secure-tls-bootstrap.service", - "destination": "/home/packer/secure-tls-bootstrap.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/reconcile-private-hosts.sh", - "destination": "/home/packer/reconcile-private-hosts.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/block_wireserver.sh", - "destination": "/home/packer/block_wireserver.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ensure_imds_restriction.sh", - "destination": "/home/packer/ensure_imds_restriction.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/measure-tls-bootstrapping-latency.sh", - "destination": "/home/packer/measure-tls-bootstrapping-latency.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/measure-tls-bootstrapping-latency.service", - "destination": "/home/packer/measure-tls-bootstrapping-latency.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/validate-kubelet-credentials.sh", - "destination": "/home/packer/validate-kubelet-credentials.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_redact_cloud_config.py", - "destination": "/home/packer/cse_redact_cloud_config.py" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_send_logs.py", - "destination": "/home/packer/cse_send_logs.py" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/init-aks-custom-cloud.sh", - "destination": "/home/packer/init-aks-custom-cloud.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/reconcile-private-hosts.service", - "destination": "/home/packer/reconcile-private-hosts.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/mig-partition.service", - "destination": "/home/packer/mig-partition.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/bind-mount.sh", - "destination": "/home/packer/bind-mount.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/bind-mount.service", - "destination": "/home/packer/bind-mount.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/enable-dhcpv6.sh", - "destination": "/home/packer/enable-dhcpv6.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/dhcpv6.service", - "destination": "/home/packer/dhcpv6.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/sync-container-logs.sh", - "destination": "/home/packer/sync-container-logs.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/sync-container-logs.service", - "destination": "/home/packer/sync-container-logs.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/crictl.yaml", - "destination": "/home/packer/crictl.yaml" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ensure-no-dup.sh", - "destination": "/home/packer/ensure-no-dup.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ensure-no-dup.service", - "destination": "/home/packer/ensure-no-dup.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/setup-custom-search-domains.sh", - "destination": "/home/packer/setup-custom-search-domains.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ubuntu/ubuntu-snapshot-update.sh", - "destination": "/home/packer/ubuntu-snapshot-update.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ubuntu/snapshot-update.service", - "destination": "/home/packer/snapshot-update.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ubuntu/snapshot-update.timer", - "destination": "/home/packer/snapshot-update.timer" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cis.sh", - "destination": "/home/packer/cis.sh" - }, - { - "type": "file", - "source": "vhdbuilder/scripts/linux/tool_installs.sh", - "destination": "/home/packer/tool_installs.sh" - }, - { - "type": "file", - "source": "vhdbuilder/scripts/linux/flatcar/tool_installs_flatcar.sh", - "destination": "/home/packer/tool_installs_distro.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/pre-install-dependencies.sh", - "destination": "/home/packer/pre-install-dependencies.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/install-dependencies.sh", - "destination": "/home/packer/install-dependencies.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/install-node-exporter.sh", - "destination": "/home/packer/install-node-exporter.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/node-exporter/node-exporter-startup.sh", - "destination": "/home/packer/node-exporter-startup.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/node-exporter/baseline/etc/systemd/system/node-exporter.service", - "destination": "/home/packer/node-exporter.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/node-exporter/baseline/etc/systemd/system/node-exporter-restart.service", - "destination": "/home/packer/node-exporter-restart.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/node-exporter/baseline/etc/systemd/system/node-exporter-restart.path", - "destination": "/home/packer/node-exporter-restart.path" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/node-exporter/baseline/etc/node-exporter.d/web-config.yml", - "destination": "/home/packer/node-exporter-web-config.yml" - }, - { - "type": "file", - "source": "vhdbuilder/packer/generate-disk-usage.sh", - "destination": "/home/packer/generate-disk-usage.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/install-ig.sh", - "destination": "/home/packer/install-ig.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/post-install-dependencies.sh", - "destination": "/home/packer/post-install-dependencies.sh" - }, - { - "type": "file", - "source": "parts/common/components.json", - "destination": "/home/packer/components.json" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/manifest.json", - "destination": "/home/packer/manifest.json" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/sysctl-d-60-CIS.conf", - "destination": "/home/packer/sysctl-d-60-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/sshd_config", - "destination": "/home/packer/sshd_config" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/rsyslog-d-60-CIS.conf", - "destination": "/home/packer/rsyslog-d-60-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/logrotate-d-rsyslog-CIS.conf", - "destination": "/home/packer/logrotate-d-rsyslog-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/etc-issue", - "destination": "/home/packer/etc-issue" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/etc-issue.net", - "destination": "/home/packer/etc-issue.net" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/modprobe-CIS.conf", - "destination": "/home/packer/modprobe-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/faillock-CIS.conf", - "destination": "/home/packer/faillock-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pwquality-CIS.conf", - "destination": "/home/packer/pwquality-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-su", - "destination": "/home/packer/pam-d-su" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-auth", - "destination": "/home/packer/pam-d-common-auth" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-account", - "destination": "/home/packer/pam-d-common-account" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-auth-2204", - "destination": "/home/packer/pam-d-common-auth-2204" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-password", - "destination": "/home/packer/pam-d-common-password" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/profile-d-cis.sh", - "destination": "/home/packer/profile-d-cis.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/profile-d-path.sh", - "destination": "/home/packer/profile-d-path.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/disk_queue.sh", - "destination": "/home/packer/disk_queue.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/disk_queue.service", - "destination": "/home/packer/disk_queue.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-memory-telemetry.sh", - "destination": "/home/packer/cgroup-memory-telemetry.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-memory-telemetry.service", - "destination": "/home/packer/cgroup-memory-telemetry.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-memory-telemetry.timer", - "destination": "/home/packer/cgroup-memory-telemetry.timer" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-pressure-telemetry.sh", - "destination": "/home/packer/cgroup-pressure-telemetry.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-pressure-telemetry.service", - "destination": "/home/packer/cgroup-pressure-telemetry.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-pressure-telemetry.timer", - "destination": "/home/packer/cgroup-pressure-telemetry.timer" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/flatcar/update_certs.service", - "destination": "/home/packer/update_certs.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/update_certs.path", - "destination": "/home/packer/update_certs.path" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/update_certs.sh", - "destination": "/home/packer/update_certs.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ci-syslog-watcher.path", - "destination": "/home/packer/ci-syslog-watcher.path" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ci-syslog-watcher.service", - "destination": "/home/packer/ci-syslog-watcher.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ci-syslog-watcher.sh", - "destination": "/home/packer/ci-syslog-watcher.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-diagnostic.py", - "destination": "/home/packer/aks-diagnostic.py" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-log-collector.sh", - "destination": "/home/packer/aks-log-collector.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-log-collector-send.py", - "destination": "/home/packer/aks-log-collector-send.py" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-log-collector.service", - "destination": "/home/packer/aks-log-collector.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-log-collector.slice", - "destination": "/home/packer/aks-log-collector.slice" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-log-collector.timer", - "destination": "/home/packer/aks-log-collector.timer" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-check-network.sh", - "destination": "/home/packer/aks-check-network.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-check-network.service", - "destination": "/home/packer/aks-check-network.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-logrotate.sh", - "destination": "/home/packer/logrotate.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-logrotate.service", - "destination": "/home/packer/logrotate.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-logrotate.timer", - "destination": "/home/packer/logrotate.timer" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-logrotate-override.conf", - "destination": "/home/packer/override.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-rsyslog", - "destination": "/home/packer/rsyslog" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ipv6_nftables", - "destination": "/home/packer/ipv6_nftables" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ipv6_nftables.service", - "destination": "/home/packer/ipv6_nftables.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ipv6_nftables.sh", - "destination": "/home/packer/ipv6_nftables.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/apt-preferences", - "destination": "/home/packer/apt-preferences" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/kms.service", - "destination": "/home/packer/kms.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/mig-partition.sh", - "destination": "/home/packer/mig-partition.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/docker_clear_mount_propagation_flags.conf", - "destination": "/home/packer/docker_clear_mount_propagation_flags.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/nvidia-modprobe.service", - "destination": "/home/packer/nvidia-modprobe.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/nvidia-docker-daemon.json", - "destination": "/home/packer/nvidia-docker-daemon.json" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-auth", - "destination": "/home/packer/pam-d-common-auth" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-password", - "destination": "/home/packer/pam-d-common-password" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-su", - "destination": "/home/packer/pam-d-su" - }, - { - "type": "file", - "source": "vhdbuilder/notice.txt", - "destination": "/home/packer/NOTICE.txt" - }, - { - "type": "file", - "source": "vhdbuilder/notice_flatcar.txt", - "destination": "/home/packer/NOTICE_FLATCAR.txt" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/localdns.sh", - "destination": "/home/packer/localdns.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/localdns.service", - "destination": "/home/packer/localdns.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/localdns-delegate.conf", - "destination": "/home/packer/localdns-delegate.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/configure-azure-network.sh", - "destination": "/home/packer/configure-azure-network.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/99-azure-network.rules", - "destination": "/home/packer/99-azure-network.rules" - }, - { - "type": "shell", - "inline": [ - "sudo FEATURE_FLAGS={{user `feature_flags`}} BUILD_NUMBER={{user `build_number`}} BUILD_ID={{user `build_id`}} COMMIT={{user `commit`}} HYPERV_GENERATION={{user `hyperv_generation`}} CONTAINER_RUNTIME={{user `container_runtime`}} ENABLE_FIPS={{user `enable_fips`}} IMG_SKU={{user `img_sku`}} VHD_BUILD_TIMESTAMP={{user `vhd_build_timestamp`}} /bin/bash -eux /home/packer/pre-install-dependencies.sh" - ] - }, - { - "type": "shell", - "inline": ": reboot", - "expect_disconnect": true, - "skip_clean": true, - "pause_after": "0s" - }, - { - "type": "shell", - "inline": [ - "sudo FEATURE_FLAGS={{user `feature_flags`}} BUILD_NUMBER={{user `build_number`}} BUILD_ID={{user `build_id`}} COMMIT={{user `commit`}} HYPERV_GENERATION={{user `hyperv_generation`}} CONTAINER_RUNTIME={{user `container_runtime`}} ENABLE_FIPS={{user `enable_fips`}} IMG_SKU={{user `img_sku`}} PRIVATE_PACKAGES_URL={{user `private_packages_url`}} VHD_BUILD_TIMESTAMP={{user `vhd_build_timestamp`}} /bin/bash -eux /home/packer/install-dependencies.sh" - ] - }, - { - "type": "file", - "direction": "download", - "source": "/var/log/bcc_installation.log", - "destination": "bcc-tools-installation.log" - }, - { - "type": "shell", - "inline": [ - "sudo /bin/bash /home/packer/generate-disk-usage.sh" - ] - }, - { - "type": "file", - "direction": "download", - "source": "/opt/azure/disk-usage.txt", - "destination": "disk-usage.txt" - }, - { - "type": "shell", - "inline": [ - "sudo rm /var/log/bcc_installation.log" - ] - }, - { - "type": "shell", - "inline": ": reboot", - "expect_disconnect": true, - "skip_clean": true, - "pause_after": "0s" - }, - { - "type": "shell", - "inline": [ - "sudo FEATURE_FLAGS={{user `feature_flags`}} BUILD_NUMBER={{user `build_number`}} BUILD_ID={{user `build_id`}} COMMIT={{user `commit`}} HYPERV_GENERATION={{user `hyperv_generation`}} CONTAINER_RUNTIME={{user `container_runtime`}} ENABLE_FIPS={{user `enable_fips`}} IMG_SKU={{user `img_sku`}} /bin/bash -eux /home/packer/post-install-dependencies.sh" - ] - }, - { - "type": "file", - "source": "vhdbuilder/packer/list-images.sh", - "destination": "/home/packer/list-images.sh" - }, - { - "type": "shell", - "inline": [ - "sudo SKU_NAME={{user `sku_name`}} IMAGE_VERSION={{user `image_version`}} CONTAINER_RUNTIME={{user `container_runtime`}} /bin/bash -eux /home/packer/list-images.sh" - ] - }, - { - "type": "file", - "direction": "download", - "source": "/opt/azure/containers/image-bom.json", - "destination": "image-bom.json" - }, - { - "type": "file", - "direction": "download", - "source": "/opt/azure/vhd-install.complete", - "destination": "release-notes.txt" - }, - { - "type": "file", - "direction": "download", - "source": "/opt/azure/vhd-build-performance-data.json", - "destination": "vhd-build-performance-data.json" - }, - { - "type": "file", - "direction": "download", - "source": "/opt/azure/vhd-grid-compatibility-data.json", - "destination": "vhd-grid-compatibility-data.json" - }, - { - "type": "shell", - "inline": [ - "sudo rm /opt/azure/vhd-build-performance-data.json", - "sudo rm /opt/azure/vhd-grid-compatibility-data.json" - ] - }, - { - "type": "shell", - "inline": [ - "sudo /bin/bash -eux /home/packer/cis.sh", - "sudo /bin/bash -eux /opt/azure/containers/cleanup-vhd.sh", - "sudo touch /boot/flatcar/first_boot", - "sudo /usr/sbin/waagent -force -deprovision+user && export HISTSIZE=0 && sync || exit 125" - ] - } - ], - "error-cleanup-provisioner": { - "type": "shell", - "inline": [ - "sudo /bin/bash /home/packer/generate-disk-usage.sh" - ] - } -} diff --git a/vhdbuilder/packer/vhd-image-builder-flatcar.json b/vhdbuilder/packer/vhd-image-builder-flatcar.json deleted file mode 100644 index 88f911705de..00000000000 --- a/vhdbuilder/packer/vhd-image-builder-flatcar.json +++ /dev/null @@ -1,820 +0,0 @@ -{ - "variables": { - "subscription_id": "{{env `AZURE_SUBSCRIPTION_ID`}}", - "gallery_subscription_id": "{{user `gallery_subscription_id`}}", - "location": "{{env `PACKER_BUILD_LOCATION`}}", - "vm_size": "{{env `AZURE_VM_SIZE`}}", - "build_definition_name": "{{env `BUILD_DEFINITION_NAME`}}", - "build_number": "{{env `BUILD_NUMBER`}}", - "build_id": "{{env `BUILD_ID`}}", - "commit": "{{env `GIT_VERSION`}}", - "feature_flags": "{{env `FEATURE_FLAGS`}}", - "image_version": "{{env `IMAGE_VERSION`}}", - "os_version": "{{env `OS_VERSION`}}", - "sku_name": "{{env `SKU_NAME`}}", - "hyperv_generation": "{{env `HYPERV_GENERATION`}}", - "sig_gallery_name": "{{env `SIG_GALLERY_NAME`}}", - "sig_image_name": "{{env `SIG_IMAGE_NAME`}}", - "sig_image_version": "{{env `SIG_IMAGE_VERSION`}}", - "container_runtime": "{{env `CONTAINER_RUNTIME`}}", - "captured_sig_version": "{{env `${CAPTURED_SIG_VERSION`}}", - "enable_fips": "{{env `ENABLE_FIPS`}}", - "img_publisher": "{{env `IMG_PUBLISHER`}}", - "img_offer": "{{env `IMG_OFFER`}}", - "img_sku": "{{env `IMG_SKU`}}", - "img_version": "{{env `IMG_VERSION`}}", - "vnet_resource_group_name": "{{env `VNET_RESOURCE_GROUP_NAME`}}", - "vnet_name": "{{env `VNET_NAME`}}", - "subnet_name": "{{env `SUBNET_NAME`}}", - "private_packages_url": "{{env `PRIVATE_PACKAGES_URL`}}", - "branch": "{{env `BRANCH`}}", - "vhd_build_timestamp": "{{user `VHD_BUILD_TIMESTAMP`}}" - }, - "builders": [ - { - "custom_data_file": "./vhdbuilder/packer/flatcar-customdata.json", - "type": "azure-arm", - "subscription_id": "{{user `subscription_id`}}", - "virtual_network_resource_group_name": "{{user `vnet_resource_group_name`}}", - "virtual_network_name": "{{user `vnet_name`}}", - "virtual_network_subnet_name": "{{user `subnet_name`}}", - "ssh_read_write_timeout": "5m", - "os_type": "Linux", - "os_disk_size_gb": 60, - "image_publisher": "{{user `img_publisher`}}", - "image_offer": "{{user `img_offer`}}", - "image_sku": "{{user `img_sku`}}", - "image_version": "{{user `img_version`}}", - "azure_tags": { - "buildDefinitionName": "{{user `build_definition_name`}}", - "buildNumber": "{{user `build_number`}}", - "buildId": "{{user `build_id`}}", - "SkipLinuxAzSecPack": "true", - "os": "Linux", - "now": "{{user `create_time`}}", - "createdBy": "aks-vhd-pipeline", - "image_sku": "{{user `img_sku`}}", - "branch": "{{user `branch`}}" - }, - "location": "{{user `location`}}", - "vm_size": "{{user `vm_size`}}", - "use_azure_cli_auth": "true", - "polling_duration_timeout": "1h", - "managed_image_storage_account_type": "Premium_LRS", - "shared_image_gallery_destination": { - "subscription": "{{user `gallery_subscription_id`}}", - "resource_group": "{{user `resource_group_name`}}", - "gallery_name": "{{user `sig_gallery_name`}}", - "image_name": "{{user `sig_image_name`}}", - "image_version": "{{user `captured_sig_version`}}", - "replication_regions": [ - "{{user `location`}}" - ] - }, - "user_assigned_managed_identities": "{{user `msi_resource_strings`}}" - } - ], - "provisioners": [ - { - "type": "shell", - "inline": [ - "sudo mkdir -p /opt/azure/containers", - "sudo mkdir -p /opt/scripts", - "sudo mkdir -p /opt/certs" - ] - }, - { - "type": "file", - "source": "vhdbuilder/lister/bin/lister", - "destination": "/home/packer/lister" - }, - { - "type": "file", - "source": "image-fetcher/bin/image-fetcher-linux-amd64", - "destination": "/home/packer/image-fetcher" - }, - { - "type": "file", - "source": "aks-node-controller/bin/aks-node-controller-linux-amd64", - "destination": "/home/packer/aks-node-controller" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-node-controller.service", - "destination": "/home/packer/aks-node-controller.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-node-controller-wrapper.sh", - "destination": "/home/packer/aks-node-controller-wrapper.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cloud-init-status-check.sh", - "destination": "/home/packer/cloud-init-status-check.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/prefetch.sh", - "destination": "/home/packer/prefetch.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/cleanup-vhd.sh", - "destination": "/home/packer/cleanup-vhd.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/packer_source.sh", - "destination": "/home/packer/packer_source.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_install.sh", - "destination": "/home/packer/provision_installs.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/flatcar/cse_install_flatcar.sh", - "destination": "/home/packer/provision_installs_distro.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_helpers.sh", - "destination": "/home/packer/provision_source.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_benchmark_functions.sh", - "destination": "/home/packer/provision_source_benchmarks.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/flatcar/cse_helpers_flatcar.sh", - "destination": "/home/packer/provision_source_distro.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_config.sh", - "destination": "/home/packer/provision_configs.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_main.sh", - "destination": "/home/packer/provision.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_preload.sh", - "destination": "/home/packer/provision_preload.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_start.sh", - "destination": "/home/packer/provision_start.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/containerd_exec_start.conf", - "destination": "/home/packer/containerd_exec_start.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/kubelet.service", - "destination": "/home/packer/kubelet.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/secure-tls-bootstrap.service", - "destination": "/home/packer/secure-tls-bootstrap.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/reconcile-private-hosts.sh", - "destination": "/home/packer/reconcile-private-hosts.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/block_wireserver.sh", - "destination": "/home/packer/block_wireserver.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ensure_imds_restriction.sh", - "destination": "/home/packer/ensure_imds_restriction.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/measure-tls-bootstrapping-latency.sh", - "destination": "/home/packer/measure-tls-bootstrapping-latency.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/measure-tls-bootstrapping-latency.service", - "destination": "/home/packer/measure-tls-bootstrapping-latency.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/validate-kubelet-credentials.sh", - "destination": "/home/packer/validate-kubelet-credentials.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_redact_cloud_config.py", - "destination": "/home/packer/cse_redact_cloud_config.py" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cse_send_logs.py", - "destination": "/home/packer/cse_send_logs.py" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/init-aks-custom-cloud.sh", - "destination": "/home/packer/init-aks-custom-cloud.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/reconcile-private-hosts.service", - "destination": "/home/packer/reconcile-private-hosts.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/mig-partition.service", - "destination": "/home/packer/mig-partition.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/bind-mount.sh", - "destination": "/home/packer/bind-mount.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/bind-mount.service", - "destination": "/home/packer/bind-mount.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/enable-dhcpv6.sh", - "destination": "/home/packer/enable-dhcpv6.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/dhcpv6.service", - "destination": "/home/packer/dhcpv6.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/sync-container-logs.sh", - "destination": "/home/packer/sync-container-logs.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/sync-container-logs.service", - "destination": "/home/packer/sync-container-logs.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/crictl.yaml", - "destination": "/home/packer/crictl.yaml" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ensure-no-dup.sh", - "destination": "/home/packer/ensure-no-dup.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ensure-no-dup.service", - "destination": "/home/packer/ensure-no-dup.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/setup-custom-search-domains.sh", - "destination": "/home/packer/setup-custom-search-domains.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ubuntu/ubuntu-snapshot-update.sh", - "destination": "/home/packer/ubuntu-snapshot-update.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ubuntu/snapshot-update.service", - "destination": "/home/packer/snapshot-update.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ubuntu/snapshot-update.timer", - "destination": "/home/packer/snapshot-update.timer" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cis.sh", - "destination": "/home/packer/cis.sh" - }, - { - "type": "file", - "source": "vhdbuilder/scripts/linux/tool_installs.sh", - "destination": "/home/packer/tool_installs.sh" - }, - { - "type": "file", - "source": "vhdbuilder/scripts/linux/flatcar/tool_installs_flatcar.sh", - "destination": "/home/packer/tool_installs_distro.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/pre-install-dependencies.sh", - "destination": "/home/packer/pre-install-dependencies.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/install-dependencies.sh", - "destination": "/home/packer/install-dependencies.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/install-node-exporter.sh", - "destination": "/home/packer/install-node-exporter.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/node-exporter/node-exporter-startup.sh", - "destination": "/home/packer/node-exporter-startup.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/node-exporter/baseline/etc/systemd/system/node-exporter.service", - "destination": "/home/packer/node-exporter.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/node-exporter/baseline/etc/systemd/system/node-exporter-restart.service", - "destination": "/home/packer/node-exporter-restart.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/node-exporter/baseline/etc/systemd/system/node-exporter-restart.path", - "destination": "/home/packer/node-exporter-restart.path" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/node-exporter/baseline/etc/node-exporter.d/web-config.yml", - "destination": "/home/packer/node-exporter-web-config.yml" - }, - { - "type": "file", - "source": "vhdbuilder/packer/generate-disk-usage.sh", - "destination": "/home/packer/generate-disk-usage.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/install-ig.sh", - "destination": "/home/packer/install-ig.sh" - }, - { - "type": "file", - "source": "vhdbuilder/packer/post-install-dependencies.sh", - "destination": "/home/packer/post-install-dependencies.sh" - }, - { - "type": "file", - "source": "parts/common/components.json", - "destination": "/home/packer/components.json" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/manifest.json", - "destination": "/home/packer/manifest.json" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/sysctl-d-60-CIS.conf", - "destination": "/home/packer/sysctl-d-60-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/sshd_config", - "destination": "/home/packer/sshd_config" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/sshd_config_2204_fips", - "destination": "/home/packer/sshd_config_2204_fips" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/rsyslog-d-60-CIS.conf", - "destination": "/home/packer/rsyslog-d-60-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/logrotate-d-rsyslog-CIS.conf", - "destination": "/home/packer/logrotate-d-rsyslog-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/etc-issue", - "destination": "/home/packer/etc-issue" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/etc-issue.net", - "destination": "/home/packer/etc-issue.net" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/modprobe-CIS.conf", - "destination": "/home/packer/modprobe-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/faillock-CIS.conf", - "destination": "/home/packer/faillock-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pwquality-CIS.conf", - "destination": "/home/packer/pwquality-CIS.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-su", - "destination": "/home/packer/pam-d-su" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-auth", - "destination": "/home/packer/pam-d-common-auth" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-account", - "destination": "/home/packer/pam-d-common-account" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-auth-2204", - "destination": "/home/packer/pam-d-common-auth-2204" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-password", - "destination": "/home/packer/pam-d-common-password" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/profile-d-cis.sh", - "destination": "/home/packer/profile-d-cis.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/profile-d-path.sh", - "destination": "/home/packer/profile-d-path.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/disk_queue.sh", - "destination": "/home/packer/disk_queue.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/disk_queue.service", - "destination": "/home/packer/disk_queue.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-memory-telemetry.sh", - "destination": "/home/packer/cgroup-memory-telemetry.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-memory-telemetry.service", - "destination": "/home/packer/cgroup-memory-telemetry.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-memory-telemetry.timer", - "destination": "/home/packer/cgroup-memory-telemetry.timer" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-pressure-telemetry.sh", - "destination": "/home/packer/cgroup-pressure-telemetry.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-pressure-telemetry.service", - "destination": "/home/packer/cgroup-pressure-telemetry.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/cgroup-pressure-telemetry.timer", - "destination": "/home/packer/cgroup-pressure-telemetry.timer" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/flatcar/update_certs.service", - "destination": "/home/packer/update_certs.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/update_certs.path", - "destination": "/home/packer/update_certs.path" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/update_certs.sh", - "destination": "/home/packer/update_certs.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ci-syslog-watcher.path", - "destination": "/home/packer/ci-syslog-watcher.path" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ci-syslog-watcher.service", - "destination": "/home/packer/ci-syslog-watcher.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ci-syslog-watcher.sh", - "destination": "/home/packer/ci-syslog-watcher.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-diagnostic.py", - "destination": "/home/packer/aks-diagnostic.py" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-log-collector.sh", - "destination": "/home/packer/aks-log-collector.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-log-collector-send.py", - "destination": "/home/packer/aks-log-collector-send.py" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-log-collector.service", - "destination": "/home/packer/aks-log-collector.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-log-collector.slice", - "destination": "/home/packer/aks-log-collector.slice" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-log-collector.timer", - "destination": "/home/packer/aks-log-collector.timer" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-check-network.sh", - "destination": "/home/packer/aks-check-network.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-check-network.service", - "destination": "/home/packer/aks-check-network.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-logrotate.sh", - "destination": "/home/packer/logrotate.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-logrotate.service", - "destination": "/home/packer/logrotate.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-logrotate.timer", - "destination": "/home/packer/logrotate.timer" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-logrotate-override.conf", - "destination": "/home/packer/override.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/aks-rsyslog", - "destination": "/home/packer/rsyslog" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ipv6_nftables", - "destination": "/home/packer/ipv6_nftables" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ipv6_nftables.service", - "destination": "/home/packer/ipv6_nftables.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/ipv6_nftables.sh", - "destination": "/home/packer/ipv6_nftables.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/apt-preferences", - "destination": "/home/packer/apt-preferences" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/kms.service", - "destination": "/home/packer/kms.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/mig-partition.sh", - "destination": "/home/packer/mig-partition.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/docker_clear_mount_propagation_flags.conf", - "destination": "/home/packer/docker_clear_mount_propagation_flags.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/nvidia-modprobe.service", - "destination": "/home/packer/nvidia-modprobe.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/nvidia-docker-daemon.json", - "destination": "/home/packer/nvidia-docker-daemon.json" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-auth", - "destination": "/home/packer/pam-d-common-auth" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-common-password", - "destination": "/home/packer/pam-d-common-password" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/pam-d-su", - "destination": "/home/packer/pam-d-su" - }, - { - "type": "file", - "source": "vhdbuilder/notice.txt", - "destination": "/home/packer/NOTICE.txt" - }, - { - "type": "file", - "source": "vhdbuilder/notice_flatcar.txt", - "destination": "/home/packer/NOTICE_FLATCAR.txt" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/localdns.sh", - "destination": "/home/packer/localdns.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/localdns.service", - "destination": "/home/packer/localdns.service" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/localdns-delegate.conf", - "destination": "/home/packer/localdns-delegate.conf" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/configure-azure-network.sh", - "destination": "/home/packer/configure-azure-network.sh" - }, - { - "type": "file", - "source": "parts/linux/cloud-init/artifacts/99-azure-network.rules", - "destination": "/home/packer/99-azure-network.rules" - }, - { - "type": "shell", - "inline": [ - "sudo FEATURE_FLAGS={{user `feature_flags`}} BUILD_NUMBER={{user `build_number`}} BUILD_ID={{user `build_id`}} COMMIT={{user `commit`}} HYPERV_GENERATION={{user `hyperv_generation`}} CONTAINER_RUNTIME={{user `container_runtime`}} ENABLE_FIPS={{user `enable_fips`}} IMG_SKU={{user `img_sku`}} VHD_BUILD_TIMESTAMP={{user `vhd_build_timestamp`}} /bin/bash -eux /home/packer/pre-install-dependencies.sh" - ] - }, - { - "type": "shell", - "inline": ": reboot", - "expect_disconnect": true, - "skip_clean": true, - "pause_after": "0s" - }, - { - "type": "shell", - "inline": [ - "sudo FEATURE_FLAGS={{user `feature_flags`}} BUILD_NUMBER={{user `build_number`}} BUILD_ID={{user `build_id`}} COMMIT={{user `commit`}} HYPERV_GENERATION={{user `hyperv_generation`}} CONTAINER_RUNTIME={{user `container_runtime`}} ENABLE_FIPS={{user `enable_fips`}} IMG_SKU={{user `img_sku`}} PRIVATE_PACKAGES_URL={{user `private_packages_url`}} VHD_BUILD_TIMESTAMP={{user `vhd_build_timestamp`}} /bin/bash -eux /home/packer/install-dependencies.sh" - ] - }, - { - "type": "file", - "direction": "download", - "source": "/var/log/bcc_installation.log", - "destination": "bcc-tools-installation.log" - }, - { - "type": "shell", - "inline": [ - "sudo /bin/bash /home/packer/generate-disk-usage.sh" - ] - }, - { - "type": "file", - "direction": "download", - "source": "/opt/azure/disk-usage.txt", - "destination": "disk-usage.txt" - }, - { - "type": "shell", - "inline": [ - "sudo rm /var/log/bcc_installation.log" - ] - }, - { - "type": "shell", - "inline": ": reboot", - "expect_disconnect": true, - "skip_clean": true, - "pause_after": "0s" - }, - { - "type": "shell", - "inline": [ - "sudo FEATURE_FLAGS={{user `feature_flags`}} BUILD_NUMBER={{user `build_number`}} BUILD_ID={{user `build_id`}} COMMIT={{user `commit`}} HYPERV_GENERATION={{user `hyperv_generation`}} CONTAINER_RUNTIME={{user `container_runtime`}} ENABLE_FIPS={{user `enable_fips`}} IMG_SKU={{user `img_sku`}} /bin/bash -eux /home/packer/post-install-dependencies.sh" - ] - }, - { - "type": "file", - "source": "vhdbuilder/packer/list-images.sh", - "destination": "/home/packer/list-images.sh" - }, - { - "type": "shell", - "inline": [ - "sudo SKU_NAME={{user `sku_name`}} IMAGE_VERSION={{user `image_version`}} CONTAINER_RUNTIME={{user `container_runtime`}} /bin/bash -eux /home/packer/list-images.sh" - ] - }, - { - "type": "file", - "direction": "download", - "source": "/opt/azure/containers/image-bom.json", - "destination": "image-bom.json" - }, - { - "type": "file", - "direction": "download", - "source": "/opt/azure/vhd-install.complete", - "destination": "release-notes.txt" - }, - { - "type": "file", - "direction": "download", - "source": "/opt/azure/vhd-build-performance-data.json", - "destination": "vhd-build-performance-data.json" - }, - { - "type": "file", - "direction": "download", - "source": "/opt/azure/vhd-grid-compatibility-data.json", - "destination": "vhd-grid-compatibility-data.json" - }, - { - "type": "shell", - "inline": [ - "sudo rm /opt/azure/vhd-build-performance-data.json", - "sudo rm /opt/azure/vhd-grid-compatibility-data.json" - ] - }, - { - "type": "shell", - "inline": [ - "sudo /bin/bash -eux /home/packer/cis.sh", - "sudo /bin/bash -eux /opt/azure/containers/cleanup-vhd.sh", - "sudo touch /boot/flatcar/first_boot", - "sudo /usr/sbin/waagent -force -deprovision+user && export HISTSIZE=0 && sync || exit 125" - ] - } - ], - "error-cleanup-provisioner": { - "type": "shell", - "inline": [ - "sudo /bin/bash /home/packer/generate-disk-usage.sh" - ] - } -}