mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
74 lines
2.1 KiB
HCL
74 lines
2.1 KiB
HCL
# apparmor.d - Full set of apparmor profiles
|
|
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
build {
|
|
sources = [
|
|
"source.qemu.archlinux",
|
|
"source.qemu.debian",
|
|
"source.qemu.fedora",
|
|
"source.qemu.opensuse",
|
|
"source.qemu.ubuntu22",
|
|
"source.qemu.ubuntu24",
|
|
]
|
|
|
|
# Upload local files
|
|
provisioner "file" {
|
|
destination = "/tmp"
|
|
sources = ["${path.cwd}/packer/src"]
|
|
}
|
|
|
|
provisioner "file" {
|
|
only = ["qemu.archlinux"]
|
|
destination = "/tmp/src/"
|
|
sources = [
|
|
"${path.cwd}/../.pkg/apparmor.d-${var.version}-1-x86_64.pkg.tar.zst",
|
|
]
|
|
}
|
|
|
|
provisioner "file" {
|
|
only = ["qemu.opensuse"]
|
|
destination = "/tmp/src/"
|
|
sources = ["${path.cwd}/../apparmor.d-${var.version}-1.x86_64.rpm"]
|
|
}
|
|
|
|
provisioner "file" {
|
|
only = ["qemu.debian", "qemu.ubuntu22", "qemu.ubuntu24"]
|
|
destination = "/tmp/src/"
|
|
sources = ["${path.cwd}/../apparmor.d_${var.version}-1_amd64.deb"]
|
|
}
|
|
|
|
# Wait for cloud-init to finish
|
|
provisioner "shell" {
|
|
except = ["qemu.opensuse"]
|
|
execute_command = "echo '${var.password}' | sudo -S sh -c '{{ .Vars }} {{ .Path }}'"
|
|
inline = [
|
|
"while [ ! -f /var/lib/cloud/instance/boot-finished ]; do echo 'Waiting for Cloud-Init...'; sleep 20; done",
|
|
"cloud-init clean", # Remove logs and artifacts so cloud-init can re-run
|
|
]
|
|
}
|
|
|
|
# Install local files and config
|
|
provisioner "shell" {
|
|
script = "${path.cwd}/packer/init/init.sh"
|
|
execute_command = "echo '${var.password}' | sudo -S sh -c '{{ .Vars }} {{ .Path }}'"
|
|
}
|
|
|
|
# Minimize the image
|
|
provisioner "shell" {
|
|
script = "${path.cwd}/packer/init/clean.sh"
|
|
execute_command = "echo '${var.password}' | sudo -S sh -c '{{ .Vars }} {{ .Path }}'"
|
|
}
|
|
|
|
post-processor "vagrant" {
|
|
output = "${var.base_dir}/packer_${var.prefix}${source.name}-${var.flavor}.box"
|
|
}
|
|
|
|
post-processor "shell-local" {
|
|
inline = [
|
|
"vagrant box add --force --name ${var.prefix}${source.name}-${var.flavor} ${var.base_dir}/packer_${var.prefix}${source.name}-${var.flavor}.box"
|
|
]
|
|
}
|
|
|
|
}
|