.
This commit is contained in:
parent
2cfb3b180f
commit
ae8633767a
@ -3,6 +3,8 @@ checksum_url = "https://geo.mirror.pkgbuild.com/images/latest/Arch-Linux-x8
|
|||||||
|
|
||||||
host_ssh_user = "michael"
|
host_ssh_user = "michael"
|
||||||
host_ssh_address = "server.balsillie.net"
|
host_ssh_address = "server.balsillie.net"
|
||||||
|
host_ssh_private_key = "/home/michael/.ssh/conf.d/home/michael_server_copy.key"
|
||||||
|
host_ssh_known_hosts = "/home/michael/.ssh/known_hosts_server"
|
||||||
|
|
||||||
guest_hostname = "arch-minimal-template"
|
guest_hostname = "arch-minimal-template"
|
||||||
cpu_count = 2
|
cpu_count = 2
|
||||||
@ -12,7 +14,7 @@ arch = "x86_64"
|
|||||||
chipset = "pc-q35-6.1"
|
chipset = "pc-q35-6.1"
|
||||||
loader_type = "pflash"
|
loader_type = "pflash"
|
||||||
loader_path = "/usr/share/edk2-ovmf/x64/OVMF_CODE.secboot.fd"
|
loader_path = "/usr/share/edk2-ovmf/x64/OVMF_CODE.secboot.fd"
|
||||||
secure_boot = true
|
secure_boot = false
|
||||||
nvram_template = "/usr/share/edk2-ovmf/x64/OVMF_VARS.fd"
|
nvram_template = "/usr/share/edk2-ovmf/x64/OVMF_VARS.fd"
|
||||||
nvram_path_base = "/var/lib/libvirt/qemu/nvram"
|
nvram_path_base = "/var/lib/libvirt/qemu/nvram"
|
||||||
|
|
||||||
@ -26,7 +28,7 @@ ssh_source = "192.168.20.0/24"
|
|||||||
|
|
||||||
guest_ssh_user = "arch"
|
guest_ssh_user = "arch"
|
||||||
guest_ssh_port = 22
|
guest_ssh_port = 22
|
||||||
guest_ssh_private_key = "~/.ssh/conf.d/home/arch@arch_template.key"
|
guest_ssh_private_key = "/home/michael/.ssh/conf.d/home/arch@arch_template.key"
|
||||||
guest_ssh_public_key = "~/.ssh/conf.d/home/arch@arch_template.key.pub"
|
guest_ssh_public_key = "~/.ssh/conf.d/home/arch@arch_template.key.pub"
|
||||||
|
|
||||||
network_address = "192.168.21.200/24"
|
network_address = "192.168.21.200/24"
|
||||||
|
@ -25,8 +25,8 @@ data "http" "image_checksum" {
|
|||||||
}
|
}
|
||||||
|
|
||||||
locals {
|
locals {
|
||||||
image_checksum = split(" ",data.http.image_checksum)[0]
|
image_checksum = split(" ",data.http.image_checksum.body)[0]
|
||||||
libvirt_uri = "qemu+ssh://${var.host_ssh_user}@${var.host_ssh_address}/system"
|
libvirt_uri = "qemu+ssh://${var.host_ssh_user}@${var.host_ssh_address}/system?keyfile=${var.host_ssh_private_key}&no_verify=1"
|
||||||
nvram_path = "${var.nvram_path_base}/${var.guest_hostname}_VARS.fd"
|
nvram_path = "${var.nvram_path_base}/${var.guest_hostname}_VARS.fd"
|
||||||
cidata_name = "${var.volume_name}_cidata"
|
cidata_name = "${var.volume_name}_cidata"
|
||||||
}
|
}
|
||||||
@ -47,8 +47,10 @@ source "libvirt" "arch-minimal" {
|
|||||||
chipset = var.chipset
|
chipset = var.chipset
|
||||||
loader_type = var.loader_type
|
loader_type = var.loader_type
|
||||||
loader_path = var.loader_path
|
loader_path = var.loader_path
|
||||||
nvram_template = var.nvmram_template
|
// nvram_template = var.nvram_template
|
||||||
nvram_path = local.nvram_path
|
// nvram_path = local.nvram_path
|
||||||
|
nvram_template = local.nvram_path
|
||||||
|
nvram_path = var.nvram_template
|
||||||
secure_boot = var.secure_boot
|
secure_boot = var.secure_boot
|
||||||
|
|
||||||
volume {
|
volume {
|
||||||
@ -65,6 +67,7 @@ source "libvirt" "arch-minimal" {
|
|||||||
type = "external"
|
type = "external"
|
||||||
urls = [var.image_url]
|
urls = [var.image_url]
|
||||||
checksum = local.image_checksum
|
checksum = local.image_checksum
|
||||||
|
// checksum = "f237ada9ba61431f6aebb066d2b3f0b5b432ea21da6034d98248725df1417545"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -77,19 +80,19 @@ source "libvirt" "arch-minimal" {
|
|||||||
type = "cloud-init"
|
type = "cloud-init"
|
||||||
|
|
||||||
meta_data = jsonencode({
|
meta_data = jsonencode({
|
||||||
"instance-id" = ${var.guest_hostname}
|
"instance-id" = "${var.guest_hostname}"
|
||||||
"hostname" = ${var.guest_hostname}
|
"hostname" = "${var.guest_hostname}"
|
||||||
})
|
})
|
||||||
|
|
||||||
user_data = format("#cloud-config\n%s", jsonencode({
|
user_data = format("#cloud-config\n%s", jsonencode({
|
||||||
"packages" = [
|
"packages" = [
|
||||||
"qemu-guest-agent",
|
"qemu-guest-agent",
|
||||||
"ufw"
|
"ufw"
|
||||||
]
|
]
|
||||||
"runcmd" = [
|
"runcmd" = [
|
||||||
["systemctl", "enable", "--now", "qemu-guest-agent"],
|
["systemctl", "enable", "--now", "qemu-guest-agent"],
|
||||||
["ufw", "enable"],
|
["ufw", "enable"],
|
||||||
["ufw", "allow", "from", ${var.ssh_source}, "to", "port", "22", "proto", "tcp"],
|
["ufw", "allow", "from", "${var.ssh_source}", "to", "port", "22", "proto", "tcp"],
|
||||||
["systemctl", "enable", "--now", "ufw"]
|
["systemctl", "enable", "--now", "ufw"]
|
||||||
]
|
]
|
||||||
}))
|
}))
|
||||||
@ -103,16 +106,15 @@ source "libvirt" "arch-minimal" {
|
|||||||
name = "en*"
|
name = "en*"
|
||||||
}
|
}
|
||||||
dhcp4 = false
|
dhcp4 = false
|
||||||
addresses = [${var.network_address}]
|
addresses = ["${var.network_address}"]
|
||||||
gateway4 = ${var.network_gateway}
|
gateway4 = "${var.network_gateway}"
|
||||||
nameservers = {
|
nameservers = {
|
||||||
addresses = [${var.network_nameserver}]
|
addresses = ["${var.network_nameserver}"]
|
||||||
search = [${var.network_domain}]
|
search = ["${var.network_domain}"]
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
})
|
})
|
||||||
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -127,14 +129,14 @@ source "libvirt" "arch-minimal" {
|
|||||||
network_address_source = "agent"
|
network_address_source = "agent"
|
||||||
|
|
||||||
graphics {
|
graphics {
|
||||||
type = "spice"
|
type = "vnc"
|
||||||
port = 5900
|
port = 5902
|
||||||
}
|
}
|
||||||
|
|
||||||
communicator {
|
communicator {
|
||||||
ssh_username = var.guest_ssh_user
|
ssh_username = var.guest_ssh_user
|
||||||
ssh_port = var.guest_ssh_port
|
ssh_port = var.guest_ssh_port
|
||||||
ssh_private_key = var.guest_ssh_private_key
|
ssh_private_key_file = var.guest_ssh_private_key
|
||||||
}
|
}
|
||||||
communicator_interface = "default-network"
|
communicator_interface = "default-network"
|
||||||
}
|
}
|
||||||
|
@ -91,6 +91,7 @@ variable "guest_ssh_pass" {
|
|||||||
type = string
|
type = string
|
||||||
sensitive = true
|
sensitive = true
|
||||||
description = "Password for SSH connection to the guest VM."
|
description = "Password for SSH connection to the guest VM."
|
||||||
|
default = "placeholder"
|
||||||
}
|
}
|
||||||
|
|
||||||
variable "guest_ssh_port" {
|
variable "guest_ssh_port" {
|
||||||
@ -119,14 +120,24 @@ variable "ssh_source" {
|
|||||||
description = "The subnet that will be added to the firewall SSH exception during cloud-init."
|
description = "The subnet that will be added to the firewall SSH exception during cloud-init."
|
||||||
}
|
}
|
||||||
|
|
||||||
|
variable "host_ssh_user" {
|
||||||
|
type = string
|
||||||
|
description = "The user to connect to the hypervisor as, used to construct the libvirt URI."
|
||||||
|
}
|
||||||
|
|
||||||
variable "host_ssh_address" {
|
variable "host_ssh_address" {
|
||||||
type = string
|
type = string
|
||||||
description = "The address of the hypervisor, used to construct the libvirt URI."
|
description = "The address of the hypervisor, used to construct the libvirt URI."
|
||||||
}
|
}
|
||||||
|
|
||||||
variable "host_ssh_user" {
|
variable "host_ssh_private_key" {
|
||||||
type = string
|
type = string
|
||||||
description = "The user to connect to the hypervisor as, used to construct the libvirt URI."
|
description = "File path to the SSH key used to authenticate to the hypervisor host."
|
||||||
|
}
|
||||||
|
|
||||||
|
variable "host_ssh_known_hosts" {
|
||||||
|
type = string
|
||||||
|
description = "File path to the known_hosts file for validating the hypervisor host connection."
|
||||||
}
|
}
|
||||||
|
|
||||||
variable "network_address" {
|
variable "network_address" {
|
||||||
|
Loading…
Reference in New Issue
Block a user