Golden Images Pipeline: Building Templates Like a Factory

packer {
  required_plugins {
    proxmox = {
      version = ">= 1.1.0"
      source  = "github.com/hashicorp/proxmox"
    }
  }
}

source "proxmox-iso" "ubuntu-2404" {
  # Proxmox connection
  proxmox_url              = var.proxmox_url
  username                 = var.proxmox_username
  token                    = var.proxmox_token
  node                     = var.proxmox_node
  insecure_skip_tls_verify = true

  # VM settings
  vm_id   = var.vm_id
  vm_name = "ubuntu-2404-v${var.version}"

  # ISO (get checksum from releases.ubuntu.com)
  iso_url          = "https://releases.ubuntu.com/24.04/ubuntu-24.04-live-server-amd64.iso"
  iso_checksum     = "sha256:YOUR_CHECKSUM_HERE"  # Get from SHA256SUMS file
  iso_storage_pool = "local"
  unmount_iso      = true

  # Hardware
  cores    = 2
  memory   = 2048
  cpu_type = "host"

  # Disk
  scsi_controller = "virtio-scsi-pci"
  disks {
    disk_size    = "32G"
    storage_pool = var.storage_pool
    type         = "scsi"
  }

  # Network
  network_adapters {
    model  = "virtio"
    bridge = "vmbr0"
  }

  # Cloud-init
  cloud_init              = true
  cloud_init_storage_pool = var.storage_pool

  # Boot
  boot_command = [
    "<esc><wait>",
    "e<wait>",
    "<down><down><down><end>",
    " autoinstall ds=nocloud-net;s=http://{{ .HTTPIP }}:{{ .HTTPPort }}/",
    "<f10>"
  ]

  boot_wait = "5s"

  # HTTP server for autoinstall
  http_directory = "http"

  # SSH
  ssh_username = "packer"
  ssh_password = "packer"
  ssh_timeout  = "20m"

  # Template
  template_name        = "ubuntu-2404-v${var.version}"
  template_description = "Ubuntu 24.04 LTS - Built ${timestamp()}"
}

build {
  sources = ["source.proxmox-iso.ubuntu-2404"]

  # Base configuration
  provisioner "shell" {
    scripts = [
      "scripts/base.sh",
      "../../common/scripts/common-packages.sh"
    ]
  }

  # Copy files
  provisioner "file" {
    source      = "../../common/files/motd"
    destination = "/tmp/motd"
  }

  provisioner "shell" {
    inline = ["sudo mv /tmp/motd /etc/motd"]
  }

  # Cleanup
  provisioner "shell" {
    scripts = [
      "scripts/cleanup.sh",
      "scripts/cloud-init.sh"
    ]
  }
}

variable "proxmox_url" {
  type    = string
  default = "https://proxmox.lab.local:8006/api2/json"
}

variable "proxmox_username" {
  type    = string
  default = "packer@pve!automation"
}

variable "proxmox_token" {
  type      = string
  sensitive = true
}

variable "proxmox_node" {
  type    = string
  default = "pve1"
}

variable "vm_id" {
  type    = number
  default = 9000
}

variable "storage_pool" {
  type    = string
  default = "local-zfs"
}

variable "version" {
  type    = string
  default = "1"
}

#!/bin/bash
set -ex

# Wait for cloud-init
cloud-init status --wait

# Update system
sudo apt update
sudo apt upgrade -y

# Install packages
sudo apt install -y \
  qemu-guest-agent \
  vim \
  htop \
  curl \
  wget \
  git \
  jq \
  unzip

# Enable guest agent
sudo systemctl enable qemu-guest-agent

#!/bin/bash
set -ex

# Clean apt
sudo apt autoremove -y
sudo apt clean

# Clean logs
sudo journalctl --rotate
sudo journalctl --vacuum-time=1s
sudo rm -rf /var/log/*.log
sudo rm -rf /var/log/*.gz

# Clean temp
sudo rm -rf /tmp/*
sudo rm -rf /var/tmp/*

# Clean SSH keys (regenerate on first boot)
sudo rm -f /etc/ssh/ssh_host_*

# Clean machine-id
sudo truncate -s 0 /etc/machine-id
sudo rm -f /var/lib/dbus/machine-id

# Clean history
history -c
sudo rm -f /root/.bash_history
sudo rm -f /home/*/.bash_history

#!/bin/bash
set -ex

# Reset cloud-init
sudo cloud-init clean

# Remove network config (cloud-init will regenerate)
sudo rm -f /etc/netplan/*.yaml

# The template is now ready
echo "Template preparation complete"

source "proxmox-clone" "ubuntu-2404" {
  # Clone from uploaded cloud image
  clone_vm = "ubuntu-2404-cloud-base"

  # ... rest of config
}

stages:
  - validate
  - build
  - test

variables:
  PACKER_VERSION: "1.10.0"

validate:
  stage: validate
  script:
    - packer init templates/ubuntu-2404/
    - packer validate templates/ubuntu-2404/

build:
  stage: build
  script:
    - packer build -var "version=${CI_PIPELINE_IID}" templates/ubuntu-2404/
  only:
    - main

test:
  stage: test
  script:
    - ./scripts/test-template.sh ubuntu-2404-v${CI_PIPELINE_IID}
  only:
    - main

name: Build Template

on:
  push:
    branches: [main]
    paths:
      - 'templates/**'

jobs:
  build:
    runs-on: self-hosted  # Need access to Proxmox
    steps:
      - uses: actions/checkout@v4

      - name: Setup Packer
        uses: hashicorp/setup-packer@main
        with:
          version: "1.10.0"

      - name: Init Packer
        run: packer init templates/ubuntu-2404/

      - name: Build Template
        env:
          PKR_VAR_proxmox_token: ${{ secrets.PROXMOX_TOKEN }}
        run: |
          packer build -var "version=${{ github.run_number }}" templates/ubuntu-2404/

#!/bin/bash
TEMPLATE=$1
TEST_VM_ID=9999

echo "Testing template: ${TEMPLATE}"

# Clone template
qm clone $(qm list | grep "${TEMPLATE}" | awk '{print $1}') ${TEST_VM_ID} --name "template-test"

# Configure cloud-init
qm set ${TEST_VM_ID} --ciuser test --sshkeys ~/.ssh/id_ed25519.pub
qm set ${TEST_VM_ID} --ipconfig0 ip=dhcp

# Start VM
qm start ${TEST_VM_ID}

# Wait for boot
sleep 60

# Get IP
IP=$(qm guest cmd ${TEST_VM_ID} network-get-interfaces | jq -r '.[1]["ip-addresses"][0]["ip-address"]')

# Run tests
echo "Testing SSH..."
ssh -o StrictHostKeyChecking=no test@${IP} "echo 'SSH OK'"

echo "Testing packages..."
ssh test@${IP} "which vim htop curl git"

echo "Testing guest agent..."
qm agent ${TEST_VM_ID} ping

# Cleanup
qm stop ${TEST_VM_ID}
qm destroy ${TEST_VM_ID}

echo "All tests passed!"