-
Notifications
You must be signed in to change notification settings - Fork 166
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: add Packer Orka template for macos13 arm test
- Related: #3686 - Updated documentation with the new environmental variables - Added Packer template for Orka MacOS 13 ARM test - Updated CI to use all the expected environmental variables
- Loading branch information
1 parent
b008503
commit 344abfd
Showing
3 changed files
with
139 additions
and
10 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,123 @@ | ||
| variable "orka_endpoint" { | ||
| type = string | ||
| default = "" | ||
| } | ||
|
|
||
| variable "orka_auth_token" { | ||
| type = string | ||
| default = "" | ||
| } | ||
|
|
||
| variable "ssh_default_username" { | ||
| type = string | ||
| default = "" | ||
| } | ||
|
|
||
| variable "ssh_default_password" { | ||
| type = string | ||
| default = "" | ||
| } | ||
|
|
||
| variable "ssh_test_public_key" { | ||
| type = string | ||
| default = "" | ||
| } | ||
|
|
||
| variable "ssh_test_password" { | ||
| type = string | ||
| default = "" | ||
| } | ||
|
|
||
| packer { | ||
| required_plugins { | ||
| macstadium-orka = { | ||
| version = "~> 3.0" | ||
| source = "github.com/macstadium/macstadium-orka" | ||
| } | ||
| } | ||
| } | ||
|
|
||
| source "macstadium-orka" "macos13-arm-test-image" { | ||
| source_image = "macos13-arm-base.orkasi" | ||
| image_name = "macos13-arm-test-latest.orkasi" | ||
| image_description = "The MacOS 13 ARM test image" | ||
| orka_endpoint = var.orka_endpoint | ||
| orka_auth_token = var.orka_auth_token | ||
| ssh_username = var.ssh_default_username | ||
| ssh_password = var.ssh_default_password | ||
| } | ||
|
|
||
| build { | ||
| sources = [ | ||
| "macstadium-orka.macos13-arm-test-image" | ||
| ] | ||
| // Change the password of the default user. | ||
| provisioner "shell" { | ||
| inline = [ | ||
| "echo 'Changing default user password...'", | ||
| "sudo sysadminctl -adminUser ${var.ssh_default_username} -adminPassword ${var.ssh_default_password} -resetPasswordFor ${var.ssh_default_username} -newPassword ${var.ssh_test_password}" | ||
| ] | ||
| } | ||
| // Add SSH key access. | ||
| provisioner "shell" { | ||
| inline = [ | ||
| "echo 'Adding SSH key access...'", | ||
| "mkdir -p /Users/${var.ssh_default_username}/.ssh", | ||
| "echo '${var.ssh_test_public_key}' >> /Users/${var.ssh_default_username}/.ssh/authorized_keys", | ||
| "chown -R ${var.ssh_default_username}:staff /Users/${var.ssh_default_username}/.ssh", | ||
| "chmod 700 /Users/${var.ssh_default_username}/.ssh", | ||
| "chmod 600 /Users/${var.ssh_default_username}/.ssh/authorized_keys" | ||
| ] | ||
| } | ||
|
|
||
| // Disable SSH password authentication. | ||
| // @TODO: Review fallback to password authentication. | ||
| provisioner "shell" { | ||
| inline = [ | ||
| "echo 'Disabling SSH password authentication...'", | ||
| "sudo sed -i '' 's/^#PasswordAuthentication yes/PasswordAuthentication no/' /etc/ssh/sshd_config", | ||
| "sudo sed -i '' 's/^PasswordAuthentication yes/PasswordAuthentication no/' /etc/ssh/sshd_config", | ||
| "sudo sed -i '' 's/^#ChallengeResponseAuthentication yes/ChallengeResponseAuthentication no/' /etc/ssh/sshd_config", | ||
| "sudo sed -i '' 's/^ChallengeResponseAuthentication yes/ChallengeResponseAuthentication no/' /etc/ssh/sshd_config", | ||
| "sudo systemsetup -f -setremotelogin on", | ||
| "sudo launchctl unload /System/Library/LaunchDaemons/ssh.plist", | ||
| "sudo launchctl load /System/Library/LaunchDaemons/ssh.plist", | ||
| ] | ||
| } | ||
|
|
||
| // Install Homebrew. | ||
| provisioner "shell" { | ||
| inline = [ | ||
| "echo 'Installing Homebrew...'", | ||
| "/bin/bash -c \"$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)\"", | ||
| "eval \"$(/opt/homebrew/bin/brew shellenv)\"", | ||
| "(echo; echo 'eval \"$($(brew --prefix)/bin/brew shellenv)\"') >> /Users/admin/.zprofile", | ||
| "eval \"$($(brew --prefix)/bin/brew shellenv)\"" | ||
| ] | ||
| } | ||
| // Check Homebrew. Ignore errors because we are not using the last version of Xcode. | ||
| provisioner "shell" { | ||
| inline = [ | ||
| "echo 'Checking Homebrew...'", | ||
| "eval \"$(/opt/homebrew/bin/brew shellenv)\"", | ||
| "/opt/homebrew/bin/brew doctor || true" | ||
| ] | ||
| } | ||
| // Install dependencies using Homebrew. | ||
| provisioner "shell" { | ||
| inline = [ | ||
| "echo 'Installing packages using Homebrew...'", | ||
| "eval \"$(/opt/homebrew/bin/brew shellenv)\"", | ||
| "/opt/homebrew/bin/brew install git automake bash libtool cmake python ccache" | ||
| ] | ||
| } | ||
|
|
||
| // Print the version of the installed packages. | ||
| provisioner "shell" { | ||
| inline = [ | ||
| "echo 'Printing the version of the installed packages...'", | ||
| "eval \"$(/usr/local/bin/brew shellenv)\"", | ||
| "/opt/homebrew/bin/brew list --versions" | ||
| ] | ||
| } | ||
| } |