Martin Rusev martinrusev

Building Docker image with Packer and provisioning with Ansible

Overview

Packer

Packer is used to build image from a base image, perform provisions and store (commit) the final image.
We use provisioners and Packer templates to do the actual work to create the final image.
We use Ansible for provisioning.

Two ways to do it, but only worked for me so I'll put it first and the second for reference:

$ openssl pkcs12 -export -in hostname.crt -inkey hostname.key -out hostname.p12
$ openssl pkcs12 -in hostname.p12 -nodes -out hostname.pem

Other options for this method in comments below:

# Note, the -certfile root.crt appends all CA certs to the export, I've never needed these so it's optional for my personal steps
$ openssl pkcs12 -export -in hostname.crt -inkey hostname.key -certfile root.crt -out hostname.p12

Note, I've always had my hostname.crt as part of my .pem, so I keep my certs but apparently you may not have to, hence the nocerts flag being an extra option in this sample

	## Java
	sudo apt-get update
	sudo apt-get install default-jdk

	## Scala
	sudo apt-get remove scala-library scala
	sudo wget http://scala-lang.org/files/archive/scala-2.12.1.deb
	sudo dpkg -i scala-2.12.1.deb
	sudo apt-get update
	sudo apt-get install scala

	#!/usr/bin/python
	import json
	import os
	from flask import Flask
	from ConfigParser import ConfigParser
	app = Flask(__name__)

	LOGICAL_DIR = "{{ vault_backend_path}}/logical/"
	VAULT_URL = "https://{{ vault_default_cert_url }}:{{ vault_default_port }}"

	# Hello, and welcome to makefile basics.
	#
	# You will learn why `make` is so great, and why, despite its "weird" syntax,
	# it is actually a highly expressive, efficient, and powerful way to build
	# programs.
	#
	# Once you're done here, go to
	# http://www.gnu.org/software/make/manual/make.html
	# to learn SOOOO much more.

	package main

	import (
	"crypto/aes"
	"crypto/cipher"
	"crypto/rand"
	"encoding/base64"
	"fmt"
	"io"
	)

	pip install twine setuptools
	python setup.py sdist build
	twine upload dist/*

	{
	"host": "https://subdomain.amon:9001"
	}