bcdurden · October 28, 2025 22:10
diff --git a/Airgapped_RKE2_image.md b/Airgapped_RKE2_image.md
diff --git a/build.sh b/build.sh
 #!/bin/bash
 rm -rf output/
 HARVESTER_PASSWORD=mypassword

 packer init .
 PACKER_LOG=1 packer build -var="harvester_vip=10.10.0.10" -var "harvester_password=${HARVESTER_PASSWORD}" .
diff --git a/spec.cloud-init.pkr.hcl b/spec.cloud-init.pkr.hcl
 source "file" "user_data" {
  content = <<EOF
 #cloud-config
 ssh_pwauth: True
 package_update: true
 packages:
 - qemu-guest-agent
 password: superpassword
 chpasswd: { expire: False }
 ssh_pwauth: True
 runcmd:
 - - systemctl
  - enable
  - '--now'
  - qemu-guest-agent.service
 - mkdir -p /var/lib/rancher/rke2-artifacts && wget https://get.rke2.io -O /var/lib/rancher/install.sh && chmod +x /var/lib/rancher/install.sh
 EOF
  target  = "user-data"
 }

 source "file" "meta_data" {
  content = <<EOF
 {"instance-id":"packer-worker.tenant-local","local-hostname":"packer-worker"}
 EOF
  target  = "meta-data"
 }

 build {
  sources = ["source.file.user_data", "source.file.meta_data"]

  provisioner "shell-local" {
    inline = ["genisoimage -output cidata.iso -input-charset utf-8 -volid cidata -joliet -r user-data meta-data"]
  }
 }
diff --git a/spec.pkr.hcl b/spec.pkr.hcl
 packer {
  required_plugins {
    qemu = {
      version = ">= 1.0.9"
      source  = "github.com/hashicorp/qemu"
    }
  }
 }

 source "qemu" "ubuntu_cloud" {
  vm_name     = "${var.image_name}-amd64.img"

  iso_url      = var.ubuntu_url
  iso_checksum = var.ubuntu_checksum
  disk_image   = true

  boot_command = []
  
  boot_wait         = "10s"

  # QEMU specific configuration
  cpus             = 2
  memory           = 4096
  accelerator      = "kvm" # use none here if not using KVM
  disk_size        = "10G"
  disk_compression = true

  efi_boot          = true

  output_directory = var.output_location

  # SSH configuration so that Packer can log into the Image
  ssh_password    = "superpassword"
  ssh_username    = "ubuntu"
  ssh_timeout     = "5m"
  shutdown_command = "sudo cloud-init clean --logs --machine-id && sudo shutdown -P now"
  headless        = true 

  net_device        = "virtio-net"

  qemuargs = [
    ["-cdrom", "cidata.iso"]
 ]
 }

 build {
  name    = "image_build"
  sources = [ "source.qemu.ubuntu_cloud" ]

  # Wait till Cloud-Init has finished setting up the image on first-boot
  provisioner "shell" {
      inline = [
          "while [ ! -f /var/lib/cloud/instance/boot-finished ]; do echo 'Waiting for Cloud-Init...'; tail -n10 /var/log/cloud-init-output.log; sleep 5; done"
      ]
  }
  post-processor "shell-local" {
      execute_command = ["bash", "-c", "{{.Vars}} {{.Script}}"]
      script = "upload.sh"
      environment_vars = [
        "HARVESTER_VIP=${var.harvester_vip}",
        "HARVESTER_PASSWORD=${var.harvester_password}",
        "IMAGE_NAME=${var.image_name}",
        "IMAGE_FILE=${var.output_location}/${var.image_name}-amd64.img",
        "NAMESPACE=${var.namespace}"
      ]
  }
 }
diff --git a/upload.sh b/upload.sh
 #!/bin/bash
 # params:
 # HARVESTER_VIP
 # HARVESTER_PASSWORD
 # IMAGE_NAME
 # IMAGE_FILE
 # NAMESPACE
 export TOKEN=$(curl -sk -X POST https://${HARVESTER_VIP}/v3-public/localProviders/local?action=login -H 'content-type: application/json' -d '{"username":"admin","password":"'${HARVESTER_PASSWORD}'"}' | jq -r '.token')
 export IMAGE_SIZE=$(stat -c%s "$IMAGE_FILE")

 yq -j '.metadata.name = "'${IMAGE_NAME}'" | .spec.displayName = "'${IMAGE_NAME}'"' vmi_template.yaml | \
 curl -sk -X POST -H "Authorization: Bearer ${TOKEN}" -H "Content-Type: application/json" --data-binary @- "https://${HARVESTER_VIP}/v1/harvester/harvesterhci.io.virtualmachineimages/${NAMESPACE}" &> /dev/null
 curl -sk -X POST -H "Authorization: Bearer ${TOKEN}" -F "chunk=@${IMAGE_FILE}" "https://${HARVESTER_VIP}/v1/harvester/harvesterhci.io.virtualmachineimages/${NAMESPACE}/${IMAGE_NAME}?action=upload&size=${IMAGE_SIZE}"
diff --git a/variables.pkr.hcl b/variables.pkr.hcl

 variable "harvester_vip" {
  type = string
 }

 variable "harvester_password" {
  type = string
  sensitive = true
 }

 variable "ubuntu_url" {
  type = string
  default = "https://cloud-images.ubuntu.com/jammy/current/jammy-server-cloudimg-amd64.img"
 }

 variable "ubuntu_checksum" {
  type = string
  default = "file:https://cloud-images.ubuntu.com/jammy/current/SHA256SUMS"
 }

 variable "image_name" {
  type = string
  default = "ubuntu-jammy-rke2"
 }

 variable "namespace" {
  type = string
  default = "default"
 }

 variable "output_location" {
  type = string
  default = "output/"
 }
diff --git a/vmi_template.yaml b/vmi_template.yaml
 ---
 apiVersion: harvesterhci.io/v1beta1
 kind: VirtualMachineImage
 metadata:
  name: 
  annotations:
    harvesterhci.io/storageClassName: harvester-longhorn
  labels:
    harvesterhci.io/image-type: raw_qcow2
    harvesterhci.io/os-type: linux
  namespace: default
 spec:
  displayName: 
  retry: 3
  sourceType: upload
  storageClassParameters:
    migratable: 'true'
    numberOfReplicas: '3'
    staleReplicaTimeout: '30'
	#!/bin/bash
	rm -rf output/
	HARVESTER_PASSWORD=mypassword

	packer init .
	PACKER_LOG=1 packer build -var="harvester_vip=10.10.0.10" -var "harvester_password=${HARVESTER_PASSWORD}" .
	source "file" "user_data" {
	content = <<EOF
	#cloud-config
	ssh_pwauth: True
	package_update: true
	packages:
	- qemu-guest-agent
	password: superpassword
	chpasswd: { expire: False }
	ssh_pwauth: True
	runcmd:
	- - systemctl
	- enable
	- '--now'
	- qemu-guest-agent.service
	- mkdir -p /var/lib/rancher/rke2-artifacts && wget https://get.rke2.io -O /var/lib/rancher/install.sh && chmod +x /var/lib/rancher/install.sh
	EOF
	target = "user-data"
	}

	source "file" "meta_data" {
	content = <<EOF
	{"instance-id":"packer-worker.tenant-local","local-hostname":"packer-worker"}
	EOF
	target = "meta-data"
	}

	build {
	sources = ["source.file.user_data", "source.file.meta_data"]

	provisioner "shell-local" {
	inline = ["genisoimage -output cidata.iso -input-charset utf-8 -volid cidata -joliet -r user-data meta-data"]
	}
	}
	packer {
	required_plugins {
	qemu = {
	version = ">= 1.0.9"
	source = "github.com/hashicorp/qemu"
	}
	}
	}

	source "qemu" "ubuntu_cloud" {
	vm_name = "${var.image_name}-amd64.img"

	iso_url = var.ubuntu_url
	iso_checksum = var.ubuntu_checksum
	disk_image = true

	boot_command = []

	boot_wait = "10s"

	# QEMU specific configuration
	cpus = 2
	memory = 4096
	accelerator = "kvm" # use none here if not using KVM
	disk_size = "10G"
	disk_compression = true

	efi_boot = true

	output_directory = var.output_location

	# SSH configuration so that Packer can log into the Image
	ssh_password = "superpassword"
	ssh_username = "ubuntu"
	ssh_timeout = "5m"
	shutdown_command = "sudo cloud-init clean --logs --machine-id && sudo shutdown -P now"
	headless = true

	net_device = "virtio-net"

	qemuargs = [
	["-cdrom", "cidata.iso"]
	]
	}

	build {
	name = "image_build"
	sources = [ "source.qemu.ubuntu_cloud" ]

	# Wait till Cloud-Init has finished setting up the image on first-boot
	provisioner "shell" {
	inline = [
	"while [ ! -f /var/lib/cloud/instance/boot-finished ]; do echo 'Waiting for Cloud-Init...'; tail -n10 /var/log/cloud-init-output.log; sleep 5; done"
	]
	}
	post-processor "shell-local" {
	execute_command = ["bash", "-c", "{{.Vars}} {{.Script}}"]
	script = "upload.sh"
	environment_vars = [
	"HARVESTER_VIP=${var.harvester_vip}",
	"HARVESTER_PASSWORD=${var.harvester_password}",
	"IMAGE_NAME=${var.image_name}",
	"IMAGE_FILE=${var.output_location}/${var.image_name}-amd64.img",
	"NAMESPACE=${var.namespace}"
	]
	}
	}
	#!/bin/bash
	# params:
	# HARVESTER_VIP
	# HARVESTER_PASSWORD
	# IMAGE_NAME
	# IMAGE_FILE
	# NAMESPACE
	export TOKEN=$(curl -sk -X POST https://${HARVESTER_VIP}/v3-public/localProviders/local?action=login -H 'content-type: application/json' -d '{"username":"admin","password":"'${HARVESTER_PASSWORD}'"}' \| jq -r '.token')
	export IMAGE_SIZE=$(stat -c%s "$IMAGE_FILE")

	yq -j '.metadata.name = "'${IMAGE_NAME}'" \| .spec.displayName = "'${IMAGE_NAME}'"' vmi_template.yaml \| \
	curl -sk -X POST -H "Authorization: Bearer ${TOKEN}" -H "Content-Type: application/json" --data-binary @- "https://${HARVESTER_VIP}/v1/harvester/harvesterhci.io.virtualmachineimages/${NAMESPACE}" &> /dev/null
	curl -sk -X POST -H "Authorization: Bearer ${TOKEN}" -F "chunk=@${IMAGE_FILE}" "https://${HARVESTER_VIP}/v1/harvester/harvesterhci.io.virtualmachineimages/${NAMESPACE}/${IMAGE_NAME}?action=upload&size=${IMAGE_SIZE}"

	variable "harvester_vip" {
	type = string
	}

	variable "harvester_password" {
	type = string
	sensitive = true
	}

	variable "ubuntu_url" {
	type = string
	default = "https://cloud-images.ubuntu.com/jammy/current/jammy-server-cloudimg-amd64.img"
	}

	variable "ubuntu_checksum" {
	type = string
	default = "file:https://cloud-images.ubuntu.com/jammy/current/SHA256SUMS"
	}

	variable "image_name" {
	type = string
	default = "ubuntu-jammy-rke2"
	}

	variable "namespace" {
	type = string
	default = "default"
	}

	variable "output_location" {
	type = string
	default = "output/"
	}
	---
	apiVersion: harvesterhci.io/v1beta1
	kind: VirtualMachineImage
	metadata:
	name:
	annotations:
	harvesterhci.io/storageClassName: harvester-longhorn
	labels:
	harvesterhci.io/image-type: raw_qcow2
	harvesterhci.io/os-type: linux
	namespace: default
	spec:
	displayName:
	retry: 3
	sourceType: upload
	storageClassParameters:
	migratable: 'true'
	numberOfReplicas: '3'
	staleReplicaTimeout: '30'