Commit Graph
345 Commits
Author SHA1 Message Date
50da6c8dc8 docs: Migrate link formats (#12192)
* Adding check-legacy-links-format workflow

* Adding test-link-rewrites workflow

* Migrating links to new format

* Updating docs-content-check-legacy-links-format hash

* chore: update source

* Update generated partials from Packer plugin SDK

* Bump packer-plugin-sdk to get latest packer-sdc

* Update website/content/docs/templates/hcl_templates/blocks/build/provisioner.mdx

* Update Plugin SDK to fix shell-local regression

---------

Co-authored-by: Kendall Strautman <[email protected]>
Co-authored-by: Wilken Rivera <[email protected]>
Co-authored-by: Kendall Strautman <[email protected]>
2023-01-27 09:47:08 -08:00
dependabot[bot] 15a3e4f5fb build(deps): bump github.com/hashicorp/hcp-sdk-go from 0.29.0 to 0.31.0
Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go) from 0.29.0 to 0.31.0.
- [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases)
- [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/hcp-sdk-go/compare/v0.29.0...v0.31.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcp-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
2023-01-25 21:19:47 -05:00
Wilken Rivera 56f784ae95 Bump github.com/hashicorp/go-getter/v2 (#12161)
The latest version of Go-Getter contains a SMBClient timeout option,
along with an updated AWS SDK to improve S3 support.

```
go get github.com/hashicorp/go-getter/v2
go get github.com/hashicorp/go-getter/s3/v2
go get github.com/hashicorp/go-getter/gcs/v2
go mod tidy
```
2022-12-20 15:38:12 -05:00
dependabot[bot] a6e7635d05 build(deps): bump github.com/hashicorp/hcp-sdk-go from 0.28.0 to 0.29.0 (#12163)
Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go) from 0.28.0 to 0.29.0.
- [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases)
- [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/hcp-sdk-go/compare/v0.28.0...v0.29.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcp-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-15 12:43:55 -05:00
Lucas Bajolet 027e920147 go.mod: bump golang.org/net to 0.4.0
As with the go version to 1.18.9, this fix concerns mitigations to the
GO-2022-1144 vulnerability.

Since we depend on golang.org/net too, we need to update it to a version
that is not vulnerable anymore, and this is starting at version 0.4.0
2022-12-12 16:17:51 -05:00
Wilken Rivera f35270700f Update external plugins to latest available release 2022-12-12 15:48:11 -05:00
Lucas Bajolet 08f1e85fb1 hcp: fix payloads for new SDK version
The grpc_gateway v2 changes had some repercussions in the payloads of
the API calls, making the current code non-functional against the latest
SDK.
2022-12-07 16:18:52 -05:00
Wilken Rivera c1cd718e0e Update github.com/stretchr/testify to address vulnerabilities in dependencies
* Resolves CVE-2022-28948 in gopkg.in/yaml.v3

Many thanks to chncaption for bubbling this vulnerability in #12908
2022-11-11 10:36:07 -05:00
dependabot[bot] 113bc5eea4 Bump github.com/hashicorp/hcl/v2 from 2.13.0 to 2.14.1 (#12015)
Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) from 2.13.0 to 2.14.1.
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/hcl/compare/v2.13.0...v2.14.1)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-02 13:07:31 -04:00
Wilken Rivera 10c7b999ea Update bundled plugins to latest available version (#12085) 2022-10-27 18:24:13 -04:00
Wilken Rivera 6eba1f598e chore: Bump golang.org/x/text to v0.3.8
Address reported vulnerability GO-2022-1059 in golang.org/x/[email protected]
2022-10-12 15:59:17 -04:00
Wilken Rivera d028844284 Update dependency to resolve GO-2022-0969 (#12009) 2022-09-20 16:57:17 -04:00
dependabot[bot] f7ce79362d Bump github.com/hashicorp/packer-plugin-sdk from 0.3.1 to 0.3.2 (#11981)
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.3.1 to 0.3.2.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.3.1...v0.3.2)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-20 13:08:38 -04:00
Wilken Rivera 11e71729f1 Remove Oracle plugin from the list of vendored plugins (#11983)
The latest release of the Oracle plugin for Packer removed
Solaris from its list of supported platforms. Since Packer still
releases binaries for Solaris the Oracle plugin will no longer be
bundled and distributed within the Packer binary. Practitioners relying
on the plugin can continue using the plugin by installing it manually
using either the `packer init` or `packer plugins install` commands.
2022-09-15 12:31:52 -04:00
Wilken Rivera ed72488e25 Bump golang.org/x/sys to address CVE-2022-29526 (#11953)
https://github.com/golang/go/issues/52313
2022-08-22 17:27:57 -04:00
Wilken Rivera d7dca51108 Update Packer to use Go 1.18 (#11927)
This change updates Packer core Go version to 1.18. The move to Go 1.18 and not Go 1.19
is to allow the HCP Packer SDK time to upgrade to Go 1.18.

Changes Made:
* Bump go mod file to use Go 1.18
* Bump release pipeline to use Go 1.18
* Update plugin updater script to run go mod tidy for Go 1.18
* Update Linux job to use setup-go action
2022-08-18 09:41:29 -04:00
Wilken Rivera 392c4774da Bump bundled plugins to latest available version (#11917) 2022-08-01 09:37:33 -04:00
Wilken Rivera e3ad29d2aa Update third-party plugin imports (#11912)
* packer-plugin-digitalocean: Update module import path

* packer-plugin-outscale: Remove bundled plugin

* packer-plugin-scaleway: Remove bundled plugin
2022-07-29 11:45:30 -04:00
Sylvia Moss 5c3d5c1295 Send channel id to HCP Packer (#11861) 2022-07-29 15:15:29 +02:00
Lucas Bajolet 0da7cf781e go.mod: bump SDK to v0.3.1 2022-07-28 14:50:57 -04:00
dependabot[bot] 65611c1577 Bump github.com/hashicorp/hcl/v2 from 2.12.0 to 2.13.0 (#11856)
Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) from 2.12.0 to 2.13.0.
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/hcl/compare/v2.12.0...v2.13.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-06 15:58:21 -04:00
Sylvia Moss b849ace27b Fail HCP datasources for revoked iteration (#11854) 2022-06-21 17:24:41 +02:00
Wilken Rivera 0e5ddcb133 Update plugins that use StepDownload to latest version (#11844) 2022-06-13 10:39:21 -04:00
Wilken Rivera 0324e0883a Bump packer-plugin-sdk to latest version v0.3.0 (#11843)
This change brings in updates to Packer's usage of the go-getter plugin
used within the SDK for downloading ISO files. This can be a potentially
breaking change for some plugins as the update go-getter settings in the
SDK prevent reading/writing to suddir that require upload path
traversal (e.g /tmp/.../etc/hosts).

This change also includes 30 minute maximum timeouts for file
downloading to prevent resource exhaustion. This can be an issue for
very large or slow downloads if they exceed more then 30 minutes to
complete.
2022-06-13 09:22:58 -04:00
Wilken Rivera 6f1cefa53d Bump versions for all recently plugins (#11802)
* Bump versions for all recently plugins

This change brings all plugins in Packer core up to date to address
issues with legacy SSH RSA-SHA1 key algorithms.

Related to: https://github.com/hashicorp/packer/pull/11761

* Update repository for packer-plugin-outscale
2022-05-25 15:51:40 -04:00
Wilken Rivera 9bf17ec952 Update external plugins to latest available release 2022-05-19 16:21:16 -04:00
dependabot[bot] cec4f91d34 Bump github.com/hashicorp/packer-plugin-sdk from 0.2.12 to 0.2.13 (#11774)
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.2.12 to 0.2.13.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.2.12...v0.2.13)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-19 13:13:01 -04:00
Sylvia Moss 5c0988acbd bump hcp-sdk-go and fix import path (#11763)
* bump hcp-sdk-go and fix import path

* bump hcp-sdk-go 0.19.0
2022-05-10 14:01:26 +02:00
Wilken Rivera 5c1694ca9d Bump packer-plugin-sdk (#11754)
The Packer Plugin SDK has been updated in v0.2.12 to address the
x/crypto/ssh fix for unsupported key algorithms. This change is specific
to the SSH communication which is mostly in the sdk pkg. But it is being
brought into Packer to have parity with all the external plugins, which
are being updated separately.
2022-05-05 13:35:38 -04:00
dependabot[bot] 36c2301781 Bump github.com/hashicorp/hcl/v2 from 2.11.1 to 2.12.0 (#11737)
Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) from 2.11.1 to 2.12.0.
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/hcl/compare/v2.11.1...v2.12.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-29 12:27:41 -04:00
Adrien Delorme 039155612a get go-getter 2.0.2, that won't untar OVA files (#11675) 2022-03-22 11:08:31 +01:00
Wilken Rivera 8e1e0329ad Bump external plugin versions
Bumping external plugins containing critical bug fixes or improvements
2022-03-03 20:17:50 -05:00
Wilken Rivera bdaa03be31 Update monogo-driver to address CVE-2021-20329 (#11617) 2022-03-02 15:23:54 +01:00
b63a9c9803 Onboard to CRT (#11564)
Onboard Packer to CRT

Co-authored-by: Wilken Rivera <[email protected]>
Co-authored-by: Claire Labry <[email protected]>
2022-02-25 15:56:20 -08:00
Adrien Delorme 0362a3ec10 all shells: Pass env vars through a key value store (#11569)
* allowing to set shell env vars from a key/value map.
* tests

This new map will work alongside the `environment_vars` but it allows using a
datasource value seamlessly. At validation, and because `environment_vars` was
an array of strings containing `KEY=value`, using datsources would not work,
because these values are not known yet and would evaluate to `<unknown>`. With
this, the value and the key can be unknown and will validate correctly for
datasources.
2022-02-16 12:05:44 +01:00
Adrien Delorme 19fc5added Allow to parse pgp signed checksums (#11495)
* get go-getter with comment ignore in checksum files

* get github.com/hashicorp/go-getter/v2 v2.0.1
2022-02-11 15:02:26 -05:00
Adrien Delorme 69373d8415 Update psutils dep to avoid crash on m1 machine (#11546)
* Update psutils dep to avoid crash on m1 machine

* go mod tidy
2022-02-02 13:56:18 +01:00
Adrien Delorme ce32c2a157 up plugin azure and go mod tidy (#11499) 2022-01-17 08:06:32 -05:00
Sylvia Moss 9ffd7ce938 Fail for revoked iterations (#11492)
* Fail for revoked iterations

* check if iteration is revoked on GetIteration

* fix fmt
2022-01-13 12:28:50 +01:00
Jenna Goldstrich d284885442 Run ./scripts/update-plugins and go mod tidy 2022-01-04 16:29:05 -08:00
Wilken Rivera d4b4bb9205 Bump github.com/hashicorp/packer-plugin-sdk from 0.2.9 to 0.2.11 (#11459) 2021-12-17 14:50:01 -05:00
Wilken Rivera 42b346568e Update all external plugins to their latest available version (#11435)
```
./scripts/upgrade_plugins.sh
go mod tidy
```
2021-12-07 15:14:16 -05:00
Wilken Rivera 58fa1f96e2 Temporarily revert the use of indirect redirects for external plugins (#11430)
The auto installation of external plugins via packer init only work for
HCL templates. Since we have not officially removed all plugins (slated
for 1.8.0) I am reverting this test change. Once 1.7.9 is released we
  can begin removing plugins and optimizing the redirect experience for
  JSON-only users.
2021-12-06 10:55:49 -05:00
dependabot[bot] b3c1969ad1 Bump github.com/hashicorp/hcl/v2 from 2.10.1 to 2.11.1 (#11426)
Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) from 2.10.1 to 2.11.1.
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/hcl/compare/v2.10.1...v2.11.1)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-02 14:05:45 +01:00
Adrien Delorme 3278c1a817 Packer SVC acc tests (#11274) 2021-12-01 15:58:33 +01:00
dependabot[bot] effc803ac5 Bump github.com/hashicorp/packer-plugin-sdk from 0.2.8 to 0.2.9 (#11394)
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.2.8 to 0.2.9.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.2.8...v0.2.9)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-11-12 14:50:53 -05:00
dependabot[bot] 3cac8d3121 Bump github.com/hashicorp/packer-plugin-sdk from 0.2.7 to 0.2.8 (#11391)
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.2.7 to 0.2.8.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.2.7...v0.2.8)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-11-10 21:36:41 -05:00
dependabot[bot] e0ac45e264 Bump github.com/zclconf/go-cty from 1.9.1 to 1.10.0
Bumps [github.com/zclconf/go-cty](https://github.com/zclconf/go-cty) from 1.9.1 to 1.10.0.
- [Release notes](https://github.com/zclconf/go-cty/releases)
- [Changelog](https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md)
- [Commits](https://github.com/zclconf/go-cty/compare/v1.9.1...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/zclconf/go-cty
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
2021-11-04 13:14:14 +00:00
Adrien Delorme 4eb6a052ab go mod tidy 2021-11-03 12:03:54 +01:00
Wilken Rivera 4e2fc5e21d Bump packer-plugin-amazon to v1.0.4 (#11360)
* Bump packer-plugin-amazon to v1.0.4

* Enable go mod tidy check
2021-10-27 14:39:51 -04:00