Commit graph

336 commits

Author SHA1 Message Date
Wilken Rivera
10c7b999ea
Update bundled plugins to latest available version (#12085) 2022-10-27 18:24:13 -04:00
Wilken Rivera
6eba1f598e chore: Bump golang.org/x/text to v0.3.8
Address reported vulnerability GO-2022-1059 in golang.org/x/text@v0.3.7
2022-10-12 15:59:17 -04:00
Wilken Rivera
d028844284
Update dependency to resolve GO-2022-0969 (#12009) 2022-09-20 16:57:17 -04:00
dependabot[bot]
f7ce79362d
Bump github.com/hashicorp/packer-plugin-sdk from 0.3.1 to 0.3.2 (#11981)
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.3.1 to 0.3.2.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.3.1...v0.3.2)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-20 13:08:38 -04:00
Wilken Rivera
11e71729f1
Remove Oracle plugin from the list of vendored plugins (#11983)
The latest release of the Oracle plugin for Packer removed
Solaris from its list of supported platforms. Since Packer still
releases binaries for Solaris the Oracle plugin will no longer be
bundled and distributed within the Packer binary. Practitioners relying
on the plugin can continue using the plugin by installing it manually
using either the `packer init` or `packer plugins install` commands.
2022-09-15 12:31:52 -04:00
Wilken Rivera
ed72488e25
Bump golang.org/x/sys to address CVE-2022-29526 (#11953)
https://github.com/golang/go/issues/52313
2022-08-22 17:27:57 -04:00
Wilken Rivera
d7dca51108
Update Packer to use Go 1.18 (#11927)
This change updates Packer core Go version to 1.18. The move to Go 1.18 and not Go 1.19
is to allow the HCP Packer SDK time to upgrade to Go 1.18.

Changes Made:
* Bump go mod file to use Go 1.18
* Bump release pipeline to use Go 1.18
* Update plugin updater script to run go mod tidy for Go 1.18
* Update Linux job to use setup-go action
2022-08-18 09:41:29 -04:00
Wilken Rivera
392c4774da
Bump bundled plugins to latest available version (#11917) 2022-08-01 09:37:33 -04:00
Wilken Rivera
e3ad29d2aa
Update third-party plugin imports (#11912)
* packer-plugin-digitalocean: Update module import path

* packer-plugin-outscale: Remove bundled plugin

* packer-plugin-scaleway: Remove bundled plugin
2022-07-29 11:45:30 -04:00
Sylvia Moss
5c3d5c1295
Send channel id to HCP Packer (#11861) 2022-07-29 15:15:29 +02:00
Lucas Bajolet
0da7cf781e go.mod: bump SDK to v0.3.1 2022-07-28 14:50:57 -04:00
dependabot[bot]
65611c1577
Bump github.com/hashicorp/hcl/v2 from 2.12.0 to 2.13.0 (#11856)
Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) from 2.12.0 to 2.13.0.
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/hcl/compare/v2.12.0...v2.13.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-06 15:58:21 -04:00
Sylvia Moss
b849ace27b
Fail HCP datasources for revoked iteration (#11854) 2022-06-21 17:24:41 +02:00
Wilken Rivera
0e5ddcb133
Update plugins that use StepDownload to latest version (#11844) 2022-06-13 10:39:21 -04:00
Wilken Rivera
0324e0883a
Bump packer-plugin-sdk to latest version v0.3.0 (#11843)
This change brings in updates to Packer's usage of the go-getter plugin
used within the SDK for downloading ISO files. This can be a potentially
breaking change for some plugins as the update go-getter settings in the
SDK prevent reading/writing to suddir that require upload path
traversal (e.g /tmp/.../etc/hosts).

This change also includes 30 minute maximum timeouts for file
downloading to prevent resource exhaustion. This can be an issue for
very large or slow downloads if they exceed more then 30 minutes to
complete.
2022-06-13 09:22:58 -04:00
Wilken Rivera
6f1cefa53d
Bump versions for all recently plugins (#11802)
* Bump versions for all recently plugins

This change brings all plugins in Packer core up to date to address
issues with legacy SSH RSA-SHA1 key algorithms.

Related to: https://github.com/hashicorp/packer/pull/11761

* Update repository for packer-plugin-outscale
2022-05-25 15:51:40 -04:00
Wilken Rivera
9bf17ec952 Update external plugins to latest available release 2022-05-19 16:21:16 -04:00
dependabot[bot]
cec4f91d34
Bump github.com/hashicorp/packer-plugin-sdk from 0.2.12 to 0.2.13 (#11774)
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.2.12 to 0.2.13.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.2.12...v0.2.13)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-19 13:13:01 -04:00
Sylvia Moss
5c0988acbd
bump hcp-sdk-go and fix import path (#11763)
* bump hcp-sdk-go and fix import path

* bump hcp-sdk-go 0.19.0
2022-05-10 14:01:26 +02:00
Wilken Rivera
5c1694ca9d
Bump packer-plugin-sdk (#11754)
The Packer Plugin SDK has been updated in v0.2.12 to address the
x/crypto/ssh fix for unsupported key algorithms. This change is specific
to the SSH communication which is mostly in the sdk pkg. But it is being
brought into Packer to have parity with all the external plugins, which
are being updated separately.
2022-05-05 13:35:38 -04:00
dependabot[bot]
36c2301781
Bump github.com/hashicorp/hcl/v2 from 2.11.1 to 2.12.0 (#11737)
Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) from 2.11.1 to 2.12.0.
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/hcl/compare/v2.11.1...v2.12.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-29 12:27:41 -04:00
Adrien Delorme
039155612a
get go-getter 2.0.2, that won't untar OVA files (#11675) 2022-03-22 11:08:31 +01:00
Wilken Rivera
8e1e0329ad Bump external plugin versions
Bumping external plugins containing critical bug fixes or improvements
2022-03-03 20:17:50 -05:00
Wilken Rivera
bdaa03be31
Update monogo-driver to address CVE-2021-20329 (#11617) 2022-03-02 15:23:54 +01:00
Michele Degges
b63a9c9803
Onboard to CRT (#11564)
Onboard Packer to CRT

Co-authored-by: Wilken Rivera <wilken@hashicorp.com>
Co-authored-by: Claire Labry <claire@hashicorp.com>
2022-02-25 15:56:20 -08:00
Adrien Delorme
0362a3ec10
all shells: Pass env vars through a key value store (#11569)
* allowing to set shell env vars from a key/value map.
* tests

This new map will work alongside the `environment_vars` but it allows using a
datasource value seamlessly. At validation, and because `environment_vars` was
an array of strings containing `KEY=value`, using datsources would not work,
because these values are not known yet and would evaluate to `<unknown>`. With
this, the value and the key can be unknown and will validate correctly for
datasources.
2022-02-16 12:05:44 +01:00
Adrien Delorme
19fc5added
Allow to parse pgp signed checksums (#11495)
* get go-getter with comment ignore in checksum files

* get github.com/hashicorp/go-getter/v2 v2.0.1
2022-02-11 15:02:26 -05:00
Adrien Delorme
69373d8415
Update psutils dep to avoid crash on m1 machine (#11546)
* Update psutils dep to avoid crash on m1 machine

* go mod tidy
2022-02-02 13:56:18 +01:00
Adrien Delorme
ce32c2a157
up plugin azure and go mod tidy (#11499) 2022-01-17 08:06:32 -05:00
Sylvia Moss
9ffd7ce938
Fail for revoked iterations (#11492)
* Fail for revoked iterations

* check if iteration is revoked on GetIteration

* fix fmt
2022-01-13 12:28:50 +01:00
Jenna Goldstrich
d284885442 Run ./scripts/update-plugins and go mod tidy 2022-01-04 16:29:05 -08:00
Wilken Rivera
d4b4bb9205
Bump github.com/hashicorp/packer-plugin-sdk from 0.2.9 to 0.2.11 (#11459) 2021-12-17 14:50:01 -05:00
Wilken Rivera
42b346568e
Update all external plugins to their latest available version (#11435)
```
./scripts/upgrade_plugins.sh
go mod tidy
```
2021-12-07 15:14:16 -05:00
Wilken Rivera
58fa1f96e2
Temporarily revert the use of indirect redirects for external plugins (#11430)
The auto installation of external plugins via packer init only work for
HCL templates. Since we have not officially removed all plugins (slated
for 1.8.0) I am reverting this test change. Once 1.7.9 is released we
  can begin removing plugins and optimizing the redirect experience for
  JSON-only users.
2021-12-06 10:55:49 -05:00
dependabot[bot]
b3c1969ad1
Bump github.com/hashicorp/hcl/v2 from 2.10.1 to 2.11.1 (#11426)
Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) from 2.10.1 to 2.11.1.
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/hcl/compare/v2.10.1...v2.11.1)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-12-02 14:05:45 +01:00
Adrien Delorme
3278c1a817
Packer SVC acc tests (#11274) 2021-12-01 15:58:33 +01:00
dependabot[bot]
effc803ac5
Bump github.com/hashicorp/packer-plugin-sdk from 0.2.8 to 0.2.9 (#11394)
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.2.8 to 0.2.9.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.2.8...v0.2.9)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-11-12 14:50:53 -05:00
dependabot[bot]
3cac8d3121
Bump github.com/hashicorp/packer-plugin-sdk from 0.2.7 to 0.2.8 (#11391)
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.2.7 to 0.2.8.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.2.7...v0.2.8)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-11-10 21:36:41 -05:00
dependabot[bot]
e0ac45e264 Bump github.com/zclconf/go-cty from 1.9.1 to 1.10.0
Bumps [github.com/zclconf/go-cty](https://github.com/zclconf/go-cty) from 1.9.1 to 1.10.0.
- [Release notes](https://github.com/zclconf/go-cty/releases)
- [Changelog](https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md)
- [Commits](https://github.com/zclconf/go-cty/compare/v1.9.1...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/zclconf/go-cty
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-11-04 13:14:14 +00:00
Adrien Delorme
4eb6a052ab go mod tidy 2021-11-03 12:03:54 +01:00
Wilken Rivera
4e2fc5e21d
Bump packer-plugin-amazon to v1.0.4 (#11360)
* Bump packer-plugin-amazon to v1.0.4

* Enable go mod tidy check
2021-10-27 14:39:51 -04:00
Wilken Rivera
722f996bb0 Bump github.com/outscale/osc-sdk-go to v1.11.2 2021-10-27 12:31:46 -04:00
Adrien Delorme
2371c3ce52 go get -d github.com/hashicorp/packer-plugin-amazon@latest + tidy 2021-10-19 15:21:30 +02:00
Adrien Delorme
7294abffed
update amazon, azure, docker, gcp, outscale, qemu & vsphere plugins + deps (#11341)
* update amazon, azure, docker, gcp, outscale, qemu vsphere plugins + deps

* Update upgrade_plugins.sh

* Update upgrade_plugins.sh

* Update CHANGELOG.md

* Update prepare_changelog.sh
2021-10-19 14:41:37 +02:00
Megan Marsh
db47309f02 update modfile 2021-10-04 11:27:44 -07:00
Megan Marsh
06fb597185 import new sdk and fix compatability issues 2021-10-01 14:58:33 -07:00
Adrien Delorme
fee561f8ea
use the github.com/scaleway/packer-plugin-scaleway now (#11296) 2021-09-29 16:33:58 +02:00
Wilken Rivera
dbf1380321
Prune go modules file post go 1.17 upgrade (#11282)
```
go mod tidy
```
2021-09-24 17:04:18 +02:00
Wilken Rivera
b10df3abb7
Update HCP Packer registry image extraction, validation, publishing logic for registry capable plugins (#11221)
* Update handling of registry artifacts

This change uses the github.com/hashicorp/packer-plgin-sdk/packer/registryimage for querying
Artifact State for HCP Registry Image metadata. To handle the conversion
of the RPC response, mapstructure was introduced to conversion state
data into an registryimage.Image before publishing to a image bucket.

* Update to use registry image from packersdk

* Rename internal registry service pkg

* Update vendored plugins to latest version

* The latest release of Amazon, GoogleCompute, and Azure have support
  for publishing images to the HCP Packer registry.
2021-09-13 21:07:54 -04:00
Megan Marsh
9cab184006 tidied modfile 2021-09-03 16:05:13 -07:00