diff --git a/recipes/debian/hydra.pkr.hcl b/recipes/debian/hydra.pkr.hcl new file mode 100644 index 0000000..5d191d8 --- /dev/null +++ b/recipes/debian/hydra.pkr.hcl @@ -0,0 +1,40 @@ +#Flavour base +build { + name = "hydra" + description = <" ] + ssh_clear_authorized_keys = true + } + + // Clone ansible-role-sso repository + provisioner "ansible" { + playbook_file = "${local.locations.provisionning}/hydra/clone-role-sso.yml" + // Manjaro/Arch OpenSSH version compatibility mode + // See https://github.com/hashicorp/packer/issues/11783 + extra_arguments = [ "--scp-extra-args", "'-O'", "-v" ] + } + + // Run ansible-role-sso playbook from cloned repository + provisioner "ansible" { + playbook_file = "${local.locations.provisionning}/hydra/run-role-sso.yml" + // Manjaro/Arch OpenSSH version compatibility mode + // See https://github.com/hashicorp/packer/issues/11783 + extra_arguments = [ "--scp-extra-args", "'-O'", "-v", "--extra-vars=@${local.locations.provisionning}/hydra/ansible-vars.yml" ] + } + + post-processor "shell-local" { + inline = [ + "/bin/sh ${path.cwd}/post-processors/sparsify.sh ${var.output_dir}/${var.version}/hydra ${var.image_version}", + ] + } + + post-processor "manifest" { + keep_input_artifact = true + } +} \ No newline at end of file diff --git a/recipes/debian/provisionning/hydra/.gitignore b/recipes/debian/provisionning/hydra/.gitignore new file mode 100644 index 0000000..014e296 --- /dev/null +++ b/recipes/debian/provisionning/hydra/.gitignore @@ -0,0 +1 @@ +/role-sso \ No newline at end of file diff --git a/recipes/debian/provisionning/hydra/ansible-vars.yml b/recipes/debian/provisionning/hydra/ansible-vars.yml new file mode 100644 index 0000000..919cf03 --- /dev/null +++ b/recipes/debian/provisionning/hydra/ansible-vars.yml @@ -0,0 +1,11 @@ +--- +hydra_use_external_database: true + +enable_hydra_dispatcher: true +enable_hydra_passwordless: false +enable_hydra_saml: true +enable_hydra_oidc: true +enable_hydra_ldap: false +enable_oidc_test_app: false + +install_only: true \ No newline at end of file diff --git a/recipes/debian/provisionning/hydra/clone-role-sso.yml b/recipes/debian/provisionning/hydra/clone-role-sso.yml new file mode 100644 index 0000000..3bfa798 --- /dev/null +++ b/recipes/debian/provisionning/hydra/clone-role-sso.yml @@ -0,0 +1,10 @@ +--- +- name: Ciblage de la machine locale + hosts: localhost + connection: local + tasks: + - name: Clonage du projet "Cadoles/ansible-role-sso" + ansible.builtin.git: + repo: "ssh://git@forge.cadoles.com:2222/Cadoles/ansible-role-sso.git" + dest: "role-sso" + version: "master" diff --git a/recipes/debian/provisionning/hydra/run-role-sso.yml b/recipes/debian/provisionning/hydra/run-role-sso.yml new file mode 100644 index 0000000..730d068 --- /dev/null +++ b/recipes/debian/provisionning/hydra/run-role-sso.yml @@ -0,0 +1,3 @@ +--- +- hosts: all + roles: [ role-sso ] diff --git a/recipes/debian/readme.hydra.md b/recipes/debian/readme.hydra.md new file mode 100644 index 0000000..45cbe54 --- /dev/null +++ b/recipes/debian/readme.hydra.md @@ -0,0 +1,23 @@ +# Flavor "Hydra" + +## Construction de l'image + +1. Lancer la construction de l'image de la machine virtuelle + + ``` + PACKER_OPTS="-var headless=false" ./build start debian 12 + ``` + + ou si l'image Debian de base est déjà construite: + + ``` + BUILDER="vmware-vmx" PACKER_OPTS="-var headless=false" ./build run debian 12 hydra + ``` + + > **Tip** Le paramètre `PACKER_OPTS="-var headless=false"` n'est nécessaire que dans le cas où vous souhaitez l'exécuteur VMWare avec son interface graphique. + +## Générer le fichier OVF à partir de l'OVA + +``` +ovftool output/debian/12.2.0/hydra/hydra-debian-12.2.0.ova output/debian/12.2.0/hydra/hydra-debian-12.2.0.ovf +``` \ No newline at end of file