Skip to content

Releases: hashicorp/packer

v1.8.4

28 Oct 15:47
Compare
Choose a tag to compare

1.8.4 (October 28 2022)

NOTES:

  • Packer user documentation has been moved to the new HashiCorp developer
    documentation portal. The main Packer site (https://www.packer.io) will
    continue to be the home for Packer but all requests for general
    documentation and binary downloads will be redirected to
    https://developer.hashicorp.com/packer. Users are encouraged to visit the
    developer documentation portal for access to all Packer related
    documentation; including integrations with HCP Packer.

  • The Oracle builder and post-processor are no longer vendored with Packer
    core. Users of the Oracle plugin should use packer init to install the
    latest version of the plugin. See the Oracle Plugin
    Documentation
    for more
    information. GH-11983

  • HCP Packer environment variables: The behaviour of some HCP Packer-specific
    environment variables has changed slightly. Refer to HCP Packer
    in the Packer documentation for a full list of HCP Packer environment variables. GH-12059

    • For JSON templates, the HCP_PACKER_REGISTRY environment variable was
      previously required to enable the HCP Packer integration. In this release,
      the environment variable is now optional, and can be used for disabling the
      publishing of metadata for any HCP Packer enabled configuration template.
    • For HCL2 templates, the HCP_PACKER_REGISTRY environment variable can be used
      to disable publishing to a HCP Packer registry even if the template defines a
      hcp_packer_registry block. This can be useful for testing that a template
      works as intended prior to pushing metadata to HCP Packer.
    • The HCP_PACKER_BUCKET_NAME environment variable is now the only
      requirement to push metadata to a HCP Packer registry, in both JSON
      and HCL2 templates without a hcp_packer_registry block.

FEATURES:

  • provisioner/powershell: Add use_pwsh configuration argument to support pwsh
    in powershell provisioner. GH-11950

PLUGINS:

  • builder/oracle: Remove Oracle plugin from the list of vendored
    plugins. GH-11983

IMPROVEMENTS:

  • command/hcl2_upgrade: Has been updated to persist all possible template
    engine options that were supported by the legacy JSON templates. While the
    upgrade command copies the template engine options as is support for the
    template options may not actually work with HCL2 templates; indicated by an
    error similar to fieldname type <no value> is invalid. Before executing a
    build with the upgraded template you are encouraged to run packer validate
    against the template and fix any invalid <no value> references.
    GH-12068
  • core/hcl2: Packer will now report an error when executing a build with no
    sources selected for execution.
    GH-12016
  • core/hcp: Configuration errors for HCP Packer enabled builds have been
    consolidated into a single report to help users address all potential
    issues before retrying their build.
    GH-12031
  • core/hcp: Named builds within a legacy JSON template are now published to a
    HCP Packer registry using its full build name (e.g happycloud.windows-srv-2019),
    as opposed to just the build name field (e.g "name"="windows-srv-2019").
    Builders with no defined name will continue to publish build
    metadate using the builder type as the build name (e.g happycloud).
    GH-12059
  • core:hcl2: When a variable is set in a variables definitions file (i.e
    *.pkrvars.hcl), but isn't defined with the template files (i.e
    *.pkr.hcl), the outputted error message will now include an example of
    variable block that can be added to the build template to remedy the issue.
    GH-12020
  • core: Add ppc64le to binary releases for Linux.
    GH-11966
  • core: Bump github.com/hashicorp/packer-plugin-sdk from 0.3.1 to 0.3.2.
    GH-11981
  • core: Bump supported Go version to 1.18.
    GH-11927

BUG FIXES:

  • command/hcl2_upgrade: special case: Azure shared_image_gallery fix.
    GH-12087
  • core: Bump golang.org/x/sys to address CVE-2022-29526.
    GH-11953
  • core: Bump golang.org/x/text to v0.3.8.
    GH-12047
  • core: Update dependency to resolve GO-2022-0969.
    GH-12009

v1.8.3

02 Aug 18:44
Compare
Choose a tag to compare

1.8.3 (August 2, 2022)

NOTES:

  • There's been a change in the way the ssh_timeout and the
    ssh_handshake_attempts configuration arguments work together. The
    behaviour is unchanged if both or none are specified. However, if only one
    of the two is set the other won't have a default value anymore and will be
    ignored. See Packer Plugin SDK change for details

  • packer-plugin-digitalocean: The Digital Ocean Packer plugin has been handed over
    to the Digital Ocean team. New releases for this plugin are available at
    https://github.com/digitalocean/packer-plugin-digitalocean. This plugin is
    still being bundled in the Packer binary but will be removed in a future
    release. Existing references to the plugin will continue to work but
    users are advised to update the required_plugins block to use the new
    plugin source address.
    GH-11912

required_plugins {
    digitalocean = {
     source =  "github.com/digitalocean/digitalocean"
     version = ">=1.0.8"
    }
}
  • packer-plugin-outscale: The Outscale Packer plugin managed by the Outscale
    team, since Packer 1.7.9, has been removed from the Packer binary. Users are
    advised to install the latest version of the plugin by running
    packer plugins install github.com/outscale/outscale. GH-11912

  • packer-plugin-outscale: The Scaleway Packer plugin managed by the Scaleway
    team, since Packer 1.7.7, has been removed from the Packer binary. Users are
    advised to install the latest version of the plugin by running
    packer plugins install github.com/scaleway/scaleway. GH-11912

FEATURES:

  • Future Scaffolding: This release contains additional changes that allow
    Packer core to validate that a newly built image is a direct child of a HCP
    Packer registry source image. This feature is only available for HCP Packer
    enabled builds using the hcp_packer_image and hcp_packer_iteration data
    source for setting a builder's source image.
    GH-11861

PLUGINS:

The following external plugins have been updated and pinned to address open
issues. Please see their respective changelogs for details on plugin
specific bug fixes and improvements.

IMPROVEMENTS:

  • Bump packer-plugin-sdk to v0.3.1 to fix inconsistencies between ssh_timeout
    and ssh_handshake_attempts configuration arguments in the SSH
    communicator. GH-11909
  • core: During long running builds the HCP Packer registry will mark a build as
    timed out if it has not posted an update after a certain number of minutes. For HCP
    Packer enabled builds a status update will now be sent every 2 minutes to
    the registry to prevent long builds from being marked as timed
    out. GH-11846
  • data/hcp_packer_image: Add component_type configuration argument to
    support specifying an exact build image when multiple images exist in the
    same provider and region for a given HCP Packer bucket iteration.
    GH-11872
  • data/hcp_packer_image: Add support for channel as input argument to
    retrieve an image from the associated iteration. If
    using several images from a single iteration, you may prefer sourcing an
    iteration first, and referencing it for subsequent uses, as every
    hcp_packer_image with the channel set will generate a potentially
    billable HCP Packer request, but if several hcp_packer_images use a
    shared hcp_packer_iteration that will only generate one potentially
    billable request.
    GH-11865

BUG FIXES

  • core/hcl2: Fix crash when parsing malformed provisioner override blocks.
    GH-11881
  • core/hcl2: Fix crash when running packer validate on templates containing
    one or more HCP Packer data sources.
    GH-11883

v1.8.2

21 Jun 21:16
Compare
Choose a tag to compare

1.8.2 (June 21, 2022)

NOTES:

The Packer plugin SDK includes the latest version of the go-getter library, which has been updated to address the vulnerabilities listed in HCSEC-2022-13.

The updated SDK contains changes that can be breaking for some plugins as the updated go-getter settings in the SDK prevent reading/writing through symlinks and to sub-directories that require upward path traversal (e.g /tmp/.../etc/hosts). The updates also includes a 30 minute maximum timeout for file downloading, which can be an issue for very large or slow downloads if they exceed more than 30 minutes to complete.

SECURITY:

  • Bump packer-plugin-sdk to v0.3.0 to address reported vulnerabilities within
    the go-getter library.
    GH-11843
  • Bump plugins relying on go-getter for downloading remote files to address
    reported vulnerabilities within the go-getter library. See HCSEC-2022-13 for details.
    GH-11844

FEATURES:

  • Future Scaffolding: This release contains changes that allow Packer core to
    validate that a newly built image is a direct child of a HCP Packer
    registry source image. This feature is only available for HCP Packer
    enabled builds using the hcp_packer_image data source for setting a
    builder's source image.
    GH-11832

PLUGINS:

External plugins have been pinned to the following versions. Please see their
respective changelogs for details on plugin specific bug fixes and
improvements.

IMPROVEMENTS:

  • Add pause_after configuration argument to Powershell provisioner.
    GH-11792
  • HCP Packer data sources will now fail for revoked iterations to prevent building non-compliant images.
    GH-11854

BUG FIXES:

  • Add missing support for the env configuration argument in remote shell
    provisioners. GH-11819
  • The preinst and postrm user scripts, including the service configuration
    directives, have been removed from the Packer rpm installations packages,
    as Packer does not require a service user in order to run.
    GH-11831

v1.8.1

27 May 20:10
Compare
Choose a tag to compare

1.8.1 (May 27, 2022)

NOTES:

  • All bundled plugins have been updated to their latest release to address any
    open issues pertaining to the legacy SSH key algorithm fix made to the
    Packer plugin SDK.
    GH-11761
    GH-11802
  • This release contains the latest golang.org/x/crypto/ssh module which
    implements client authentication support for signature algorithms based on
    SHA-2 for use with existing RSA keys. Previously, a client would fail to
    authenticate with RSA keys to servers that reject signature algorithms
    based on SHA-1.

FEATURES:

  • New Datasource HTTP datasource retrieves information from a HTTP
    endpoint to be used during Packer builds.
    GH-11658

PLUGINS:

External plugins have been pinned to the following versions. Please see their
respective changelogs for details on plugin specific bug fixes and
improvements.

IMPROVEMENTS:

  • Bump hcp-sdk-go to latest version.
    GH-11763
  • Plugins installed via the packer plugins install command will now
    automatically load for builds using HCL2 templates without a
    required_plugins block.
    GH-11712
  • Plugins installed via the packer plugins install command will now
    automatically load for builds using JSON templates.
    GH-11712

BUG FIXES:

  • Bump github.com/hashicorp/go-getter to fix the untarring of OVA files
    regression. GH-11675
  • Bump github.com/hashicorp/packer-plugin-sdk to address legacy SSH key
    algorithms in SSH communicator.
    GH-11774
    GH-11754

v1.8.0

04 Mar 21:16
1c398a7
Compare
Choose a tag to compare

1.8.0 (March 4, 2022)

NOTES:

  • Breaking Change: The packer-plugin-check(github.com/hashicorp/packer/cmd/packer-plugins-check) has been replaced by the packer-sdc plugin-check command. Plugin maintainers who may be using the packer-plugin-check as part of their release pipeline are encouraged to move to the packer-sdc command. As an alternative, maintainers can continue to use the packer-plugin-check by pinning the command to Packer 1.7.10. GH-11317

FEATURES

  • New Command packer plugins command and subcommands to manage external
    plugins. GH-11553
    GH-11625

IMPROVEMENTS

  • core: Add a env argument to provisioner blocks that allow for setting a
    map of key/value pairs to inject prior to the execute_command. The env argument
    is an alternative to using environment_vars for setting environment variables,
    which has the added ability to read from Packer datasources. GH-11569
  • core: Bump version of go-getter to allow for downloading ISOs with PGP signed
    checksums. GH-11495
  • core: Docker images are now available for all supported architectures that
    the linux binaries are built for including arm, arm64, 386, and amd64
    GH-11564
    GH-11601
    GH-11603
  • core: Packer's linux package service configs and pre/post install scripts are
    now available under .release/linux.
    GH-11601
    GH-11603
  • core: Packer's linux packages are now available for all supported linux
    architectures including arm, arm64, 386, and amd64
    GH-11564
    GH-11601
    GH-11603
  • core: The dockerfile that is used to build the packer docker image available
    at hashicorp/packer now lives in the root of this repo. The README that
    describes how to build the docker targets defined in the Dockerfile are
    available under ./release/docker/README.md.
    GH-11564
    GH-11601
    GH-11603
  • core: The packer-plugin-check command has been removed. Plugin maintainers
    should update their release configuration to use the packer-sdc plugin- check command. GH-11317

BUG FIXES

  • core/hcl2: Fixes an issue preventing builds from pausing between provisioners when
    the --debug argument has been passed.
    GH-11537
  • core/hcl2: Fixes a data loss issue when merging an empty-object map to a non-
    empty map variable.
    GH-11566
  • core/hcl2: Fixes a regression where references to locals via the lookup
    function were failing to find defined keys.
    GH-11566
  • core/hcl2: Fixes an issue where HCP Packer build labels from the first
    completed build image were being copied to all images within the same
    build. GH-11574
    GH-11584
  • core: HCP Packer datasources will no longer fail for iterations with
    scheduled revocations.
    GH-11619
  • core: Packer darwin builds now use macOS system DNS resolver for resolving
    hostnames.GH-9710
    GH-11564

v1.7.10

02 Feb 22:30
Compare
Choose a tag to compare

Packer patch release version 1.7.10

v1.7.9

19 Jan 16:59
Compare
Choose a tag to compare

Packer patch release version 1.7.9

v1.7.8

27 Oct 19:40
Compare
Choose a tag to compare

Packer patch release version 1.7.8

v1.7.7

19 Oct 15:28
Compare
Choose a tag to compare

Packer release version 1.7.7 with improved HCP Packer registry support

v1.7.6

28 Sep 20:16
Compare
Choose a tag to compare

Packer patch release version 1.7.6