This lab facilitates learning by doing by utilizing Packer to create an ami-image file that is staged in Amazon aws. The Packer tool is used to run an Ansible role against the OS image to harden the image. The resulting ami-image would then be available to specify when creating or upgrading Kubernetes clusters using installers such as kops.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Grab the aws keys and Install the Ansible Role
Use the directory list command to verify the files in your home directory.
$ ls -lVerify that ansible is installed by typing:
$ ansible --versionDisplay the AWS Credentials setup for your lab and make note of them.
IMPORTANT: DO NOT STORE THESE KEYS ANYWHERE BUT ON YOUR PRIVATE CLIENT SYSTEM.
$ cat .aws/credentialsGenerate an RSA key for use by the ansible playbook that will be used to harden the OS system.
$ ssh-keygen -b 4096Note: Use defaults (blank return responses) to the prompts.
Create a default vpc for your lab instance:
$ aws ec2 create-default-vpcUse the anisible-galaxy to install the sample plybook we will use in this lab:
$ ansible-galaxy install githubixx.harden-linux- Edit the keys into the Packer run script, and Run the Packer Job
Use the editor of your choice to edit the ksac-packer-build.sh file and place the actual aws key id and secret key that you recorded into the place where the environment variables appear now.
$ vi ksac-packer-build.shUse the cat command to examine the contents of the ksac-packer.json file.
$ cat ksac-packer.jsonUse the cat command to examine the contents of the playbook.yml file.
$ cat playbook.ymlWhen you are ready to execute the packer build and provisioning process, enter:
$ ksac-packer-build.shWhen the output is complete, use the amazon console to view the ami images created.
