packer - AMI 생성

packer {
  required_plugins {
    amazon = {
      source  = "github.com/hashicorp/amazon"
      version = ">= 0.0.2"
    }
  }
}
 
variable "region"                 { default = "ap-northeast-2" }
variable "ami_name_prefix"        { default = "app-node" }
variable "instance_type"          { default = "m6i.large" }
variable "iam_instance_profile"   { default = "ec2_role_with_ecr_ssm" }
variable "share_with_accounts"    { type = list(string), default = ["111111111111"] }
variable "org_arns"               { type = list(string), default = [] } # ex) ["arn:aws:organizations::123456789012:organization/o-abcdefghi"]
 
variable "ecr_account_id"         { default = "123456789012" }
variable "ecr_repo"               { default = "myapp/backend" }
variable "ecr_tag"                { default = "latest" }
variable "dockerhub_images"       { type = list(string), default = ["nginx:1.25-alpine", "busybox:1.36"] }
 
variable "owner"                  { default = "platform" }
variable "environment"            { default = "STG" }
variable "service"                { default = "web" }
variable "description"            { default = "AL2 AMI pre-pulls ECR & Docker Hub images for faster cold start" }
 
locals {
  name            = "${var.ami_name_prefix}-${timestamp()}"
  ecr_registry    = "${var.ecr_account_id}.dkr.ecr.${var.region}.amazonaws.com"
  ecr_image       = "${local.ecr_registry}/${var.ecr_repo}:${var.ecr_tag}"
  dockerhub_csv   = join(" ", var.dockerhub_images)
 
  # 공통 태그(AMI/런인스턴스)
  tags = {
    Name          = local.name
    Owner         = var.owner
    Environment   = var.environment
    Service       = var.service
    Description   = var.description
    ProvisionedBy = "Packer"
  }
}
 
source "amazon-ebs" "al2" {
  region                 = var.region
  ami_name               = local.name
  instance_type          = var.instance_type
  ssh_username           = "ec2-user"
  iam_instance_profile   = var.iam_instance_profile
 
  # Amazon Linux 2 최신 AMI 필터
  source_ami_filter {
    filters = {
      name                = "amzn2-ami-hvm-*-x86_64-gp2"
      root-device-type    = "ebs"
      virtualization-type = "hvm"
    }
    owners      = ["137112412989"] # Amazon EKS 공식 계정
    most_recent = true
  }
 
  ami_description        = var.description
  tags                   = local.tags        # 최종 AMI 태그
  run_tags               = local.tags        # 빌드 시 생성되는 리소스(EC2 등) 태그
 
  ami_users              = var.share_with_accounts  # AMI를 특정 계정에 공유
  ami_org_arns           = var.org_arns             # 또는 AWS Organization 전체 공유
 
  launch_block_device_mappings {
    device_name            = "/dev/xvda"
    volume_type            = "gp3"
    volume_size            = 30
    throughput             = 125
    delete_on_termination  = true
  }
 
  aws_polling {
    delay_seconds = 20
    max_attempts  = 200
  }
}
 
build {
  name    = "al2-ecr-prepull"
  sources = ["source.amazon-ebs.al2"]
 
  provisioner "shell" {
    environment_vars = [
      "REGION=${var.region}",
      "ECR_REGISTRY=${local.ecr_registry}",
      "ECR_IMAGE=${local.ecr_image}",
      "DOCKERHUB_IMAGES=${local.dockerhub_csv}"
    ]
    inline = [
      "set -euo pipefail",
      # Docker 설치 및 시작 (Amazon Linux 2)
      "sudo amazon-linux-extras install -y docker || sudo yum install -y docker",
      "sudo systemctl enable docker",
      "sudo systemctl start docker",
 
      # ECR 로그인
      "aws ecr get-login-password --region \"$REGION\" | sudo docker login --username AWS --password-stdin \"$ECR_REGISTRY\"",
 
      # 이미지 프리풀(ECR + Docker Hub)
      "sudo docker pull \"$ECR_IMAGE\"",
      "for img in $DOCKERHUB_IMAGES; do sudo docker pull \"$img\"; done",
 
      # 필요 시 부팅 시 자동시작 비활성화(환경에 맞게 결정)
      "sudo systemctl disable docker || true"
    ]
  }
 
  post-processor "manifest" {
    output = "manifest.json"
    strip_path = true
    custom_data = {
      ecr_image        = "${local.ecr_image}"
      dockerhub_images = "${local.dockerhub_csv}"
      environment      = "${var.environment}"
    }
  }
}

  provisioner "shell" {
    environment_vars = [
      "REGION=${var.region}",
      "ECR_REGISTRY=${local.ecr_registry}",
      "ECR_IMAGE=${local.ecr_image}",
      "DOCKERHUB_IMAGES=${local.dockerhub_csv}"
    ]
    inline = [
      "set -euo pipefail",
      # Docker 설치 및 시작 (Amazon Linux 2)
      "sudo amazon-linux-extras install -y docker || sudo yum install -y docker",
      "sudo systemctl enable docker",
      "sudo systemctl start docker",
 
      # ECR 로그인
      "aws ecr get-login-password --region \"$REGION\" | sudo docker login --username AWS --password-stdin \"$ECR_REGISTRY\"",
 
      # 이미지 프리풀(ECR + Docker Hub)
      "sudo docker pull \"$ECR_IMAGE\"",
      "for img in $DOCKERHUB_IMAGES; do sudo docker pull \"$img\"; done",
 
      # 필요 시 부팅 시 자동시작 비활성화(환경에 맞게 결정)
      "sudo systemctl disable docker || true"
    ]
  }

# 1) 초기화 & 검증
packer init .
packer validate .

# 2) 빌드
packer build \
  -var "region=ap-northeast-2" \
  -var "ecr_account_id=123456789012" \
  -var "ecr_repo=myapp/backend" \
  -var "ecr_tag=2025-08-01" \
  -var 'dockerhub_images=["nginx:1.25-alpine","curlimages/curl:8.9.0"]' \
  .

pipeline {
  agent any
  stages {
    stage('Build AMI') {
      steps {
        sh '''
          packer init .
          packer validate .
          packer build \
            -var "region=ap-northeast-2" \
            -var "ecr_account_id=123456789012" \
            -var "ecr_repo=myapp/backend" \
            -var "ecr_tag=2025-08-01" \
            -var 'dockerhub_images=["nginx:1.25-alpine","curlimages/curl:8.9.0"]' \
            .
        '''
      }
    }
  }
}