Skip to content

Releases: hashicorp/packer

v1.8.2

21 Jun 21:16
@hc-github-team-es-release-engineering hc-github-team-es-release-engineering
v1.8.2
f0e24a2
Compare
Choose a tag to compare
v1.8.2

1.8.2 (June 21, 2022)

NOTES:

The Packer plugin SDK includes the latest version of the go-getter library, which has been updated to address the vulnerabilities listed in HCSEC-2022-13.

The updated SDK contains changes that can be breaking for some plugins as the updated go-getter settings in the SDK prevent reading/writing through symlinks and to sub-directories that require upward path traversal (e.g /tmp/.../etc/hosts). The updates also includes a 30 minute maximum timeout for file downloading, which can be an issue for very large or slow downloads if they exceed more than 30 minutes to complete.

SECURITY:

  • Bump packer-plugin-sdk to v0.3.0 to address reported vulnerabilities within
    the go-getter library.
    GH-11843
  • Bump plugins relying on go-getter for downloading remote files to address
    reported vulnerabilities within the go-getter library. See HCSEC-2022-13 for details.
    GH-11844

FEATURES:

  • Future Scaffolding: This release contains changes that allow Packer core to
    validate that a newly built image is a direct child of a HCP Packer
    registry source image. This feature is only available for HCP Packer
    enabled builds using the hcp_packer_image data source for setting a
    builder's source image.
    GH-11832

PLUGINS:

External plugins have been pinned to the following versions. Please see their
respective changelogs for details on plugin specific bug fixes and
improvements.

IMPROVEMENTS:

  • Add pause_after configuration argument to Powershell provisioner.
    GH-11792
  • HCP Packer data sources will now fail for revoked iterations to prevent building non-compliant images.
    GH-11854

BUG FIXES:

  • Add missing support for the env configuration argument in remote shell
    provisioners. GH-11819
  • The preinst and postrm user scripts, including the service configuration
    directives, have been removed from the Packer rpm installations packages,
    as Packer does not require a service user in order to run.
    GH-11831
Loading

v1.8.1

27 May 20:10
@hc-github-team-es-release-engineering hc-github-team-es-release-engineering
v1.8.1
467529f
Compare
Choose a tag to compare
v1.8.1

1.8.1 (May 27, 2022)

NOTES:

  • All bundled plugins have been updated to their latest release to address any
    open issues pertaining to the legacy SSH key algorithm fix made to the
    Packer plugin SDK.
    GH-11761
    GH-11802
  • This release contains the latest golang.org/x/crypto/ssh module which
    implements client authentication support for signature algorithms based on
    SHA-2 for use with existing RSA keys. Previously, a client would fail to
    authenticate with RSA keys to servers that reject signature algorithms
    based on SHA-1.

FEATURES:

  • New Datasource HTTP datasource retrieves information from a HTTP
    endpoint to be used during Packer builds.
    GH-11658

PLUGINS:

External plugins have been pinned to the following versions. Please see their
respective changelogs for details on plugin specific bug fixes and
improvements.

IMPROVEMENTS:

  • Bump hcp-sdk-go to latest version.
    GH-11763
  • Plugins installed via the packer plugins install command will now
    automatically load for builds using HCL2 templates without a
    required_plugins block.
    GH-11712
  • Plugins installed via the packer plugins install command will now
    automatically load for builds using JSON templates.
    GH-11712

BUG FIXES:

  • Bump github.com/hashicorp/go-getter to fix the untarring of OVA files
    regression. GH-11675
  • Bump github.com/hashicorp/packer-plugin-sdk to address legacy SSH key
    algorithms in SSH communicator.
    GH-11774
    GH-11754
Loading

v1.8.0

04 Mar 21:16
@hc-github-team-es-release-engineering hc-github-team-es-release-engineering
v1.8.0
1c398a7
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.8.0

1.8.0 (March 4, 2022)

NOTES:

  • Breaking Change: The packer-plugin-check(github.com/hashicorp/packer/cmd/packer-plugins-check) has been replaced by the packer-sdc plugin-check command. Plugin maintainers who may be using the packer-plugin-check as part of their release pipeline are encouraged to move to the packer-sdc command. As an alternative, maintainers can continue to use the packer-plugin-check by pinning the command to Packer 1.7.10. GH-11317

FEATURES

  • New Command packer plugins command and subcommands to manage external
    plugins. GH-11553
    GH-11625

IMPROVEMENTS

  • core: Add a env argument to provisioner blocks that allow for setting a
    map of key/value pairs to inject prior to the execute_command. The env argument
    is an alternative to using environment_vars for setting environment variables,
    which has the added ability to read from Packer datasources. GH-11569
  • core: Bump version of go-getter to allow for downloading ISOs with PGP signed
    checksums. GH-11495
  • core: Docker images are now available for all supported architectures that
    the linux binaries are built for including arm, arm64, 386, and amd64
    GH-11564
    GH-11601
    GH-11603
  • core: Packer's linux package service configs and pre/post install scripts are
    now available under .release/linux.
    GH-11601
    GH-11603
  • core: Packer's linux packages are now available for all supported linux
    architectures including arm, arm64, 386, and amd64
    GH-11564
    GH-11601
    GH-11603
  • core: The dockerfile that is used to build the packer docker image available
    at hashicorp/packer now lives in the root of this repo. The README that
    describes how to build the docker targets defined in the Dockerfile are
    available under ./release/docker/README.md.
    GH-11564
    GH-11601
    GH-11603
  • core: The packer-plugin-check command has been removed. Plugin maintainers
    should update their release configuration to use the packer-sdc plugin- check command. GH-11317

BUG FIXES

  • core/hcl2: Fixes an issue preventing builds from pausing between provisioners when
    the --debug argument has been passed.
    GH-11537
  • core/hcl2: Fixes a data loss issue when merging an empty-object map to a non-
    empty map variable.
    GH-11566
  • core/hcl2: Fixes a regression where references to locals via the lookup
    function were failing to find defined keys.
    GH-11566
  • core/hcl2: Fixes an issue where HCP Packer build labels from the first
    completed build image were being copied to all images within the same
    build. GH-11574
    GH-11584
  • core: HCP Packer datasources will no longer fail for iterations with
    scheduled revocations.
    GH-11619
  • core: Packer darwin builds now use macOS system DNS resolver for resolving
    hostnames.GH-9710
    GH-11564
Loading

v1.7.10

02 Feb 22:30
@packer-ci packer-ci
v1.7.10
fa0f6e6
Compare
Choose a tag to compare
v1.7.10

Packer patch release version 1.7.10

Loading

v1.7.9

19 Jan 16:59
@packer-ci packer-ci
v1.7.9
a3f94fd
Compare
Choose a tag to compare
v1.7.9

Packer patch release version 1.7.9

Loading

v1.7.8

27 Oct 19:40
@packer-ci packer-ci
v1.7.8
cc7374e
Compare
Choose a tag to compare
v1.7.8

Packer patch release version 1.7.8

Loading

v1.7.7

19 Oct 15:28
@packer-ci packer-ci
v1.7.7
e52e077
Compare
Choose a tag to compare
v1.7.7

Packer release version 1.7.7 with improved HCP Packer registry support

Loading

v1.7.6

28 Sep 20:16
@packer-ci packer-ci
v1.7.6
6e6aa3f
Compare
Choose a tag to compare
v1.7.6

Packer patch release version 1.7.6

Loading

v1.7.5

15 Sep 00:57
@packer-ci packer-ci
v1.7.5
881e5f8
Compare
Choose a tag to compare
v1.7.5

Packer patch release version 1.7.5

Loading

v1.7.4

20 Jul 18:07
@packer-ci packer-ci
v1.7.4
8f860ea
Compare
Choose a tag to compare
v1.7.4

Packer patch release version 1.7.4

Loading