packer/kali.pkrvars.hcl at main · dylanbegin/packer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
# Packer variables for Kali Linux

vmid        = "1014"
vmname      = "kali"
vmdesc      = "Kali Linux Base Template"
isourl      = "https://cdimage.kali.org/kali-2026.2/kali-linux-2026.2-installer-netinst-amd64.iso"
isochecksum = "d32f929dacc48134a31461a09f2160d13ad1d26b820cee920446813ca979b39b"
isofile     = "kali.iso"
httpdir     = "./http/kali/"
efienroll   = false
sshpty      = true
bootwait    = "10s"
bootcmd     = [
  "<wait><down>c<wait>",
  "set background_color=black<enter>",
  "linux /install.amd/vmlinuz vga=788 auto=true console=ttyS0 net.ifnames=0 ipv6.disable=1 hostname=kali domain=localhost url=http://{{ .HTTPIP }}:{{ .HTTPPort }}/preseed.cfg<enter>",
  "initrd /install.amd/initrd.gz<enter>",
  "boot<enter>"
]
provisioner = [
  # GRUB Configuration
  "cp -f /tmp/base/grub /etc/default/grub",
  "echo 'GRUB_CMDLINE_LINUX=\"console=ttyS0 net.ifnames=0 ipv6.disable=1 quiet\"' >> /etc/default/grub",
  "echo 'GRUB_DISTRIBUTOR=\"Kali Rolling\"' >> /etc/default/grub",
  "update-grub2 -o /boot/grub/grub.cfg",
  "update-grub2 -o /boot/efi/EFI/kali/grub.cfg",
  # Package Updates and installation
  "apt remove bsdextrautils debian-faq dictionaries-common doc-debian laptop-detect nano man-db manpages mime-support shared-mime-info reportbug usbutils vim vim-common vim-tiny wamerican xdg-user-dirs -y",
  "apt install amd64-microcode intel-microcode ca-certificates cloud-init curl gpg sudo wget -y",
  "install -m 0755 -d /etc/apt/keyrings",
  "curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc",
  "chmod a+r /etc/apt/keyrings/docker.asc",
  "echo \"deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian $(. /etc/os-release && echo \"$VERSION_CODENAME\") stable\" | tee /etc/apt/sources.list.d/docker.list > /dev/null",
  "wget -O- https://apt.releases.hashicorp.com/gpg | gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg",
  "echo \"deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main\" | tee /etc/apt/sources.list.d/hashicorp.list",
  "systemctl daemon-reload",
  "apt full-upgrade -y",
  "apt update -y",
  "apt upgrade -y",
  # Setup sudoers for sudo
  "echo '%sudo ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/sudo",
  # SSH hardening
  "cp -f /tmp/base/sshd_config /etc/ssh/sshd_config",
  "cp -f /tmp/base/ssh-banner /etc/ssh/ssh-banner",
  # Foot term config
  "mkdir -p /usr/share/terminfo/f",
  "cp -f /tmp/base/foot /usr/share/terminfo/f/foot",
  "cp -f /tmp/base/foot-direct /usr/share/terminfo/f/foot-direct",
  # Enable Guest Agent
  "systemctl start qemu-guest-agent",
  "systemctl enable qemu-guest-agent",
  # Initialize cloud-init
  "cp -f /tmp/base/99-pve.cfg /etc/cloud/cloud.cfg.d/99-pve.cfg",
  "cloud-init clean --logs",
  # Cleanup VM
  "apt remove curl wget -y",
  "apt autoclean -y",
  "apt autoremove -y",
  "truncate -s 0 /etc/machine-id",
  "rm -f /var/lib/systemd/random-seed",
  "rm -rf /root/* /tmp/* /var/tmp/*",
  "sync",
  "passwd -l root"
]