mirror of
https://github.com/nmasur/dotfiles
synced 2024-12-27 08:44:52 +00:00
81 lines
1.8 KiB
Terraform
81 lines
1.8 KiB
Terraform
|
locals {
|
||
|
image_file = one(fileset(path.root, "result/nixos-amazon-image-*.vhd"))
|
||
|
}
|
||
|
|
||
|
# Upload to S3
|
||
|
resource "aws_s3_object" "image" {
|
||
|
bucket = "your_bucket_name"
|
||
|
key = basename(local.image_file)
|
||
|
source = local.image_file
|
||
|
etag = filemd5(local.image_file)
|
||
|
}
|
||
|
|
||
|
# Setup IAM access for the VM Importer
|
||
|
data "aws_iam_policy_document" "vmimport_trust_policy" {
|
||
|
statement {
|
||
|
actions = ["sts:AssumeRole"]
|
||
|
principals {
|
||
|
type = "Service"
|
||
|
identifiers = ["vmie.amazonaws.com"]
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
|
||
|
data "aws_iam_policy_document" "vmimport" {
|
||
|
statement {
|
||
|
actions = [
|
||
|
"s3:GetBucketLocation",
|
||
|
"s3:GetObject",
|
||
|
"s3:ListBucket",
|
||
|
]
|
||
|
resources = [
|
||
|
"arn:aws:s3:::${aws_s3_object.image.bucket}",
|
||
|
"arn:aws:s3:::${aws_s3_object.image.bucket}/*",
|
||
|
]
|
||
|
}
|
||
|
statement {
|
||
|
actions = [
|
||
|
"ec2:ModifySnapshotAttribute",
|
||
|
"ec2:CopySnapshot",
|
||
|
"ec2:RegisterImage",
|
||
|
"ec2:Describe*",
|
||
|
]
|
||
|
resources = ["*"]
|
||
|
}
|
||
|
}
|
||
|
|
||
|
resource "aws_iam_role" "vmimport" {
|
||
|
name = "vmimport"
|
||
|
assume_role_policy = data.aws_iam_policy_document.vmimport_trust_policy.json
|
||
|
inline_policy {
|
||
|
name = "vmimport"
|
||
|
policy = data.aws_iam_policy_document.vmimport.json
|
||
|
}
|
||
|
}
|
||
|
|
||
|
# Import to EBS
|
||
|
resource "aws_ebs_snapshot_import" "image" {
|
||
|
disk_container {
|
||
|
format = "VHD"
|
||
|
user_bucket {
|
||
|
s3_bucket = aws_s3_object.image.bucket
|
||
|
s3_key = aws_s3_object.image.key
|
||
|
}
|
||
|
}
|
||
|
|
||
|
role_name = aws_iam_role.vmimport.name
|
||
|
}
|
||
|
|
||
|
# Convert to AMI
|
||
|
resource "aws_ami" "image" {
|
||
|
description = "Created with NixOS."
|
||
|
name = replace(basename(local.image_file), "/\\.vhd$/", "")
|
||
|
virtualization_type = "hvm"
|
||
|
|
||
|
ebs_block_device {
|
||
|
device_name = "/dev/xvda"
|
||
|
snapshot_id = aws_ebs_snapshot_import.image.id
|
||
|
volume_size = 8
|
||
|
}
|
||
|
}
|