使用私有ip的封隔器构建

Question

我用封隔器来烤AMI。它通过分配公共ip和临时安全组工作得很好，但是我不想将公共ip分配给临时实例，有什么方法阻止它分配公共ip吗？

data "amazon-ami" "ami_id" {
  filters = {
    virtualization-type = "hvm"
    name                = "APP-Linux-Centos-*"
    root-device-type    = "ebs"
  }
  owners      = ["11223321"]
  most_recent = true
  region      = "us-east-1"
}

source "amazon-ebs" "instance" {
  region      = "us-east-1"
  ssh_username  = "ec2-user"
  ami_name      = "test12-${uuidv4()}"
  source_ami    = "ami-0#####06"
  instance_type = "t2.micro"
  vpc_id = "vpc-q#####f "
  subnet_id = "subnet-q######d"
  associate_public_ip_address = false
  security_group_ids =["sg-3#####6","sg-f####f"]
}
build {
  sources = ["amazon-ebs.instance"]
}

我用的是

associate_public_ip_address = false

但是我仍然看到，在运行packer构建时，公共ip是附加的，有什么方法可以防止实例被分配到公共ip中吗？

Answer 1

如果您使用的是非默认的VPC，那么associate_public_ip_address是不够的(默认情况下它是假的)。要在私有ip上构建，还需要使用：

ssh_interface = "private_ip"