Terraform Azure run bash script on VM

Question

I'm trying to run a bash script on an Azure VM after deploying it with Terraform. I've tried different approaches but none of them have worked. With "custom_data", I assumed that the file will be uploaded and executed, however I'm not even seeing the file inside the VM.

I've also looked at "azurerm_virtual_machine_extension", but this does not give me the option to upload the file, only to execute commands or download from remote location (can't use fileUris due to requirements):

resource "azurerm_virtual_machine_extension" "test" {
  name                 = "hostname"
  location             = "${azurerm_resource_group.test.location}"
  resource_group_name  = "${azurerm_resource_group.test.name}"
  virtual_machine_name = "${azurerm_virtual_machine.test.name}"
  publisher            = "Microsoft.Azure.Extensions"
  type                 = "CustomScript"
  type_handler_version = "2.0"

  settings = <<SETTINGS
    {
        "commandToExecute": "sh my_script.sh"
    }
SETTINGS

  tags = {
    environment = "Production"
  }
}

resource "azurerm_virtual_machine" "middleware_vm" {
    name                  = "${var.middleware_vm}"
    location              = "${var.location}"
    resource_group_name   = "${azurerm_resource_group.middleware.name}"
    network_interface_ids = ["${azurerm_network_interface.middleware.id}"]
    vm_size               = "Standard_DS4_v2"        

    storage_os_disk {
        name              = "centos_os_disk"
        caching           = "ReadWrite"
        create_option     = "FromImage"
        managed_disk_type = "Premium_LRS"
    }

    storage_data_disk {
        name                 = "managed_backup_disk"
        create_option        = "Empty"
        caching              = "ReadWrite"
        disk_size_gb         = "256"  
        managed_disk_type    = "Premium_LRS"
        lun                  = 0
    }

    storage_image_reference {
        publisher = "OpenLogic"
        offer     = "CentOS"
        sku       = "7.5"
        version   = "latest"
    }

    os_profile {
        computer_name  = "${var.middleware_vm}"
        admin_username = "middlewareadmin"
        custom_data    = "${file("scripts/middleware_disk.sh")}"
  }

Brian Fitzgerald · Accepted Answer · 2019-11-09 14:54:45Z

5

In azurerm_virtual_machine_extension, you can use:

protected_settings = <<PROTECTED_SETTINGS
{
    "script": "${base64encode(file(var.scfile))}"
}
PROTECTED_SETTINGS

Please refer to my answer

answered Nov 9, 2019 at 14:54

Brian Fitzgerald

93610 silver badges19 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Charles Xu · Accepted Answer · 2019-07-31 01:25:36Z

1

First, the VM extension will just execute the script and do not copy the file to the VM. If you want to copy the script into the VM and then execute it. I will suggest you the Terraform provisioner file and remote-exec.

Here is the example that copies the file into the existing VM and executes the script:

resource "null_resource" "example" {

    connection {
        type = "ssh"
        user = "azureuser"
        password = "azureuser@2018"
        host = "13.92.255.50"
        port = 22
    }
    provisioner "file" {
        source = "script.sh"
        destination = "/tmp/script.sh"
    }

    provisioner "remote-exec" {
        inline = [
            "/bin/bash /tmp/script.sh"
        ]
    }
}

Note: the script should be created in the current directory.

answered Jul 31, 2019 at 1:25

Charles Xu

31.8k2 gold badges26 silver badges42 bronze badges

9 Comments

Mario Jacobo Over a year ago

thanks, however this won't work for us. the VMs cannot be exposed to the internet, that's why I wanted to use "custom_data" or ""azurerm_virtual_machine_extension"

Charles Xu Over a year ago

@MarioJacobo First, there is nothing shows the VM does not expose to the Internet. And you also do not show the exact requirement and which error you got.

Charles Xu Over a year ago

@MarioJacobo If you do not expose the VM to the internet, how do you use the VM?

Mario Jacobo Over a year ago

there is no error whatsoever, it's just that nothing is ran or uploaded to the VM, using custom_data = "${file("scripts/middleware_disk.sh")}". I was hoping to use "custom_data" to upload the file and then "azurerm_virtual_machine_extension" to execute the script. The VM just performs some cron tasks internally and does not need to be exposed to the internet at all, due to sensitive data on disk. I may need to use an ARM template (where I encoded the script to base64) and inject that with Terraform. It's not ideal as but it's the only option I see

Mario Jacobo Over a year ago

after a bit more testing, I decided to use ARM template with "azurerm_template_deployment" as "azurerm_virtual_machine_extension" or "custom_data" didnt work. The ARM template can process all bash scripts base64-encoded.

|

Collectives™ on Stack Overflow

Terraform Azure run bash script on VM

2 Answers 2

Comments

9 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

9 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related