Add kernel update to Terraform

modules/aws/README.md

@@ -53,6 +53,7 @@ No modules.
 | [aws_security_group_rule.ssh](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule) | resource |
 | [local_sensitive_file.signing-key](https://registry.terraform.io/providers/hashicorp/local/latest/docs/resources/sensitive_file) | resource |
 | [null_resource.signing-key-fingerprint](https://registry.terraform.io/providers/hashicorp/null/latest/docs/resources/resource) | resource |
+| [null_resource.update_kernel](https://registry.terraform.io/providers/hashicorp/null/latest/docs/resources/resource) | resource |
 | [tls_private_key.rsa-4096](https://registry.terraform.io/providers/hashicorp/tls/latest/docs/resources/private_key) | resource |
 | [http_http.cblogin](https://registry.terraform.io/providers/hashicorp/http/latest/docs/data-sources/http) | data source |
 | [http_http.my-public-ip](https://registry.terraform.io/providers/hashicorp/http/latest/docs/data-sources/http) | data source |

modules/aws/terraform.tf

@@ -5,5 +5,8 @@ terraform {
       source  = "hashicorp/aws"
       version = ">= 6.0"
     }
+    null = {
+      source = "hashicorp/null"
+    }
   }
 }

modules/aws/update-kernel.tf

@@ -0,0 +1,23 @@
+resource "null_resource" "update_kernel" {
+  depends_on = [aws_instance.cvm]
+
+  triggers = {
+    instance_id = aws_instance.cvm.id
+  }
+
+  connection {
+    type        = "ssh"
+    user        = var.cvm_username
+    private_key = file(trimsuffix(var.cvm_ssh_pubkey, ".pub"))
+    host        = aws_instance.cvm.public_ip
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "cloud-init status --wait",
+      "sudo env DEBIAN_FRONTEND=noninteractive apt-get update",
+      "sudo env DEBIAN_FRONTEND=noninteractive apt-get install --yes --install-recommends linux-generic",
+      "if [ -f /var/run/reboot-required ]; then sudo shutdown -r +1 'Kernel update completed'; fi",
+    ]
+  }
+}

modules/azure/README.md

@@ -58,6 +58,7 @@ No modules.
 | [azurerm_virtual_network.default](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/virtual_network) | resource |
 | [local_sensitive_file.signing-key](https://registry.terraform.io/providers/hashicorp/local/latest/docs/resources/sensitive_file) | resource |
 | [null_resource.signing-key-fingerprint](https://registry.terraform.io/providers/hashicorp/null/latest/docs/resources/resource) | resource |
+| [null_resource.update_kernel](https://registry.terraform.io/providers/hashicorp/null/latest/docs/resources/resource) | resource |
 | [tls_private_key.rsa-4096](https://registry.terraform.io/providers/hashicorp/tls/latest/docs/resources/private_key) | resource |
 | [azurerm_resource_group.default](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/resource_group) | data source |
 | [http_http.cblogin](https://registry.terraform.io/providers/hashicorp/http/latest/docs/data-sources/http) | data source |

modules/azure/terraform.tf

@@ -2,11 +2,18 @@ terraform {
   required_version = ">= 1.0"
   required_providers {
     azurerm = {
-      source = "hashicorp/azurerm"
+      source  = "hashicorp/azurerm"
       version = ">= 4.50"
     }
     time = {
       source = "hashicorp/time"
     }
+    null = {
+      source = "hashicorp/null"
+    }
   }
+}
+
+provider "azurerm" {
+  features {}
 }

modules/azure/update-kernel.tf

@@ -0,0 +1,23 @@
+resource "null_resource" "update_kernel" {
+  depends_on = [azurerm_linux_virtual_machine.cvm]
+
+  triggers = {
+    instance_id = azurerm_linux_virtual_machine.cvm.id
+  }
+
+  connection {
+    type        = "ssh"
+    user        = var.cvm_username
+    private_key = file(trimsuffix(var.cvm_ssh_pubkey, ".pub"))
+    host        = azurerm_linux_virtual_machine.cvm.public_ip_address
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "cloud-init status --wait",
+      "sudo env DEBIAN_FRONTEND=noninteractive apt-get update",
+      "sudo env DEBIAN_FRONTEND=noninteractive apt-get install --yes --install-recommends linux-generic",
+      "if [ -f /var/run/reboot-required ]; then sudo shutdown -r +1 'Kernel update completed'; fi",
+    ]
+  }
+}

modules/gcp/README.md

@@ -56,6 +56,7 @@ No modules.
 | [google_compute_network.cvm](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_network) | resource |
 | [local_sensitive_file.signing-key](https://registry.terraform.io/providers/hashicorp/local/latest/docs/resources/sensitive_file) | resource |
 | [null_resource.signing-key-fingerprint](https://registry.terraform.io/providers/hashicorp/null/latest/docs/resources/resource) | resource |
+| [null_resource.update_kernel](https://registry.terraform.io/providers/hashicorp/null/latest/docs/resources/resource) | resource |
 | [tls_private_key.rsa-4096](https://registry.terraform.io/providers/hashicorp/tls/latest/docs/resources/private_key) | resource |
 | [http_http.cblogin](https://registry.terraform.io/providers/hashicorp/http/latest/docs/data-sources/http) | data source |
 | [http_http.my-public-ip](https://registry.terraform.io/providers/hashicorp/http/latest/docs/data-sources/http) | data source |

modules/gcp/terraform.tf

@@ -2,8 +2,11 @@ terraform {
   required_version = ">= 1.0"
   required_providers {
     google = {
-      source = "hashicorp/google"
+      source  = "hashicorp/google"
       version = ">= 7.0"
     }
+    null = {
+      source = "hashicorp/null"
+    }
   }
 }

modules/gcp/update-kernel.tf

@@ -0,0 +1,23 @@
+resource "null_resource" "update_kernel" {
+  depends_on = [google_compute_instance.cvm]
+
+  triggers = {
+    instance_id = google_compute_instance.cvm.id
+  }
+
+  connection {
+    type        = "ssh"
+    user        = var.cvm_username
+    private_key = file(trimsuffix(var.cvm_ssh_pubkey, ".pub"))
+    host        = google_compute_instance.cvm.network_interface[0].access_config[0].nat_ip
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "cloud-init status --wait",
+      "sudo env DEBIAN_FRONTEND=noninteractive apt-get update",
+      "sudo env DEBIAN_FRONTEND=noninteractive apt-get install --yes --install-recommends linux-generic",
+      "if [ -f /var/run/reboot-required ]; then sudo shutdown -r +1 'Kernel update completed'; fi",
+    ]
+  }
+}