hashicorp / hashicorp/packer-plugin-hyperv

Enable `secondary_iso_images` to Retrieve and Checksum ISO Images just like `iso_url`

Open
#136 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
27
Forks
28
PR merge metrics
No merged PRs in 30d

Description

#### Community Note

Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request.
Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request.
If you are interested in working on this issue or have submitted a pull request, please leave a comment.

#### Description

I like that `iso_url` uses Go-Getter to fetch and optionally checksum an ISO, but find it strange that `secondary_iso_images` does not have the same features. Rather, it seems like this just gets piped directly into Hyper-V as other ISOs to mount.

#### Use Case(s)

1. Installing additional software from the internet or a network share.
2. Wanting to ensure that software being installed has the same checksum as when you wrote the template, especially since the software is likely being installed from an elevated session in Windows or root session in Linux, where it would be vulnerable to a supply chain attack.

#### Potential configuration

Either parse the `secondary_iso_images` variable through the same code that handles `iso_url` _or_ provide a new option called `secondary_iso_image_urls` that are processed through Go-Getter and can get appended to the ISO URLs passed into Hyper-V if they are provided.

#### Potential References

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.