CCNA VM Deployment And Provisioning Questions

With the qemu builder, Packer starts the VM and immediately tries to SSH using the configured credentials. If the image does not start sshd early or if the boot command does not wait for the SSH port to become reachable, the communicator times out and provisioning never runs. Ensuring sshd is enabled and adding appropriate boot wait logic resolves this.

The shell provisioner runs scripts or inline commands on the guest. It is commonly used to install packages and configure the VM. By specifying a shell script, Vagrant will execute it during provisioning, which meets the requirement of installing dependencies after boot.

`vagrant provision` re-runs the configured provisioners against the already-running guest, so a newly added shell script executes in place. It satisfies the stem's constraint of applying configuration changes without destroying the existing virtual machine, unlike `vagrant destroy` followed by `vagrant up`, which rebuilds from scratch.

A .env file excluded from git keeps API keys out of version control while remaining readable by provisioning scripts and applications at runtime. Adding it to .gitignore satisfies the stem's constraint of avoiding committed secrets, unlike hardcoding values or relying on tracked configuration files that would expose credentials in repository history.

The import suboption tells virt-install to use the existing disk image without creating, resizing, or formatting it. This is the correct way to attach a pre-built image to a new domain definition. Without import, virt-install may attempt to create or modify the file, which is undesirable when the image already contains an installed OS.

The `gui` setting in the VirtualBox provider block controls whether the virtual machine boots with a graphical interface or runs headless. Setting `gui = true` launches the VM window, satisfying scenarios requiring desktop interaction during provisioning, while the default headless mode suits automated, terminal-only workflows.

`vagrant status` queries the active Vagrant environment and reports each machine's state, showing "running" for the libvirt-backed VM, while the provider in use is confirmed through the environment's configuration. It satisfies both constraints in the stem: verifying the running state and identifying the libvirt provider.

The packages key lists packages for cloud-init to install during first boot, invoking the system package manager before configuration modules run. Placing package names here guarantees installation on initial provisioning, satisfying the requirement without custom scripts or manual intervention.

`packer inspect` parses a template and prints its declared variables, builders, provisioners and post-processors as structured, human-readable output, without executing a build. This directly satisfies the stem's requirement to display build configuration readably, unlike `packer validate`, which only checks syntax, or `packer build`, which runs the build.

A public_network bridges the VM's virtual NIC onto the host's physical interface, so DHCP broadcasts reach the physical network's server and the VM obtains a routable address from that subnet. This satisfies the stem's requirement for an IP assigned directly by the external DHCP server rather than by libvirt's private NAT.

Vagrant reads the Vagrantfile in the project root automatically on every vagrant command, using Ruby syntax to declare the box, provider, networking and provisioning. No other file is parsed by default, so this is the configuration entry point the stem asks for.

The write_files module's path key specifies the absolute filesystem location where each file is created, which is mandatory for every entry. This satisfies the stem's requirement by defining where the managed file content is written on the instance.

The `env` hash on a shell provisioner injects the specified variables directly into the guest's provisioning environment, satisfying the requirement to pass values during provisioning rather than at boot. Vagrant exports these into the script's process, so the guest sees them without editing the box or using a separate configuration management tool.

scripts-per-instance is a cloud-init module that runs scripts exactly once per instance, on the first boot. It is designed for tasks that should only happen during initial provisioning. By providing the script as a MIME part with the appropriate content type, cloud-init will execute it only on the first boot, satisfying the requirement.

Vagrant resolves a missing box by fetching it from the Vagrant Cloud registry, downloading and installing it locally before provisioning. This default behaviour means no manual box installation is needed, satisfying the scenario where the box is absent from the host.

packer validate parses the template and reports syntax, schema, and configuration errors without starting a build, letting you catch mistakes cheaply. It satisfies the pre-build validation requirement, unlike packer build, which would attempt the full image creation.

The #cloud-config shebang on the first line signals cloud-init to parse the file as YAML configuration rather than a shell script or other user-data format. Without it, cloud-init treats the payload as an unrecognised script and skips the declared modules.

config.vm.define creates a named machine configuration block within the Vagrantfile, allowing per-machine settings such as hostname and private network IP. Each block inherits the global configuration but can override it. This is the standard way to define multiple machines in a single Vagrantfile, exactly matching the requirement for three web servers and one load balancer with distinct identities.

Using `config.vm.define :name` creates a named machine block within the single Vagrantfile, letting each machine carry its own settings such as box, network and provider configuration. This satisfies the stem's requirement to define individual configurations for multiple machines, since each block is scoped separately rather than sharing one global definition.

The cloud-init hostname module reads the instance's configured hostname from metadata and applies it during initial boot, setting both the transient and persistent hostname. This directly satisfies the stem's requirement for the module responsible for hostname configuration at first boot.

In Vagrant, each machine defined in a multi-machine Vagrantfile has its own config block where you can override the default SSH forwarded port. Specifying guest: 22 with a unique host port and a stable id (such as "ssh") replaces the default 2222 mapping for that machine, preventing collisions when several VMs run simultaneously on the same host.

The kernel panic occurs because the guest initramfs has no virtio_blk driver, so the root filesystem on the virtio disk is invisible. Injecting the module via the installer boot command, or ensuring the installed initramfs includes it, lets the kernel enumerate the disk and mount root. This is the standard fix when a KVM image built by Packer fails to boot under `-drive if=virtio`.

Defines the builder(s) to use.

The format option specifies the output image format produced by the QEMU builder, satisfying the stem's requirement. It controls the on-disk artefact type, such as qcow2 or raw, and is distinct from accelerator, which selects the CPU virtualisation backend rather than the image encoding.

Packer authenticates to the target cloud provider's API using credentials such as access keys or service principal secrets before it can create, snapshot and register images. Without these credentials the builder cannot provision temporary instances, so they are mandatory for any existing cloud environment.

The ssh_authorized_keys directive under the users list injects the specified public keys into that user's authorized_keys file during first boot. It satisfies the requirement to target the correct account rather than a default or root user.

The format option in the QEMU builder defines the output disk image format, such as qcow2 or raw. OpenStack Glance commonly requires qcow2 for KVM-based instances. If the format is set incorrectly, the image may not be recognized. Reviewing and setting format to qcow2 ensures compatibility with OpenStack's default disk format expectations.

The openstack post-processor authenticates to the OpenStack APIs and uploads the built artefact to Glance, registering it as an image. It is the only post-processor type that targets Glance directly, satisfying the requirement to publish the Packer output there.

The cloud-init log records each module's execution and any YAML parsing errors encountered while processing user-data, including write_files failures. Examining it reveals the exact syntax or schema fault, which the instance console output and syslog do not capture in equivalent detail.

This configuration sets the box to ubuntu/jammy64 and defines a forwarded port mapping from host port 8080 to guest port 80. The syntax uses the network forwarded_port option with guest and host parameters, which is the standard Vagrant way to forward ports. It directly satisfies the requirement for a single VM with the specified box and port forwarding.

The runcmd module executes arbitrary shell commands during instance initialisation, after other cloud-init stages complete. Commands are listed in the cloud-config under 'runcmd' and run in order, letting administrators perform custom configuration beyond the built-in modules.

The packages module is a standard cloud-init module that installs listed packages during first boot, satisfying the stem's requirement for a genuine cloud-init module. It runs in the config stage and is distinct from bootcmd or write_files, which handle commands and file content instead.

name is the mandatory identifying directive within cloud-init's users section, specifying the account to create or modify. It satisfies the stem by being a core valid user-configuration key, required whenever a user entry is defined.

The primary configuration file.

In the qemu builder, the 'net_device' setting specifies the network device model and can also configure the network backend. If it is set to 'none' or misconfigured, the VM will have no network connectivity. By default, Packer configures a user-mode network, but if overridden, the VM may lack access. Verifying this setting ensures the VM can reach external repositories.

The amazon-ebs builder provisions an EC2 instance, runs provisioners against it, then stops it and creates an Amazon Machine Image (AMI) from the resulting EBS snapshot. This directly satisfies the requirement for an AWS-specific image, producing a native AMI rather than a generic artefact requiring later conversion.