website/content/docs/templates/hcl_templates/variables.mdx
⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️
[!IMPORTANT]
Documentation Update: Product documentation previously located in/websitehas moved to thehashicorp/web-unified-docsrepository, where all product documentation is now centralized. Please make contributions directly toweb-unified-docs, since changes to/websitein this repository will not appear on developer.hashicorp.com. ⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️
This topic provides reference information about input variables in Packer templates. Refer to Local Variables for information about using local variables in Packer.
Input variables, sometimes referred to as variables or Packer variables, are the parameters for a Packer build. Input variables let you customize aspects of a build without altering the build's own source code. Some input variables have default values that you can override using command line options, environment variables, or variable definitions files. You cannot change the value of an input variable after the initial override.
Refer to Input Variables and local variables for additional information.
Each input variable accepted by a build must be declared using a variable
block :
variable "image_id" {
type = string
}
variable "availability_zone_names" {
type = list(string)
default = ["us-west-1a"]
}
variable "docker_ports" {
type = list(object({
internal = number
external = number
protocol = string
}))
default = [
{
internal = 8300
external = 8300
protocol = "tcp"
}
]
}
Or a less precise variables block:
variables {
foo = "value"
my_secret = "foo"
}
The label after the variable keyword or a label of a variables block is a
name for the variable, which must be unique among all variables in the same
build. This name is used to assign a value to the variable from outside and to
reference the variable's value from within the build.
Packer defines the following arguments for variable declarations:
default - A default value which then makes the variable optional.type - This argument specifies what value types are accepted for the variable.description - This specifies the input variable's documentation.validation][inpage-validation] - A block to define validation rules, usually in addition to type constraints.sensitive][inpage-sensitive] - This causes string-values from that variable to be obfuscated from Packer's output.The variable declaration can also include a default argument. If present,
the variable is considered to be optional and the default value will be used
if no value is set when running Packer. The default
argument requires a literal value and cannot reference other objects in the
configuration.
The type argument in a variable block allows you to restrict the type of
value that will be accepted as the value
for a variable. If no type constraint is set then a value of any type is
accepted.
While type constraints are optional, we recommend specifying them; they serve as easy reminders for users of the build, and allow Packer to return a helpful error message if the wrong type is used.
Type constraints are created from a mixture of type keywords and type constructors. The supported type keywords are:
stringnumberboolThe type constructors allow you to specify complex types such as collections:
list(<TYPE>)set(<TYPE>)map(<TYPE>)object({<ATTR NAME> = <TYPE>, ... })tuple([<TYPE>, ...])The keyword any may be used to indicate that any type is acceptable. For more
information on the meaning and behavior of these different types, as well as
detailed information about automatic conversion of complex types, see Type
Constraints.
If both the type and default arguments are specified, the given default
value must be convertible to the specified type.
If only default is specified, the type of the default value will be used.
When the type and default are both not specified and you try to set a
variable from env vars or from the command
line, the variable will always be interpreted
as a string.
Because the input variables of a build are part of its user interface, you can
briefly describe the purpose of each variable using the optional description
argument:
variable "image_id" {
type = string
description = "The ID of the machine image (AMI) to use for the server."
}
The description should concisely explain the purpose of the variable and what kind of value is expected. This description string might be included in documentation about the build, and so it should be written from the perspective of the user of the build rather than its maintainer. For commentary for build maintainers, use comments.
@include 'from-1.5/variables/custom-validation.mdx'
@include 'from-1.5/variables/sensitive.mdx'
Within the build that declared a variable, its value can be accessed from
within expressions as var.<NAME>, where <NAME>
matches the label given in the declaration block:
source "googlecompute" "debian" {
zone = var.gcp_zone
tags = var.gcp_debian_tags
}
The value assigned to a variable can be accessed only from expressions within the folder where it was declared.
@include 'from-1.5/variables/assignment.mdx'
The following sections describe these options in more detail.
To specify individual variables on the command line, use the -var option when
running the packer build command:
$ packer build -var="image_id=ami-abc123"
$ packer build -var='image_id_list=["ami-abc123","ami-def456"]'
$ packer build -var='image_id_map={"us-east-1":"ami-abc123","us-east-2":"ami-def456"}'
The -var option can be used any number of times in a single command.
If you plan to assign variables via the command line, we strongly recommend that you at least set a default type instead of using empty blocks; this helps the HCL parser understand what is being set. Otherwise, the interpreter will assume that any variable set on the command line is a string.
To set lots of variables, it is more convenient to specify their values in a
variable definitions file with a filename ending in either .pkrvars.hcl or
.pkrvars.json and then specify that file on the command line with
-var-file:
$ packer build -var-file="testing.pkrvars.hcl"
A variable definitions file uses the same basic syntax as Packer language files, but consists only of variable name and its assigned values:
image_id = "ami-abc123"
availability_zone_names = [
"us-east-1a",
"us-west-1c",
]
~> Important: Unlike legacy JSON templates the input variables within a variable definitions file must be declared
via a variables block within a standard HCL2 template file *.pkr.hcl before it can be assigned a value.
Failure to do so will result in an unknown variable error during Packer's runtime.
Packer also has the ability automatically load one or more variable definitions files if they are present:
.auto.pkrvars.hcl or .auto.pkrvars.json.Files whose names end with .json are parsed as JSON objects instead of HCL,
with the root object properties corresponding to variable names:
{
"image_id": "ami-abc123",
"availability_zone_names": ["us-west-1a", "us-west-1c"]
}
~> Important: Unlike legacy JSON templates the input variables within a variable definitions file must be declared
via a variables block within a standard HCL2 template file *.pkr.hcl before it can be assigned a value.
Failure to do so will result in an unknown variable error during Packer's runtime.
As a fallback for the other ways of defining variables, Packer searches the
environment of its own process for environment variables named PKR_VAR_
followed by the name of a declared variable.
This can be useful when running Packer in automation, or when running a
sequence of Packer commands in succession with the same variables. For example,
at a bash prompt on a Unix system:
$ export PKR_VAR_image_id=ami-abc123
$ packer build gcp/debian/
...
On operating systems where environment variable names are case-sensitive, Packer matches the variable name exactly as given in configuration, and so the required environment variable name will usually have a mix of upper and lower case letters as in the above example.
When variable values are provided in a variable definitions file, Packer's usual syntax can be used to assign complex-typed values, like lists and maps.
Some special rules apply to the -var command line option and to environment
variables. For convenience, Packer defaults to interpreting -var and
environment variable values as literal strings, which do not need to be quoted:
$ export PKR_VAR_image_id=ami-abc123
However, if a build variable uses a type constraint to require a complex value (list, set, map, object, or tuple), Packer will instead attempt to parse its value using the same syntax used within variable definitions files, which requires careful attention to the string escaping rules in your shell:
$ export PKR_VAR_availability_zone_names='["us-west-1b","us-west-1d"]'
For readability, and to avoid the need to worry about shell escaping, we recommend always setting complex variable values via variable definitions files.
The above mechanisms for setting variables can be used together in any combination.
Packer loads variables in the following order, with later sources taking precedence over earlier ones:
*.auto.pkrvars.hcl or *.auto.pkrvars.json files, processed in lexical
order of their filenames.-var and -var-file options on the command line, in the order they are
provided. (highest priority)If the same variable is assigned multiple values using different mechanisms, Packer uses the last value it finds, overriding any previous values. Note that the same variable cannot be assigned multiple values within a single source.
~> Important: Variables with map and object values behave the same way as other variables: the last value found overrides the previous values.
@include 'from-1.5/variables/must-be-set.mdx'
| Usage | packer validate | any other packer command |
|---|---|---|
bar=yz in .pkrvars.hcl file. | error, "bar undeclared" | warning, "bar undeclared" |
var.bar in .pkr.hcl file | error, "bar undeclared" | error, "bar undeclared" |
-var bar=yz argument | error, "bar undeclared" | error, "bar undeclared" |
export PKR_VAR_bar=yz | - | - |