Packer

Packer at a glance

HashiCorp Packer is a widely used tool for building machine and container images as code, producing consistent images across platforms. Packer ships regular releases plus plugin updates; following the license change to the BUSL, the ecosystem mirrors Terraform's, and pinning versions matters for reproducibility.

For admins Packer is a build-time tool, so the security angle is really about what it produces: keep the base images and provisioners current so the images you bake include the latest patches, and pin the Packer and plugin versions so builds are reproducible across the team and CI. Templates can reference secrets (for provisioning) — keep them out of version control in plain form. After upgrading Packer or plugins, run a build and verify the output image. Track your version and the project's support window; patchletter surfaces new Packer releases.