From the course: Learning HashiCorp Packer

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Use Ansible modules to harden our image

Use Ansible modules to harden our image - Packer Tutorial

From the course: Learning HashiCorp Packer

Start my 1-month free trial

Use Ansible modules to harden our image

- [Instructor] Building images allows us to reduce launch times by pre-installing platform tooling, such as monitoring services, log shippers or language runtimes. But a second advantage is that we can specify a minimum sort of configuration that has to be present on each machine. This is valuable for adhering to compliance and a minimum level of security. We can then take this image, built to our standard requirements, and use it as a base image for further Packer images. So, instead of building on a fresh Ubuntu image, provided by Canonical, we can build upon an Ubuntu image pre-configured by ourselves. You may already have some hardening scripts and you could reuse them. With Ansible, we can use community-provided playbooks, and in this video we're going to use those provided by dev-sec.io. So, we're going to harden the operating system level and then also harden SSH. They provide these down here, on the bottom: some options in Chef, Puppet, and Ansible. We're going to use the…

Contents