Re: vagrant [Was: Re: packages status]

["Felix C. Stegerman" <flx@obfusk.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2014-01-08 17:12, Felix C. Stegerman wrote:
> On 2014-01-08 04:44, Diogene Laerce wrote:
>> Hi,
> 
>>>> [...] I would like to automate the installation process from
>>>>  scratch to a django development platform. But forgot to
>>>> note every modification from the very beginning. ^^ :)
>>> I'm not sure what you mean by "development platform", but for 
>>> standardized/customized development/testing environments, 
>>> vagrant (http://www.vagrantup.com/) is quite useful.  It makes
>>> it very easy to create, use, and share custom virtual
>>> machines.
> 
>> Actually I didn't know vagrant but I was going to use ansible to 
>> do about the same job. The vagrant documentation provides an 
>> explanation on how to use them as a synergy so : thank you ! ;)
> 
> You're welcome.
> 
>>> The only downside is that it is not configured very securely
>>> by default.
> 
> To expand on the insecure configuration: by default, vagrant: *
> listens to *:2222 allowing anyone on the local network to access 
> your VM (unless firewalled). * uses a known ssh key pair and user
> password. * shares the folder containing the Vagrantfile with the
> VM, allowing someone who manages to access/compromise the VM access
> to the Vagrantfile, which allows him to inject ruby code that you
> will run when using vagrant the next time.
> 
> All of these can be fixed.  I've written some instructions a while 
> back on how to create a secure (ubuntu) base box yourself: 
> https://gist.github.com/obfusk/5768197
> 
>> The less scripting I need to do the better, anyway. :)
> 
>> Lots of reading to come..
> 
> Have fun.
> 
> - Felix

I'm currently working on a (ruby) development VM using vagrant+ansible
[1].  It uses an ubuntu base box b/c ubuntu provides one and I prefer
users not have to download a base box from an unknown source.


- - Felix

[1] https://github.com/obfusk/dev-vm-ruby/tree/ansible
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: Using GnuPG with Icedove - http://www.enigmail.net/
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=MhQv
-----END PGP SIGNATURE-----