Hello. Since Vagrant 1.5+ vagrant can download boxes from atlas in the format from user/box, so think in the vagrant boxes hosted at atlas as an index or repository.
>From there, for development work, you can say the boxes over there give you flexibility, agility, convenience, however you have the option to use them or not. If you require boxes that are fully patched, and you require a more controlled release cycle then you can build your own boxes. If you go to this url: https://atlas.hashicorp.com/tutorial/packer-vagrant/0 Thats a tutorial to use packer + atlas builder to build boxes. The tutorial will be on ubuntu 12.04, however is an example, once you are happy with the results (your own box), you can move to different OS and have the combination you are after, and level of confidence you require. There are lots of packer templates in the internet, and chef have a project called bento with lots of OS combinations to get you started: https://github.com/chef/bento Thanks Alvaro. On Sat, Feb 13, 2016 at 5:57 PM, DevelopDaily <[email protected]> wrote: > Since I am a new fan of the Vagrant, please educate me a little bit about > the security issues of using Vagrant. > > I "up" the new box ubuntu/trusty64 released two days ago. How do I know if > that box comes from a reputable provider like ubuntu or HashiCorp? Does > HashiCorp do the security checks on the published boxes? > > I am running the ubuntu/trusty64 now. For the sake of argument, if the > ubuntu/trusty64 comes from a malicious provider, is it the user's > responsibility to scan it for viruses, spyware, etc. after the "up"? > > Thanks. > > -- > This mailing list is governed under the HashiCorp Community Guidelines - > https://www.hashicorp.com/community-guidelines.html. Behavior in > violation of those guidelines may result in your removal from this mailing > list. > > GitHub Issues: https://github.com/mitchellh/vagrant/issues > IRC: #vagrant on Freenode > --- > You received this message because you are subscribed to the Google Groups > "Vagrant" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/vagrant-up/2e847687-da74-46b3-8bc1-ed2e52aadfc8%40googlegroups.com > <https://groups.google.com/d/msgid/vagrant-up/2e847687-da74-46b3-8bc1-ed2e52aadfc8%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- This mailing list is governed under the HashiCorp Community Guidelines - https://www.hashicorp.com/community-guidelines.html. Behavior in violation of those guidelines may result in your removal from this mailing list. GitHub Issues: https://github.com/mitchellh/vagrant/issues IRC: #vagrant on Freenode --- You received this message because you are subscribed to the Google Groups "Vagrant" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/vagrant-up/CAHqq0eyB%2BP2pKNO6-RH%2B9as0RR5GTobFxgyG%3DMihnFQ5ZCXxcg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
