Building Secure and Flexible Multi-Cloud Images with Multi-Boot Mode
summary
Claims a reproducible CI/CD pipeline that produces hardened multi‑cloud, multi‑boot images for Cisco Secure Access Resource Connector and proves them with automated integration tests and promotion gates. Pipeline uses GitHub Actions for orchestration, Packer + Terraform for image build and infra, Ansible playbooks for configuration and tests, and pins dependency versions so builds generate the same binary. End-to-end runs take about three hours and failing tests block promotion to customers.
AI-written summary · about
chapters (19)
- 0:00Multi-cloud image security
- 1:29Introduction
- 2:13CI/CD fundamentals
- 5:28Multi-boot mode requirements
- 7:13GitHub Actions and Packer
- 11:34Repository structure
- 16:16GitHub Actions pros
- 18:27Terraform deployment
- 21:58Packer’s role
- 24:07Pipeline workflow
- 27:03Parallel builds and testing
- 30:56Promotion pipeline
- 32:46Manual testing
- 35:16Code structure examples
- 41:21Version pinning
- 43:33Environment cleanup
- 44:37Key takeaways
- 47:52Open sourcing
- 48:15Q&A
related talks
26mAutomating Image Pipelines with HCP Packer
11mAutomating Cloud Security Compliance: From Patching to Machine Image Building and Auto Scheduling
23mBuilding a Secure AWS Golden Image Pipeline with Packer, Vault and Terraform
28mHow Remote Work is Driving the Need for Multi-Cloud DevSecOps: How to Build a Pipeline
29mProduction CI/CD w/CNBs: Tekton, Gitlab & CircleCI(plus), Oh My!
32mPromoting Kubernetes CI/CD to the Next Level
23mBuilding a Secure By-Design Pipeline with an Open-Source Stack
26mCNCF Cross-Cloud CI Intro