Jumpboxes at Easy: How Terraform and Packer Enable the Easy Creation of Secure Jumpboxes
summary
Shows a reproducible pipeline that uses Packer to bake FreeBSD 12 images and uses Terraform to deploy those images on Azure, with Packer running provisioning scripts (including a sudo-approval tool from Square) so the baked image contains hardened tools. Demo boots a VM from the image, exercises the interactive sudo-approval workflow successfully, and proves SSH access can require a YubiKey-backed SSH key. Includes a script to refresh images and redeploy so gold images stay current and drift is minimized.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 0:57What is a Jumpbox
- 6:20Terraform vs Packer
- 10:46Jumpbox with Packer
- 15:52Packer Demo
- 19:30UV Keys
related talks
23mBuilding a Secure AWS Golden Image Pipeline with Packer, Vault and Terraform
40mHashiConf Day 1 Opening Keynote
50mBoot my (secure)-(portable) clouds!
52mBuilding Secure and Flexible Multi-Cloud Images with Multi-Boot Mode
31mBuilding a Repeatable and Hardened Vault POC
28mUsing an Image Release Process for Security Wins
32mGotchas Using Terraform in a Secure Delivery Pipeline
38mDon’t Break Your Pasta! Good Practices for Securing Your Pipelines