Packer templates for Debian (revisited by Quarkslab)

See original repo here: https://github.com/boxcutter/debian.

1. Boxes informations
   1. Debian 8.6.0 AMD64
   2. Debian 8.5.0 AMD64
   3. Debian 8.2.0 AMD64
   4. Debian 7.9.0 AMD64
2. Generate Boxes
3. Security
   1. SHA256
   2. PGP

Boxes informations

See https://atlas.hashicorp.com/quarkslab/boxes.

Debian 8.6.0 AMD64

See https://atlas.hashicorp.com/quarkslab/boxes/debian-8.6.0-amd64.

Test it:

    $ vagrant init quarkslab/debian-8.6.0-amd64
    $ vagrant up --provider virtualbox # or libvirt

Provider	Version	Atlas box link	Signature	SHA256
Virtualbox	20161213	link		55fb56e7f904be1d6196a54518b88f332655b4c494aa4b43c5a3f0466815b7d4
Libvirt	20161213	link		92aab12bddc88408c51b48e898acc22b29cc007e4ca2b798c268343bf789642a
Libvirt	20170118	link		a5779499969eba61509730a16c046b970c60901fe6128c2c6af1bbf5cd62c596

Debian 8.5.0 AMD64

See https://atlas.hashicorp.com/quarkslab/boxes/debian-8.5.0-amd64.

Test it:

    $ vagrant init quarkslab/debian-8.5.0-amd64
    $ vagrant up --provider vmware_workstation

Provider	Version	Atlas box link	Signature	SHA256
VMware_desktop	20160622	link	link	83b620fe254ed2bad9dedb007ada4644dadd94478421d82d63fa4181ca21bd08

Debian 8.2.0 AMD64

See https://atlas.hashicorp.com/quarkslab/boxes/debian-8.2.0-amd64.

Test it:

    $ vagrant init quarkslab/debian-8.2.0-amd64
    $ vagrant up --provider virtualbox # or Libvirt or vmware_workstation

Provider	Version	Atlas box link	Signature	SHA256
VMware_desktop	20151221	link	link	4fa7d4483ba9d0e8701537a6e66cba28de1450510f5d62cb78655f3a477302d7
Libvirt	20151221	link	link	d359bd06dcadb5eb439f6fab10b48cc7039d213d3fef8e1a17182e633fb2dace
Virtualbox	20151221	link	link	315a13780656cfd9d26823c0b023f02e7eccf449e7861202e0bc197d09b7aa03
VMware_desktop	20151214	link	link	0ffdb3498547ec1cb1406fe4d5cf79c68b98c077f764b94087a10dd162ef3d8b
Libvirt	20151214	link	link	dece236d7ba8d3508d662ea38bd4ddf7832a9b41763550452db0c05fe66ef185
Virtualbox	20151214	link	link	db853a50e0f698a8ba050c4a8d1d5344bc2f7c4c4e04f4341e625cea14fe9ef1
VMware_desktop	20151204	link	link	410741d6a9a267b8e68a7b5f99e80bc07d427400640dbf47f8aa7efb72b1c3a6
Virtualbox	20151203	link	link	a16ec1f0454d60a1fd708a6b88498062a4dad223db30aa5df79a6e16e537a081
Libvirt	20151203	link	link	a5ff693b1ae44a0837e4b171af51947c484fab889ab918e8b7a2f52f3a5a6daa

Debian 7.9.0 AMD64

See https://atlas.hashicorp.com/quarkslab/boxes/debian-7.9.0-amd64.

Test it:

    $ vagrant init quarkslab/debian-7.9.0-amd64
    $ vagrant up --provider virtualbox # or Libvirt or vmware_workstation

Provider	Version	Atlas box link	Signature	SHA256
VMware_desktop	20151221	link	link	b623171a2d8615066491d5c35550a8b9ed5a3f0e1e129283a10bdb16f2792f6d
Libvirt	20151221	link	link	8aed579107abe7567d8ac37d7b74f7a69648eb8e9fd0a953e8da49bdb924e3ad
Virtualbox	20151221	link	link	5a89de9e03618a9b53501a1532cc9e8407bfcdb9c1bd401cb5c3e9006ca0cf16
VMware_desktop	20151214	link	link	07294f1577e7bf916d17ee0856e6b0c14549d0335fcb9c654bb6b7569fe371a0
Libvirt	20151214	link	link	4cd4d73c031f48229a07e02f196d87163015c547d069a80623861a510e3ecfcc
Virtualbox	20151214	link	link	b4525937119867d8cd17b37b08a07b3fae52d1469af5983bba11d3d5513e813d
VMware_desktop	20151204	link	link	66844853efccbf1c2c1359d432d765d416a3734b19650dfec7f69ecbd402b49a
Virtualbox	20151203	link	link	e2bb207bc411f07b868af4457b53c13782c5cbecc4f617d73a556cf4030011fc
Libvirt	20151203	link	link	1c587d4a5c89831ce4da5049dde364e29d258e4940b5fdd7eeb769eba0f2e959

Generate Boxes

Don't forget to download in the directory the ISO file listed in the debian-X.X.X-amd64.json file.

If you want to automatically upload the Vagrant box you’ve created to the Atlas platform, check the atlas-quarkslab.json.

Example:

    $ export ATLAS_TOKEN=<your-atlas-token> # See https://atlas.hashicorp.com/help/user-accounts/authentication
    $ packer-io build -only=virtualbox-iso -var-file=debian-7.9.0-amd64.json atlas-quarkslab.json

Troubleshooting

Be careful with VMWare provider, they may need a manual task to do:

• When the mirror selection fail, click on "Go back"
• Go back to the "selection step menu"
• Select the "Configure Network" and then it should not fail again

Security

SHA256

To improve security, you can take advantage of the config.vm.box_download_checksum Vagrantfile option.

First, you need to verify the integrity of the checksums. As they are part of the README.md file, you need to verify the integrity of this file (See Security/PGP):

An example of Vagrantfile:

[…]
    config.vm.box_url = "https://atlas.hashicorp.com/quarkslab/boxes/debian-7.9.0-amd64/versions/20151203/providers/virtualbox.box"
    config.vm.box_download_checksum = "e2bb207bc411f07b868af4457b53c13782c5cbecc4f617d73a556cf4030011fc"
    config.vm.box_download_checksum_type = "sha256"
[…]

PGP

To verify box integrity of downloaded boxes (located in ~/.vagrant.d/boxes) or integrity of the README.md (for SHA256 informations):

    $ gpg --recv-keys 24CF4A6F
    $ gpg --recv-keys FCC3ED6D
    $ gpg --verify <signature_file> <file_to_verify>

    $ gpg --verify README.md.sig