ifybad.blogg.se

# Change the %sudo entry to also require no password.

# set permissions to 600 on authorized_keys Ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ= vagrant insecure public key # add the default insecure ssh public key to the vagrant user account # Setup the SSH server for Vagrant to connect to the VM # Install vmware tools (should be done by installer if using easy installer) # Disable automatic updates to avoid breaking the later vagrant build process # Perform a base installation of Ubuntu Desktop (in this case) with all apps and utilities Box Build Steps # Vagrant docs can be found at: All that said, here is how I build my base Ubuntu image for Box. That meant a profile on VagrantUp and build a custom Box to upload. It would probably be fine, but I didn’t like the idea. Being paranoid, I didn’t like the idea of trusting someone else’s Box. Part of the build process is that Vagrant will download a base VM (or Box) for the core of the OS. I decided to use Vagrant to automate the build process.

However, I did want to manually rebuild the VM step by step every time I updated it. I decided to create my own VM so that it would be completely in my control in what was installed on the system already, how it was configured, and to try to limit the size of the VM. The consistency of the environment made me decide to go that route.

This brought me back to using virtual machines that will be large in size and use significant resources on each student system. It didn’t take very long to decide to drop this idea due to the variances that would occur between each student’s system and my own.

I considered using Docker images with instructions on how to set up the target sites. When I started working on Breaking Web App Security, I knew I was going to need a lab environment for the students to use.