WARNING ------- The images are *experimental* and work in progress. The latest image is the best. Known issue are tracked at: https://github.com/hartwork/image-bootstrap/issues CREATION -------- Images were created running image-bootstrap --openstack DISTRO .. LOOP_DEVICE or directory-bootstrap DISTRO FOLDER with image-bootstrap from: https://github.com/hartwork/image-bootstrap If the images have "bugs", the generator has a bug. If you find things that need fixing, please file a bug against image-bootstrap at GitHub. Thank you! SECURITY and TRUST ------------------ image-bootstrap is downloading files through SSL and verifies downloads using GnuPG. That's the good part. However: * The generating server is not air-gapped and therefore exposed to attacks from the internet. Someone could hack this server and manipulate the image-generation code. * SSL is the only protection against man-in-the-middle right now; the resulting images are not signed. For the Arch OpenStack images, I hope to convince someone of the Arch master keys team members to run image-bootstrap, to sign the results and upload them just like the Arch bootstrapping images. That would be something you could trust as much as you trust the Arch bootstrapping images. Before we have that, the secure way is to run image-bootstrap yourself. HOSTING ------- I would like to thank the kind folks at https://www.cloudscale.ch/ for providing this virtual server, its storage and traffic free of cost to me. Many thanks! Best Sebastian