See original repo here: https://github.com/boxcutter/ubuntu.

1. Boxes informations
   1. Ubuntu Server 16.10 AMD64
   2. Ubuntu Server 16.04 AMD64
2. Generate Boxes
3. Security
4. Future improvements

See https://atlas.hashicorp.com/quarkslab/boxes.

See https://atlas.hashicorp.com/quarkslab/boxes/ubuntu-16.10-server-amd64.

Test it:

    $ vagrant init quarkslab/ubuntu-16.10-server-amd64
    $ vagrant up --provider vmware_workstation

See https://atlas.hashicorp.com/quarkslab/boxes/ubuntu-16.04-amd64.

Test it:

    $ vagrant init quarkslab/ubuntu-16.04-amd64
    $ vagrant up --provider vmware_workstation

Don't forget to download in the directory the ISO file listed in the ubuntu-XX.XX-amd64.json file.

If you want to automatically upload the Vagrant box you’ve created to the Atlas platform, check the ubuntu.atlas.json.

Example:

    $ export ATLAS_TOKEN=<your-atlas-token> # See https://atlas.hashicorp.com/help/user-accounts/authentication
    $ packer-io build -only=vmware-iso -var-file=ubuntu1610.json -var 'atlas_username=quarkslab' -var 'atlas_box_name=ubuntu-16.10-server-amd64' ubuntu.atlas.json

Modify the README and sign it:

    $ gpg --output README.md.sig --detach-sig README.md

A simple way to stay up-to-date of new boxes is to use our metadata files (located in medatada/ directory).

Example, for your Vagrantfile:

    […]
    config.vm.box = "quarkslab/ubuntu-16.10-server-amd64"
    config.vm.box_url = "https://cdn.rawgit.com/quarkslab/packer-ubuntu/master/metadata/ubuntu-16.10-server-amd64.json"
    […]

For the moment, we are using the RawGit service. So there is a need to check that informations return by this service (especially checksums but box urls too) are the same as in this README file.

First, verify the authenticity of the README.md file using PGP.

    $ gpg --recv-keys FCC3ED6D
    $ gpg --verify README.md.sig README.md

Now, you can take advantage of the config.vm.box_download_checksum Vagrantfile option.

Example, for your Vagrantfile:

    […]
    config.vm.box_url = "https://atlas.hashicorp.com/quarkslab/boxes/ubuntu-16.04-amd64/versions/20160916/providers/vmware_desktop.box"
    config.vm.box_download_checksum = "f40ac77251c62509c68265e9457a1ab8244d6df6fcc57361a829355bd5a2afe1"
    config.vm.box_download_checksum_type = "sha256"
    […]

[ ] Instead of using RawGit service, host the file on our own servers (via https)