Many people are talking up the security benefits of Red Hat Atomic - being a read-only operating system - means substantially fewer vulnerabilities - particularly important in the cloud.
When I provision machine images with Packer - we install some software and then 'bake' an image - that we then use for other hosts.
To me it seems that with Red Hat Atomic -you must install some software than then 'bake' it in read-only mode.
In reading the documentation I can't see how to turn the key to lock it.
My question is: How do you 'bake' a Red Hat Atomic image in read-only mode?
0 Answers