Virtual Machine Image Endorsement
Policies
Policies are defined by the SPG group and are published in the https://wiki.egi.eu/wiki/SPG:Documents
It is particularly relevant here the Security Policy for the Endorsement and Operation of Virtual Machine Images and a draft of a Virtualisation Policy.
EGI core VM endorsement
Here the endorsement of the "core" EGI VM images is shown in detail.
Members of the team
Enol Fernandéz will set up the workflow and establish the procedure; Vincenzo will take care of the endorsement and give feedback to the procedure.
A security expert is needed to suggest technical checks to be done on the VMs; they can be automated or not; they assure compliance of a given VM to EGI recommendations. Start here: https://wiki.egi.eu/wiki/SPG:Drafts:Virtualisation_Policy
Images to support as EGI.eu
Ubuntu LTS, CentOS6, CentOS7. Update frequency at the moment is "monthly or triggered by security issues"
Communication/documentation:
SSO group available: vm-image-endorsement. Also GDoc available with the "big discussion" (as Vincenzo).