Vagrant

Vagrant at a glance

HashiCorp Vagrant is a widely used tool for building and managing reproducible development environments (VMs and containers) from a simple configuration. Vagrant ships regular releases; following the license change to the BUSL, it shares the HashiCorp ecosystem context.

For admins Vagrant is primarily a developer-environment tool, so its security angle is mostly about the boxes (base images) it uses: pull boxes from trusted sources and keep them current, since a stale or untrusted box carries stale or malicious software into every environment built from it. Pin box and Vagrant versions for reproducibility across a team. The provider (VirtualBox, libvirt, Docker) underneath has its own updates to track. After upgrading Vagrant or a box, verify that environments still provision. Keep provisioning scripts and any embedded credentials out of version control in plain form. Patchletter surfaces new Vagrant releases.