Example 5: Staff maintaining VMs

Research computing staff members will create and maintain the VMs that are available to authorized users of ResVault. The process of creating and maintaining such VM is carefully controlled to ensure the integrity of the ResVault environment. The VMs are assembled in a special system, called vmbuilder, outside the secure perimeter of ResVault. When the VM is ready for deployment it is tested by an authorized administrator and the image is packaged and digitally signed. Then it is inserted into ResVault where it will replace an existing VM or will appear as a new VM on the menu.

Research Computing has a process whereby certain individuals supporting researchers can be trained and certified to build and maintain VMs for that research group. This way changes to VMs can be implemented in the required timeframe and Research Computing staff does not become a bottleneck for research.