Salt Master

Azure Developer Tools

event driven configuration management and remote execution, preinstalled and closed by default

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Salt is an open source platform for configuration management and remote execution. A Salt master publishes commands and state to Salt minions and collects their returns, so you can describe how a fleet of machines should be configured, apply that description, and run ad hoc commands across the whole fleet in seconds. This is a Salt master image, and it ships as a working one rather than a bare install: a local minion is already connected and accepted, and a small state and pillar tree is in place, so remote execution and state application both do something real the moment it boots.

Why the cloudimg image

An exposed Salt master is a known mass exploitation target, so this image is built around that. It contains no master key, no minion key and no accepted minion key at all: every machine generates its own identity on first boot, and the local minion is accepted only after its key is confirmed byte for byte. The Salt transport is bound to loopback, so SSH is the only routable listener on a fresh machine, and opening it to remote minions is a documented deliberate choice. Automatic key acceptance is off, there is no autosign of any kind, and a guard stops the master starting if any of that is weakened. Salt itself is pinned by package content hash and tied to an exact upstream commit, and every Python dependency is licence audited into an inventory that ships on the image. Paired with a step by step deployment guide and 24/7 cloudimg support.

Common uses

  • Configuration management across a fleet of Linux servers
  • Ad hoc remote execution and fleet wide inventory
  • Event driven automation and drift correction