Create Encrypted Images in Azure

[Matthew]

Hi,

I'm new to Packer and wondering about approaches to create encrypted images in Azure. If encrypting by Packer is not possible, would encrypting the image after Packer finishes be the best option?

Thanks!
Matthew

[Justin DynamicD]

So we have to be careful in clarifying what kind of encryption you're asking for.  In Azure (unlike in AWS) "Azure Disk Encryption" is OS aware and leverages bitlocker/DM-Crypt.  These get generated after the system is booted and thus have limitations on the source image being encrypted:

https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-overview

Most of it is around Linux, but still, should be aware of that limitation.  Generally I find it's easiest to simply enable the encryption during deployment rather than during packaging.