Method for securely configuring an information system

A computer aided method of a system for configuring an information computing system during execution of a kernel image and an initial file system, the method comprising:

• creating a file system from a base file system image in system memory of the information computing system;
• applying configuration files from a bundle image to the file system in memory;
• copying files from a persistent file system stored in the storage resource to memory;
• validating the files from the persistent file system;
• applying validated files to the file system in memory;
• and
• verifying the bundle image by comparing a signed hash of the image with a hash generated by the initial file system and checking the hash signature against a public certificate included in the initial filesystem, wherein the initial filesystem includes a memory file system module, a base file system image and the bundle image, wherein the bundle image is further verified by determining if the hash has been signed by an administrator and validated against a white list.

A non-transitory computer readable medium containing computer readable instructions for configuring an information computing machine, the computer-readable instructions comprising instructions for causing the computing machine to:

• create a file system from a base file system image in system memory of the information computing system;
• apply configuration files from a bundle image to the file system in memory;
• copy files from a persistent file system stored in the storage resource to memory;
• validate the files from the persistent file system;
• apply validated files to the file system in memory;
• and
• verify the bundle image by comparing a signed hash of the image with a hash generated by the initial file system and checking the hash signature against a public certificate included in the initial filesystem, wherein the initial filesystem includes a memory file system module, a base file system image and the bundle image, wherein the bundle image is further verified by determining if the hash has been signed by an administrator and validating the bundle image against a white list.