a ready to use automation control host: playbooks, curated collections and inventory in place, with no credential baked in
Ansible is the open source automation engine that configures servers, deploys applications and runs operational tasks from plain YAML playbooks, over ordinary SSH, with no agent to install on the machines it manages. A control node is the machine those playbooks actually run from, and this image is that machine, shipped ready rather than as a bare install. ansible core is installed with every command line on the system PATH, a curated set of collections covering Linux systems, cryptography, containers, MySQL and PostgreSQL is installed system wide, and a tuned configuration, an inventory tree and a project skeleton are already in place. A self test playbook ships with it and runs against the machine itself, so the control node proves it works before you have pointed it at a single server of your own.
A control node holds the credential that reaches every server you manage, so this image is built around that fact. It contains no SSH keypair, no vault password, no Galaxy token and no authorized_keys at all: each instance generates its own Ed25519 fleet identity on first boot, kept readable only by root, and first boot refuses to reuse an existing key rather than silently accepting one, so no two instances can ever share an identity. Host key checking is left on, which is the setting that stops a control node being tricked into handing its fleet credential to an impostor, and SSH is the only routable listener on a fresh machine. Ansible itself and every collection are pinned and verified by content hash before installation, and an executable licence gate grades every dependency and every collection and fails the build on anything restrictive or unreadable, with the resulting inventory shipped on the image. Paired with a step by step deployment guide and 24/7 cloudimg support.