Debian 12 cut down to the Policy defined base system: a leaner install with fewer packages to patch, scan and audit, and the full Azure provisioning path intact.
Debian 12 Minimal is the Debian 12 (bookworm) release with its installed package set trimmed to what Debian itself defines as the base system: the required and important priority classes, exactly what debootstrap installs, plus the cloud provisioning stack. There is no application layered on top: the operating system is the product. Debian's cloud image is already lean, so this variant goes one step further and removes the interactive and diagnostic extras a VM managed by automation never touches, from the full vim, manual pages and bug reporting tools to packet capture and terminal multiplexer utilities, while nano and vi remain. The image ships a manifest generated from its own package database that states exactly what is installed and what was removed, and anything you miss is one apt install away from the standard Debian archives, which keep serving bookworm security updates free of charge until mid 2028.
cloudimg cuts the Minimal profile from its own hardened Debian 12 base with a guarded, simulated first package transaction, measures the removal against the standard image it is cut from, and ships the measured numbers in a manifest derived from the package database, so the image can never claim a trim it did not make. The provisioning path is protected by the trim guard itself: cloud-init, the Azure agent, OpenSSH, netplan and the boot chain cannot be removed by construction, and first boot behaviour including automatic root filesystem growth is identical to the standard image. There is no default login: SSH access is by the key you supply at launch, password authentication is off and the root account is locked. AppArmor ships enforcing, unattended security updates are armed and proven against the Debian security suite with a real dry run, and every deployment comes with a paired deploy guide and 24/7 cloudimg support.