Debian 13 cut down to the Policy defined base system: a leaner install with fewer packages to patch, scan and audit, and the full Azure provisioning path intact.
Debian 13 Minimal is the current stable Debian release with its installed package set trimmed to what Debian itself defines as the base system: the required and important priority classes, exactly what debootstrap installs, plus the cloud provisioning stack. There is no application layered on top: the operating system is the product. Debian's cloud image is already lean, so this variant goes one step further and removes the interactive and diagnostic extras a VM managed by automation never touches, from the full vim and manual pages to packet capture and terminal multiplexer tools, while nano and vi remain. The image ships a manifest generated from its own package database that states exactly what is installed and what was removed, and anything you miss is one apt install away from the standard Debian archives.
cloudimg cuts the Minimal profile from its own hardened Debian 13 base with a guarded, simulated first package transaction, measures the removal against the standard image it is cut from, and ships the measured numbers in a manifest derived from the package database, so the image can never claim a trim it did not make. The provisioning path is protected by the trim guard itself: cloud-init, the Azure agent, OpenSSH, netplan and the boot chain cannot be removed by construction, and first boot behaviour including automatic root filesystem growth is identical to the standard image. There is no default login: SSH access is by the key you supply at launch, password authentication is off and the root account is locked. AppArmor ships enforcing, unattended security updates are armed and proven against the Debian security suite with a real dry run, and every deployment comes with a paired deploy guide and 24/7 cloudimg support.