Base
Hardened build
minimal ports, security patches applied at build time
FreeIPA Identity Management
Azure
Security
1 variation
FreeIPA, an open source identity management suite, building its own directory, Kerberos realm and certificate authority on first boot.
Variations
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| FreeIPA Identity Management on AlmaLinux 9 | Azure | AlmaLinux 9 | Standard | View · Guide |
Overview
FreeIPA combines an LDAP directory, a Kerberos key distribution centre and a certificate authority into a single managed identity domain. Organisations use it to give Linux fleets central accounts, single sign on, host based access control, centrally managed sudo rules and certificates that are issued and renewed automatically.
Why the cloudimg image
cloudimg ships FreeIPA hardened and fully patched, with nothing baked into the image: the realm, the certificate authority, the Kerberos master key and both administrator passwords are generated on your own instance at first boot, so no two deployments share a secret. Passwords never reach a command line or the system log, the host firewall opens only the ports an identity domain needs, and the image is supported 24/7.
Common uses
- Central Linux identity and single sign on
- Certificate issuance and renewal
- Host based access control and sudo policy
More in Security
2F
2FAuth
Security
2FAuth, a self hosted vault for your two factor authentication accounts that stores the secrets and generates the one ti
Ad
acme-dns
Security
acme-dns, a limited scope DNS server with a REST API, purpose built to answer ACME DNS-01 challenges without exposing yo
addy.io
Security
addy.io, an open source self hosted email aliasing service, secured on first boot.
AliasVault
Security
AliasVault, an open source end to end encrypted password manager and private email alias service, secured on first boot.
Apache Directory
Security
Apache Directory Server, an extensible LDAP and Kerberos directory, ready to authenticate on first boot.
Apache SpamAssassin
Security
Apache SpamAssassin, the open source mail spam filter whose spamd daemon and rules engine score every message so your ma