Base
Hardened build
minimal ports, security patches applied at build time
step-ca
AWS
Azure
Security
2 variations
step-ca, a private online certificate authority from Smallstep, bootstrapping its own CA on first boot.
Variations
Choose the operating system, cloud and version you need. Every variation is the same hardened step-ca image, built and supported by cloudimg.
Overview
step-ca is an open source private online certificate authority from Smallstep that issues X.509 and ACME certificates over TLS. It lets organisations run internal public key infrastructure, issuing short lived certificates and automating renewal for services, devices and workloads.
Why the cloudimg image
The cloudimg image is hardened and fully patched with step-ca running as a service alongside the step command line tool. Every instance bootstraps its own unique certificate authority on first boot with freshly generated key passwords and its own root and intermediate certificates, so no CA material is shared or ships in the image. Configuration, certificates and keys sit on a dedicated resizable data disk, with 24/7 cloudimg support included.
Common uses
- Internal TLS certificates
- ACME automation
- Private PKI
More in Security
CrowdSec
Security
CrowdSec, a collaborative behavioural security engine, preinstalled and blocking malicious IPs within minutes of launch.
CyberChef
Security
CyberChef, the cyber swiss army knife, a purely client side toolkit for encoding, encryption and data analysis, served t
De
DefectDojo
Security
DefectDojo, application vulnerability management, ready to track findings on first boot.
KeePass
Security
KeePass on Windows Server for self hosted password management with AES 256 encrypted databases, no cloud dependency.
LLDAP
Security
LLDAP, a lightweight, self hosted authentication server with an LDAP interface and a friendly web admin UI.
Ollama GPU-Accelerated
Security
Ollama, the open source LLM server, exposing a private GPU accelerated OpenAI compatible API within minutes of launch.