Hardened AlmaLinux 8, 9 & 10 : Minimal, LVM, STIG, Essential Eight

AWS Operating Systems
Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

10, 9.8 and 10.2 images remediated with the OpenSCAP CIS Level 1 Server profile (STIG and Essential Eight variants: their own profile), fully patched, with key-only SSH, a locked root account and firewalld allowing SSH only.

Why the cloudimg image

This image arrives installed, configured and hardened, so there is no manual setup before you can use it. It is built on a patched base, runs with credentials generated uniquely for your instance on first boot, and passes an automated health check before every release. Every deployment is backed by 24/7 support from cloudimg engineers.

Key features

  • Remediated at build time with the OpenSCAP CIS Level 1 Server profile; STIG and ACSC Essential Eight variants apply their own OpenSCAP profile instead
  • Key-only SSH, locked root, firewalld allowing inbound SSH only, unique SSH host keys on every first boot and no shared keys
  • One subscription for AlmaLinux 8.10, 9.8 and 10.2 in standard, Minimal and LVM variants, plus STIG and Essential Eight on 9: pick it as the software version

Description

This is a repackaged open source software product wherein additional charges apply for security hardening, secure-by-default configuration and per-instance setup.

What cloudimg adds to every version

  • Every image is built by cloudimg from the distribution's official cloud image, fully patched at build time and remediated with the OpenSCAP CIS Level 1 Server profile (STIG-Hardened and Essential Eight variants apply their own named OpenSCAP profile instead).
  • Each image is hardened for EC2 with key-only SSH, cloud-init and current kernels, and carries no build residue, shared keys or default passwords.

Included products

  • AlmaLinux 10 LVM
  • AlmaLinux 10 Minimal
  • AlmaLinux 10.2
  • AlmaLinux 8 LVM
  • AlmaLinux 8 Minimal
  • AlmaLinux 8.10
  • AlmaLinux 9 Essential Eight Hardened
  • AlmaLinux 9 LVM
  • AlmaLinux 9 Minimal
  • AlmaLinux 9 STIG-Hardened
  • AlmaLinux 9.8

How to choose a version

  • Standard: the full server image
  • Minimal: a smaller image with fewer packages installed
  • LVM: the root filesystem on LVM, so volumes can grow
  • STIG: remediated with the OpenSCAP DISA STIG profile instead
  • Essential Eight: remediated with the OpenSCAP ACSC Essential Eight profile instead

Network and access defaults

  • Host firewall enabled (firewalld, inbound SSH only): open application ports in both the security group and firewalld.

This listing is a collection of separate AMIs, one per release and variant, chosen from the Software version dropdown at launch.

Support

cloudimg provides 24/7 technical support for every version in this listing by email and live chat, 365 days a year, with a 24-hour response SLA: support@cloudimg.co.uk.

Trademarks

AlmaLinux is a trademark of the AlmaLinux OS Foundation; these images are derived from AlmaLinux OS. CIS and CIS Benchmarks are trademarks of the Center for Internet Security, Inc. cloudimg is not affiliated with or endorsed by the AlmaLinux OS Foundation or CIS, and these images are not CIS Hardened Images.

Related technologies

alma linuxel8el9el10enterprise linuxcentos replacementselinuxacscopenscapsecurity baselinegolden imagefirewalldlinux serverdnf