Overview
0 Control Baseline profile (not a PCI DSS attestation), fully patched, with key-only SSH, a locked root account and firewalld allowing SSH only.
Why the cloudimg image
This image arrives installed, configured and hardened, so there is no manual setup before you can use it. It is built on a patched base, runs with credentials generated uniquely for your instance on first boot, and passes an automated health check before every release. Every deployment is backed by 24/7 support from cloudimg engineers.
Key features
- Remediated at build time with the OpenSCAP PCI-DSS v4.0 Control Baseline profile; not a PCI DSS attestation
- Key-only SSH, locked root, unique SSH host keys on every first boot, firewalld allowing inbound SSH only, and no build residue or shared keys
- One subscription for Oracle Linux 8, 9 and 10 in standard, Minimal, LVM and Arm64 LVM variants: pick the release and variant as the software version at launch
Description
This is a repackaged open source software product wherein additional charges apply for security hardening, secure-by-default configuration and per-instance setup.
What cloudimg adds to every version
- Every image is built by cloudimg from the distribution's official cloud image, fully patched at build time and remediated with the OpenSCAP PCI-DSS v4.0 Control Baseline profile (not a PCI DSS attestation).
- Each image is hardened for EC2 with key-only SSH, cloud-init and current kernels, and carries no build residue, shared keys or default passwords.
Included products
- Oracle Linux 10 Arm64 LVM
- Oracle Linux 10 LVM
- Oracle Linux 10 Minimal
- Oracle Linux 10.2
- Oracle Linux 8 Arm64 LVM
- Oracle Linux 8 LVM
- Oracle Linux 8 Minimal
- Oracle Linux 8.10
- Oracle Linux 9 Arm64 LVM
- Oracle Linux 9 LVM
- Oracle Linux 9 Minimal
- Oracle Linux 9.8
How to choose a version
- Standard: the full server image
- Minimal: a smaller image with fewer packages installed
- LVM: the root filesystem on LVM, so volumes can grow
Network and access defaults
- Host firewall enabled (firewalld, inbound SSH only): open application ports in both the security group and firewalld.
This listing is a collection of separate AMIs, one per release and variant, chosen from the Software version dropdown at launch.
Support
cloudimg provides 24/7 technical support for every version in this listing by email and live chat, 365 days a year, with a 24-hour response SLA: support@cloudimg.co.uk.
Trademarks
All product names are trademarks of their respective owners. cloudimg is not affiliated with or endorsed by any of them. PCI DSS is a trademark of PCI Security Standards Council, LLC; cloudimg is not affiliated with or endorsed by it, and these images are not assessed or attested under PCI DSS.
Related technologies
uekel9el8el10selinuxfirewallddnfopenscapsecurity baselinegolden imageserver imagecloud-initkey-only sshminimallvm