Hardened Rocky Linux 8, 9 & 10 : Minimal, LVM, STIG

This is a repackaged open source software product wherein additional charges apply for security hardening, secure-by-default configuration and per-instance setup.

What cloudimg adds to every version

• Every image is built by cloudimg from the distribution's official cloud image, fully patched at build time and remediated with the OpenSCAP CIS Level 1 Server profile (STIG and Essential Eight variants apply their own named OpenSCAP profile instead).
• Each image is hardened for EC2 with key-only SSH, cloud-init and current kernels, and carries no build residue, shared keys or default passwords.

Included products

• Rocky Linux 10 Arm64
• Rocky Linux 10 LVM
• Rocky Linux 10 Minimal
• Rocky Linux 10.2
• Rocky Linux 8 Arm64
• Rocky Linux 8 LVM
• Rocky Linux 8 Minimal
• Rocky Linux 8.10
• Rocky Linux 9 Arm64
• Rocky Linux 9 Essential Eight
• Rocky Linux 9 LVM
• Rocky Linux 9 Minimal
• Rocky Linux 9 STIG
• Rocky Linux 9.8

How to choose a version

• Standard: the full server image
• Minimal: a smaller image with fewer packages installed
• LVM: the root filesystem on LVM, so volumes can grow
• STIG: remediated with the OpenSCAP DISA STIG profile instead
• Essential Eight: remediated with the OpenSCAP ACSC Essential Eight profile instead
• Arm64: the standard image for AWS Graviton (arm64) instance types

Network and access defaults

• Host firewall enabled (firewalld, inbound SSH only): open application ports in both the security group and firewalld.

This listing is a collection of separate AMIs, one per release and variant, chosen from the Software version dropdown at launch.

Support

cloudimg provides 24/7 technical support for every version in this listing by email and live chat, 365 days a year, with a 24-hour response SLA: support@cloudimg.co.uk.

Trademarks

All product names are trademarks of their respective owners. cloudimg is not affiliated with or endorsed by any of them. CIS and CIS Benchmarks are trademarks of the Center for Internet Security, Inc.; cloudimg is not affiliated with or endorsed by CIS, and these images are not CIS Hardened Images.