Overview
04 and 24.04 LTS images remediated with the OpenSCAP CIS Level 1 Server profile (STIG variants: the STIG profile), fully patched, with key-only SSH, a locked root account and a firewall allowing SSH only. No default passwords.
Why the cloudimg image
This image arrives installed, configured and hardened, so there is no manual setup before you can use it. It is built on a patched base, runs with credentials generated uniquely for your instance on first boot, and passes an automated health check before every release. Every deployment is backed by 24/7 support from cloudimg engineers.
Key features
- Remediated at build time with the OpenSCAP CIS Level 1 Server profile; STIG variants use the OpenSCAP STIG profile
- Key-only SSH, locked root, unique SSH host keys on every first boot, ufw allowing inbound SSH only, and no build residue or shared keys
- One subscription for Ubuntu 22.04 and 24.04 LTS in standard, Minimal, LVM and STIG variants: pick the release and variant as the software version
Description
This is a repackaged open source software product wherein additional charges apply for security hardening, secure-by-default configuration and per-instance setup.
What cloudimg adds to every version
- Every image is built by cloudimg from the distribution's official cloud image, fully patched at build time and remediated with the OpenSCAP CIS Level 1 Server profile (STIG-Hardened variants apply their own named OpenSCAP profile instead).
- Each image is hardened for EC2 with key-only SSH, cloud-init and current kernels, and carries no build residue, shared keys or default passwords.
Included products
- Ubuntu 22.04 LTS LVM
- Ubuntu 22.04 LTS Minimal
- Ubuntu 22.04 LTS STIG-Hardened
- Ubuntu 24.04 LTS LVM
- Ubuntu 24.04 LTS Minimal
- Ubuntu Server 22.04 LTS
- Ubuntu Server 24.04 LTS
How to choose a version
- Standard: the full server image
- Minimal: a smaller image with fewer packages installed
- LVM: the root filesystem on LVM, so volumes can grow
- STIG: remediated with the OpenSCAP DISA STIG profile instead
Network and access defaults
- Host firewall enabled (ufw, inbound SSH only): open application ports in both the security group and ufw.
This listing is a collection of separate AMIs, one per release and variant, chosen from the Software version dropdown at launch.
Support
cloudimg provides 24/7 technical support for every version in this listing by email and live chat: support@cloudimg.co.uk.
Trademarks
Ubuntu is a registered trademark of Canonical Ltd. CIS and CIS Benchmarks are trademarks of the Center for Internet Security, Inc. cloudimg is not affiliated with or endorsed by Canonical or CIS, and these images are not CIS Hardened Images.
Related technologies
noblejammynoble numbatjammy jellyfishlinux servergolden imageopenscapsecurity baselinekey-only sshufw firewallcloud-initapt