Base
Hardened build
minimal ports, security patches applied at build time
Krill on Ubuntu 24.04 LTS
Azure
Networking
Krill, the RPKI certificate authority from NLnet Labs: run your own resource PKI and publish route origin authorizations, secured from first boot by cloudimg.
Overview
Krill is an open source RPKI Certificate Authority. It lets a network operator run their own Resource Public Key Infrastructure, issuing certificates for the IP address space and AS numbers they hold and publishing Route Origin Authorizations that state which networks are allowed to originate their prefixes. It is a single self contained daemon with an embedded data store and a built in web interface, and it can operate under a parent authority such as a Regional Internet Registry or as a delegated child, so operators gain control over the RPKI objects that protect their routing rather than depending on a hosted portal.
Why the cloudimg image
cloudimg ships Krill secure by default with no surviving default login. On the first boot of every instance a unique administrator token is generated and written to a root only file, so no two deployments share a secret and no example token ever governs a running instance. The daemon is bound to loopback behind a TLS reverse proxy that is the only public surface, the web interface and API refuse unauthenticated requests, and the build proves an authenticated create and read back of a certificate authority end to end before the image is captured. The base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step guide and backed by 24/7 cloudimg support.
Common uses
- Running a self hosted RPKI certificate authority
- Publishing route origin authorizations for your prefixes
- Delegated RPKI under a registry or parent authority
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Networking
AdGuard Home - Network-wide Ad Blocking DNS
Networking
This image runs AdGuard Home, the open source network-wide DNS server that blocks ads, trackers and malicious domains fo...
Aw
Anubis Web AI Firewall - Block AI Scraper Bots
Networking
The image installs the latest stable Anubis release, resolved at build time from the official GitHub release package and...
Apache Guacamole
Networking
This image runs Apache Guacamole, the open source clientless remote desktop gateway.
FOG Project - Network Imaging and Cloning Server
Networking
This image runs FOG Project 1.5.10.1903. FOG is a free, open source network cloning and imaging platform.
FOG Project - Network Imaging and Cloning Server
Networking
This image runs FOG Project 1.5.10.1903. FOG is a free, open source network cloning and imaging platform.
frp
Networking
This image runs frp (Fast Reverse Proxy), the open source high performance reverse proxy that exposes a local service si...