openSUSE Leap 16.0 with GNOME Desktop

Azure Operating Systems

openSUSE Leap 16.0 with the GNOME desktop, reached over RDP: no default password, remote desktop switched off until you turn it on, and a per VM RDP credential generated at first boot.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

openSUSE Leap 16.0 with GNOME Desktop is openSUSE Leap 16.0, the openSUSE Project's community distribution that shares its core code base with SUSE Linux Enterprise 16, with the distribution's own desktop added: the GNOME Desktop Environment (Wayland) pattern from openSUSE's repo-oss repository. It is free to use, patch and redistribute, with no subscription and no licence key. GNOME Remote Desktop is set up for remote login, so you connect with any RDP client, the GNOME login screen appears, and you sign in to a full GNOME 48 desktop session running on the virtual machine, with Files, Console, Text Editor, System Monitor and Settings ready to use.

Remote access is first party: the RDP server is GNOME Remote Desktop, built and signed by SUSE in repo-oss, so nothing outside the distribution is added to reach the desktop. The desktop is installed from the pattern without its optional extras, so it stays lean, and anything else you need installs with zypper. The session is Wayland, with Xwayland for X applications, on a Btrfs root with SELinux enforcing.

It suits cloud workstations for openSUSE and SUSE Linux Enterprise development, graphical administration and data tools that should run close to your cloud resources, training labs that need a desktop rather than a shell, and a secure jump desktop reached only through an SSH tunnel.

Why the cloudimg image

cloudimg builds the desktop so that a new machine exposes nothing but SSH. Remote desktop ships switched off, no account has a password, and the RDP server cannot be enabled until you have set your own. At first boot each machine generates its own RDP credential and its own TLS certificate, readable by root only and kept out of the system journal, so nothing is shared between machines or baked into the image. The unconfigured Entra ID sign in daemon the update stream pulls in is left out, because it fails on every boot and would share a machine secret between clones. A single helper command shows the remote desktop state, turns it on and off, and prints this machine's credential. SELinux stays enforcing, SSH stays key only even after you set a desktop password, every available patch is applied at build time, and a daily zypper patch timer keeps applying security and kernel patches without ever rebooting on its own, all backed by 24/7 support.

Common uses

  • Cloud workstations with a full GNOME desktop on openSUSE Leap, sharing its code base with SUSE Linux Enterprise 16
  • Graphical administration, engineering and data tools running close to your cloud resources
  • Training labs and secure jump desktops reached only through an SSH tunnel

See it running

Real screenshots taken while testing this image against its deployment guide.

openSUSE Leap 16.0 with GNOME Desktop screenshot 1 openSUSE Leap 16.0 with GNOME Desktop screenshot 2 openSUSE Leap 16.0 with GNOME Desktop screenshot 3 openSUSE Leap 16.0 with GNOME Desktop screenshot 4