Oracle Linux 9 with the GNOME desktop, reached with any VNC viewer through an SSH tunnel: no default password, VNC switched off until you turn it on, and bound to localhost only when you do.
Oracle Linux 9 with GNOME Desktop is Oracle Linux 9, Oracle's enterprise distribution, binary compatible with Red Hat Enterprise Linux 9, with the distribution's own desktop added: the AppStream environment group that Oracle calls Server with GUI. Oracle publishes the binaries, updates and errata at no cost and permits redistribution, so there are no licence fees and no subscription is required; a paid Oracle Linux Support subscription is optional. Remote access uses TigerVNC from Oracle's own AppStream repository, the first party way to run headless GNOME desktops on this release, so each user gets their own full GNOME session on the virtual machine, reached with any VNC viewer through an SSH tunnel, with Files, Terminal, Firefox, Text Editor, System Monitor and Software ready to use.
The image boots the Unbreakable Enterprise Kernel by default and also carries the Red Hat compatible kernel. Like every Oracle Linux image on Azure, this image uses an LVM root layout, with the root filesystem on a logical volume inside the volume group rootvg.
It suits cloud workstations for enterprise Linux development, graphical administration and data tools that should run close to your cloud resources, training labs that need a RHEL 9 compatible desktop for each user, and a secure jump desktop that exposes nothing but SSH. Oracle Linux 9 has Premier Support to June 2032 and Extended Support to June 2035, and anything else you need installs with dnf.
cloudimg builds the desktop so that a new machine exposes nothing but SSH. VNC ships switched off, the rpcbind portmapper that the stock Oracle Linux cloud image leaves listening on port 111 is switched off too, no account has a password and no VNC password exists anywhere in the image: each user chooses their own. A mandatory policy keeps the VNC server on localhost with password only security types, so it is reached through an SSH tunnel and never from the internet, and a single helper command starts or stops a user's desktop and refuses while either password is missing. The desktop is given a real graphics device on the Unbreakable Enterprise Kernel, guest sleep is disabled so the desktop cannot strand the virtual machine, firewalld stays active as on every cloudimg Oracle Linux image, SELinux stays in enforcing mode, SSH stays key only, every available update is applied at build time, and dnf-automatic is armed, all backed by 24/7 support.
Real screenshots taken while testing this image against its deployment guide.