Base
Hardened build
minimal ports, security patches applied at build time
Rocky Linux 9 STIG-Hardened
Azure
Operating Systems
Rocky Linux 9 STIG-Hardened, a free RHEL 9 compatible enterprise Linux base with the DISA STIG profile applied and measured at build time.
Overview
Rocky Linux is a community owned enterprise Linux distribution built by the Rocky Enterprise Software Foundation to be binary compatible with Red Hat Enterprise Linux 9. This edition takes that base further: the DISA STIG (Security Technical Implementation Guide) profile from the SCAP Security Guide project is applied at build time using the same open source oscap engine a customer would run themselves, then the machine is re-scanned cleanly, after a reboot, to produce a real, measured compliance score rather than an assumed one.
The scanner, the policy content and the machine readable evidence all ship on the image, so you start from a hardened, provably measured baseline instead of spending the first days of a project applying and re-deriving the same controls yourself.
Why the cloudimg image
The cloudimg image ships the DISA STIG remediation report, the machine readable results and the exact measured pass rate under /var/log/cloudimg/stig, generated after a full reboot so the numbers reflect what the machine actually boots into, not a pre-reboot snapshot. A scheduled, audit only re-check runs on your own instance after first boot and weekly after that, so you can see drift over time without re-deriving the baseline. Every control that would break Azure provisioning if applied blindly is documented and explained, not silently skipped: SSH stays key only so cloud-init and your own login both keep working, and the small number of excluded checks (an interactive boot loader password step, and full kernel FIPS mode, deferred rather than half-applied) are named in the guide. No baked in credential: access is by the SSH key you choose at launch, backed by 24/7 support.
Common uses
- A pre-hardened RHEL compatible base for regulated or government-adjacent workloads that need DISA STIG controls applied and evidenced
- A measured starting point for a compliance programme, with a real report instead of a checklist claim
- A lean, patchable foundation for production servers where both security posture and provable evidence of it matter
More in Operating Systems
Alma Linux 8
Operating Systems
Migrate from CentOS 8 EOL to Alma Linux 8 in under 60 seconds with zero licensing fees. 1:1 RHEL 8 compatible, AWS-optim...
Ws
Windows Server 2022
Operating Systems
Windows Server 2022 preconfigured with AWS tooling and 24/7 expert support behind it.
Ws
Windows Server 2025 Datacenter
Operating Systems
Windows Server 2025 Datacenter preconfigured for AWS, with hotpatching to trim maintenance windows.
Ol
Oracle Linux 10.0
Operating Systems
Oracle Linux 10.0, a RHEL 10 compatible enterprise distribution, tuned for AWS and ready to run.
Ol
Oracle Linux 7
Operating Systems
Oracle Linux 7, a RHEL 7 compatible enterprise distribution, tuned for AWS and ready to run.
Ol
Oracle Linux 8.0
Operating Systems
Available versions: Oracle Linux 8.0, 8.1, 8.2, 8.3, 8.4, 8.5, 8.6, 8.7, 8.8, 8.9, and 8.10. Each version is available a...