event driven configuration management and remote execution, preinstalled and closed by default
Salt is an open source platform for configuration management and remote execution. A Salt master publishes commands and state to Salt minions and collects their returns, so you can describe how a fleet of machines should be configured, apply that description, and run ad hoc commands across the whole fleet in seconds. This is a Salt master image, and it ships as a working one rather than a bare install: a local minion is already connected and accepted, and a small state and pillar tree is in place, so remote execution and state application both do something real the moment it boots.
An exposed Salt master is a known mass exploitation target, so this image is built around that. It contains no master key, no minion key and no accepted minion key at all: every machine generates its own identity on first boot, and the local minion is accepted only after its key is confirmed byte for byte. The Salt transport is bound to loopback, so SSH is the only routable listener on a fresh machine, and opening it to remote minions is a documented deliberate choice. Automatic key acceptance is off, there is no autosign of any kind, and a guard stops the master starting if any of that is weakened. Salt itself is pinned by package content hash and tied to an exact upstream commit, and every Python dependency is licence audited into an inventory that ships on the image. Paired with a step by step deployment guide and 24/7 cloudimg support.