SPIRE on Ubuntu 24.04, workload identity that gives every service a verifiable cryptographic identity.
SPIRE is the SPIFFE Runtime Environment, a graduated CNCF project that attests workloads and issues them short lived cryptographic identity documents called SVIDs. It replaces shared secrets and long lived certificates with identities that services can verify directly.
cloudimg ships SPIRE fully patched on a hardened Ubuntu 24.04 base with the server and agent already running and the Workload API served locally. Every instance generates its own trust domain and its own certificate authority signing keys on first boot, so no authority material is shared between instances or baked into the image. The identity state lives on a dedicated data volume, and the image is backed by 24/7 support and a paired deploy guide.