Base
Hardened build
minimal ports, security patches applied at build time
Tetragon on Ubuntu 24.04 LTS
Azure
Security
Cilium Tetragon, the eBPF based runtime security observability and enforcement engine, running standalone as a systemd service that watches your host kernel and emits structured events the moment you log in.
Overview
Tetragon is Cilium's eBPF based runtime security observability and enforcement engine. It observes what actually happens on a host, process execution, file access, network activity and privileged system calls, directly from the Linux kernel using eBPF, with rich process context and negligible overhead. Tetragon is most often deployed on Kubernetes, but it also runs standalone on a single host as a systemd service watching that host's own kernel, and that is how this image runs it, so you get kernel level runtime security on one Linux machine without needing a cluster.
It suits security and platform teams who want deep, low overhead visibility into what processes do on a server, an audit trail of access to sensitive files and privileged operations, and a foundation they can extend with their own policies to detect or block specific behaviour.
Why the cloudimg image
cloudimg delivers Tetragon fully installed on a hardened, fully patched Ubuntu base, from the project's official release verified against its published checksum before install. The image ships a default policy set so it emits meaningful events out of the box, structured JSON export ready for your log shipper or SIEM, and a bounded self test that proves a monitored action produces an event before you rely on it. The control interface is a loopback only socket, the health port is pinned to loopback and additionally guarded by a firewall rule, and there is no baked credential to manage. The base keeps receiving unattended security updates, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.
Common uses
- Runtime security observability
- Sensitive file and privilege monitoring
- eBPF based host intrusion detection
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.