Ubuntu 20.04 LTS Minimal

Azure Operating Systems

Ubuntu Server 20.04 LTS trimmed to Canonical's own Minimal package seed: a leaner base for estates still pinned to focal, patched to the final free Ubuntu archive.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Ubuntu Server 20.04 LTS Minimal is the 20.04 long term support Ubuntu release with its installed package set cut down to Canonical's own published Ubuntu Minimal cloud image seed. There is no application layered on top: the operating system is the product. The full server profile carries hundreds of packages a cloud VM managed by automation never touches, from documentation tooling and editors to utilities for hardware this VM does not have. The Minimal profile removes them and keeps what a cloud instance actually uses: the kernel and boot chain, cloud-init and the Azure agent, OpenSSH, netplan, apt with unattended security updates, and Python for automation. The image ships a manifest generated from its own package database stating exactly what is installed and what was removed, and anything you miss is one apt install away. Be aware before choosing it: Ubuntu 20.04 reached the end of its standard security maintenance on 31 May 2025, so it suits estates already standardised on 20.04, not new deployments starting fresh.

Why the cloudimg image

cloudimg cuts the Minimal profile from its own hardened Ubuntu Server 20.04 LTS base with a guarded, simulated-first package transaction, measures the removal against the standard image it is cut from, and ships the measured numbers in a manifest derived from the package database, so the image can never claim a trim it did not make. The provisioning path is protected by the trim guard itself: cloud-init, the Azure agent, OpenSSH, netplan and the boot chain cannot be removed by construction. The image is patched to the last packages published in the free Ubuntu archive for 20.04 as of capture, and contains no ESM package and no Ubuntu Pro attachment; Canonical's paid Ubuntu Pro subscription can be attached by you for continued security coverage. There is no default login: SSH access is by the key you supply at launch, password authentication is off and the root account is locked. AppArmor ships enforcing, machine identity and SSH host keys are regenerated uniquely on every instance, and the image is backed by a paired deploy guide and 24/7 support.

Common uses

  • Estates pinned to Ubuntu 20.04 that want the smallest practical focal base under a dependency they cannot move yet
  • Container and automation hosts that want a lean Ubuntu 20.04 base under their workloads
  • Security conscious deployments on a frozen release with fewer installed packages to patch, scan and audit