Ubuntu 22.04 LTS STIG-Hardened

Overview

Ubuntu 22.04 LTS is Canonical's widely deployed long term support release. This edition takes that base further: the DISA STIG (Security Technical Implementation Guide) profile for Ubuntu 22.04, from the open source SCAP Security Guide project, is applied at build time using the same open source oscap engine a customer would run themselves, then the machine is re-scanned cleanly, after a reboot, to produce a real, measured compliance score rather than an assumed one.

This deliberately does not use Canonical's own commercial USG tool, which requires an Ubuntu Pro subscription to apply its DISA STIG profile. Instead the free, redistributable SCAP Security Guide content is used directly, so the compliance work ships without any extra subscription, token or support contract attached to it. The scanner, the policy content and the machine readable evidence all ship on the image, so you start from a hardened, provably measured baseline instead of spending the first days of a project applying and re-deriving the same controls yourself.

Common uses

• A pre-hardened, familiar Ubuntu LTS base for regulated or government-adjacent workloads that need DISA STIG controls applied and evidenced
• A measured starting point for a compliance programme, with a real report instead of a checklist claim, and no Ubuntu Pro subscription to buy
• A lean, patchable foundation for production servers where both security posture and provable evidence of it matter