Ubuntu Pro 22.04 LTS Minimal with CIS Hardening

These Ubuntu Pro 22.04 LTS images are optimized for automated use at scale, featuring a minimal package set and pre-applied CIS hardening. It combines the robust security and compliance features of Ubuntu Pro with a reduced attack surface, making it ideal for organizations requiring the highest levels of security in their automated cloud operations.

Two CIS hardening plans are available:

1. CIS Level 1: Practical security recommendations balancing protection and system usability.
2. CIS Level 2: Enhanced security measures for environments where protection is paramount.

Ubuntu, the leading Linux distribution extensively used across cloud platforms, is endorsed by Microsoft for Azure. These images are fine-tuned to enhance compatibility and performance on Azure, ensuring support for the latest cloud features as they are released. Known for its robust security and stability, Ubuntu powers more mission-critical workloads than any other operating system.

Key Features:

• Trusted source for open source: Official image created by Canonical, the company behind Ubuntu, in a trusted build pipeline.
• CIS Hardening: Pre-applied CIS benchmarks for improved compliance and auditing. These images come with a high level of CIS compliance out of the box, significantly enhancing your security posture from the start. Two plans are available: CIS Level 1 and CIS Level 2. For more guidance on hardening your systems and the differences between the CIS levels, please refer to this guide.
• Minimal package set: Designed for completely automated operations with a reduced package set, minimizing the security cross-section.
• Optimized for Azure: Fine-tuned in collaboration with Microsoft to enhance performance on Azure, supporting the latest cloud features effectively.
• Integration with Azure Tools: Integrates with tools like Azure Guest Patching and the Update Management Center, streamlining updates and management to ensure security while adhering to Safe Deployment Practices for improved stability.
• Security and stability: Canonical tracks and delivers updates regularly, embedding security from the initial deployment to safeguard your operations.
• Kernel Livepatch: Kernel patches for high and critical vulnerabilities delivered immediately and applied at run time, removing the need for unplanned immediate reboots.
• Expanded Security Maintenance: Provides up to 12 years of security updates, ensuring long-term support for enterprise applications.
• Enhanced package security: Extends security maintenance to over 25,000 packages, including critical applications such as Apache Kafka, NGINX, MongoDB, Redis, and PostgreSQL, allowing teams to consume a vast collection of open source software while meeting their internal security, governance, and compliance requirements.
• Compliance and FIPS: Ubuntu Pro includes access to FIPS 140-certified components and DISA STIG. While FIPS is not yet available for 22.04, it will be added as it becomes available. In the meantime, a FIPS Preview is available, providing access to modules submitted to NIST for review but not yet certified.
• Landscape: Automates security management tasks across your Ubuntu estate, available on request, streamlining control and security.

The CIS-Hardened Ubuntu Pro Minimal is designed for completely automated operations and includes a reduced package set, without convenience tools for interactive usage. Any Ubuntu package can be installed as needed, allowing you to craft exactly the image you require.

Note: If you require a more interactive environment, please see the regular Ubuntu Pro 22.04 listing for a familiar Ubuntu Pro package set suitable for command line interaction.

By choosing Ubuntu Pro 22.04 LTS Minimal with CIS Hardening on Azure, you benefit from Canonical's commitment to security, performance, and innovation, ensuring an optimal cloud experience. This image is ideal for organizations requiring the highest levels of security, compliance, and support to mitigate risks and ensure operational continuity in their critical applications.