Red Hat Enterprise Linux 8.10(ARM64) Minimal and Hardened

This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verifiable evidence and maintenance. Based on Red Hat Enterprise Linux 8.10 ARM64, this AMI is hardened, tuned for Amazon EC2 workloads, and equipped with a complete evidence pack and Software Bill of Materials (SBOM).

System Footprint & Reliability Optimization:

1. Minimal Footprint: Built on a minimal OS installation to reduce the attack surface and remove unnecessary packages.

2. Storage Layout: Configured with a streamlined 10 GB root (/) partition layout to minimize disk footprint while ensuring core system operation.

3. Validation Testing: Functional verification conducted on clean AMI launches through multi-round integration testing, verifying complete software lifecycle operations with SELinux enforcing.

AWS Network & Kernel Tuning:

1. Network Stack: TCP BBR congestion control with fair queueing, increased connection backlogs, buffer adjustments, and MTU probing enabled.

2. System Tuning: Red Hat tuned daemon active with a custom cloud profile, custom transparent hugepages (madvise), and modified memory/EBS writeback parameters.

3. EC2 Integration: Configured with NVMe I/O timeouts, Amazon Time Sync (chrony), IRQ balance daemon, and size-capped persistent journald logging.

Operational Tools

1. Preinstalled Tools: AWS SSM Session Manager enabled, CloudWatch Agent installed (disabled by default).

Security:

1. Security Hardening: SELinux enforcing with the targeted policy, ICMP redirects disabled, unused kernel modules blocked, and a shorter SSH login window.

2. Fully Patched at Release: Zero packages with a pending update at build time, verified. The complete CVE scan ships inside the image.

3. Comprehensive Evidence Pack: Every AMI includes an evidence pack located under /opt/optimization-report/:

   • Tuning_Parameters.txt: Every performance tuning parameter, each shown against the RHEL default, with how to undo it.
   • Security_Parameters.txt: SELinux and every security setting, each shown against the RHEL default, with how to undo it.
   • sbom.spdx.json: Software Bill of Materials (SBOM) in SPDX format generated from the RPM database.
   • cve_scan.txt / cve_scan_full.txt.gz: Vulnerability scan reports categorizing CVEs by upstream patch availability.
   • key_files.sha256: SHA-256 checksums of the key configuration files described in the reports, so the delivered state can be verified.
   • README.txt: Index file detailing artifact contents, administrative operational guidelines, and configuration defaults.

Maintenance:

1. Maintenance Specifications: Rebuilt and updated bi-weekly to monthly incorporating upstream Red Hat Enterprise Linux 8.10 security updates, updated artifact documentation per release, and administrative documentation.

About Red Hat Enterprise Linux 8 ARM64

1. Red Hat Enterprise Linux 8 Foundation: Provides a robust, enterprise-grade underlying OS that defines the RHEL standard itself, ensuring high security and seamless ecosystem compatibility with AlmaLinux, Rocky Linux, and traditional CentOS deployments.

2. The Enterprise Linux Reference Platform: Red Hat Enterprise Linux 8.10 is the release the wider RPM ecosystem is measured against, with a published application compatibility policy that keeps binaries built for the RHEL 8 ABI running across the remainder of the series. Certified drivers, commercial agents, and ISV software packaged for RHEL 8 install and run unmodified.

3. Ideal Foundation for Modern Cloud Infrastructure: By starting with a bloat-free Red Hat Enterprise Linux 8 minimal installation on Graviton, maximum CPU and memory are dedicated entirely to your own workloads rather than to unused background services. This makes it the perfect, conflict-free foundation for web and application hosting including Nginx, Apache HTTPD, HAProxy, Apache Tomcat, and WordPress, as well as data layers built on MySQL, MariaDB, PostgreSQL, Redis, and Elasticsearch. It seamlessly integrates with modern runtimes and container platforms (Python, Node.js, OpenJDK, Docker, Kubernetes), and serves as a rock-solid backbone for DevOps, messaging, and observability stacks (Jenkins, HashiCorp Vault, RabbitMQ, MinIO, Keycloak, Grafana, Prometheus), ensuring your enterprise Linux infrastructure scales without limits.