Rocky Linux 10 Arm64 | Support by cloudimg

Rocky Linux 10 for 64-bit Arm

Rocky Linux 10 is a community enterprise Linux distribution, produced by the Rocky Enterprise Software Foundation to be binary compatible with Red Hat Enterprise Linux 10. It runs the 6.12 kernel and follows the RHEL 10 lifecycle, with support to May 2035. This image is the native 64-bit Arm (AArch64/arm64) build with the standard 4k page size kernel, made to run on Azure Arm virtual machine sizes powered by the Azure Cobalt 100 processor, such as the Dpsv6 family, where many workloads run at lower cost than on x86 for comparable performance. It tracks the Rocky Linux 10 major release, brought fully up to date at build time.

Hardened and current at capture

Every available update is applied at build time and again immediately before capture, the machine is rebooted onto its newest kernel and superseded kernels are removed, and an automated gate blocks capture if any update remains outstanding, so the image ships fully patched. dnf-automatic, which the stock Rocky Linux 10 Arm64 cloud image does not include at all, is installed and armed to apply all available updates on a timer (never auto-rebooting), so instances keep patching themselves.

Secure by default

No credential is baked into the image: the root password is locked, password and keyboard-interactive authentication are disabled and root cannot log in over SSH, so access is only ever by the SSH key you supply when you create the VM. The machine identity and SSH host keys are regenerated uniquely on every instance, so no two machines share a secret. SSH on port 22 is the only network listener: the Cockpit web console, which the stock image leaves enabled on port 9090, and rpcbind on port 111 both ship disabled and are one command to re-enable. SELinux is left enforcing, and the BaseOS, AppStream and Extras update path is intact with GPG signature checking on. No swap is baked in.

Tuned for Azure Cobalt 100

The rng-tools entropy daemon, which the stock image enables, has no usable entropy source on Azure Cobalt 100 and fails at every boot, leaving the machine permanently reporting a degraded state. It ships disabled here, so a fresh VM reports a clean, fully running system.

What you get from cloudimg

• A fully patched, secure-by-default Rocky Linux 10 Arm64 base to build your own services on
• Automatic updates armed out of the box
• A deployment guide tested against this exact image
• 24/7 expert support from cloudimg

Licensing

Rocky Linux is free and open source. It is not a single licence but a collection of independently licensed open-source packages (GPL, LGPL, MIT, BSD, Apache-2.0, MPL and more). No subscription, no licence key and no Red Hat entitlement is required. Rocky Linux is a mark of the Rocky Enterprise Software Foundation; cloudimg is not affiliated with or endorsed by the Foundation and uses the name only to identify the distribution this image contains. The cloudimg charge ($0.04 per vCPU/hour) covers packaging, security patching, image maintenance and 24/7 support.