Download and deploy VM images

Read the following sections to learn how to download the images and deploy them using your preferred virtualization tool.

Download the VM image

You can download hardened Linux VM images from OpenLogic’s Nexus Sonar repository. Each compressed archive includes a VMDK or QCOW2 image.

Deploy the VM image

Use the following table to find high-level instructions for deploying and consuming the VMDK or QCOW2 disk images across various virtualization platforms. Because the hardened Linux images are shipped without a default password, you must inject credentials using Cloud-Init after deployment.

Platform	Format	Tool	High-level instructions
VirtualBox	VMDK	GUI	Import VMDK as existing disk
VMware Workstation	VMDK	GUI	Replace default disk with provided VMDK
VMware ESXi/vSphere	VMDK	Web UI	Upload VMDK > Attach to new VM
KVM/Virt-Manager	QCOW2	GUI	Import existing disk
KVM/CLI	QCOW2	virt-install	Import via command line

Use Cloud-Init with hardened Linux VM images

OpenLogic hardened Linux VM images are shipped with no default password. You must inject credentials using Cloud-Init. This allows you to create your own credentials at deployment time, eliminating the need to distribute default passwords.

To inject credentials using Cloud-Init:

1. Create a user-data file with your desired configuration. For example, to create a user with SSH access:

   Copy

   #cloud-config
   users:
     - name: rocky
       gecos: Rocky User
       groups: wheel
       sudo: ['ALL=(ALL) NOPASSWD:ALL'}
       shell: /bin/bash
       lock_passwd: true
       ssh_authorized_keys:
         - ssh-rsa AAA ...your-public-key...
   
   ssh_pwauth: false

2. Create a meta-data file with instance metadata (can be minimal).

   Copy

   instance-id: my-vm-001
   local-hostname: my-vm

3. Generate an ISO file using both files:

   Copy

   genisoimage -output seed.iso -volid cidata -joliet -rock user-data meta-data

4. Attach the seed.iso file to your VM as a CD-ROM drive. The method depends on your cloud or virtualization platform:

   • KVM/Libvirt: Add to virt-install:

     Copy

     --disk path=/var/lib/libvirt/images/cloudinit.iso,device=cdrom

   • VMWare/VirtualBox: Attach the ISO as a CD-ROM in the VM settings.

   • OpenStack: Use the --user-data option when creating the server.

5. Verify the configuration after the VM boots:

   • Confirm that the user was created.

   • Veriy SSH access using your key.

   • Ensure no default password is present.