Launching Oracle Linux 8 STIG profile instances made easy

The Oracle Linux 8 STIG image is now available for launching Oracle Linux 8 enhanced security profile instances on Oracle Cloud Infrastructure (OCI). The Oracle Linux 8 STIG image provides a hardened version of the standard Oracle Linux image and is based on an implementation of the Oracle Linux 8 Security Technical Implementation Guide (STIG), Version 1, Release 5. It enables you to easily and quickly launch Oracle Linux instances on OCI that you can configure to match certain security standards and requirements set by the Defense Information Systems Agency (DISA) of the US Department of Defense (DoD).

Click-to-launch STIG profile instances

Oracle Linux STIG image is available for x86_64 (AMD and Intel) and aarch64 (Ampere) shapes in OCI. You can easily launch it from the Oracle Cloud Marketplace and the embedded Marketplace in the Oracle Cloud Console and deploy it on commercial and US government OCI regions.

You can create an Oracle Linux STIG instance using the Console with the following steps:

1. Log in to your OCI account, select Compute from the main menu, click Instances, and then click Create instance to configure and deploy an instance.

2. Under Image and shape, click Change image.

3. Click the Marketplace box and search for ‘stig.’

4. Select the Oracle Linux 8 STIG or Oracle Linux 8 Arm STIG image, accept the terms, and click Select image. This selection takes you back to the Create compute instance page, where you can complete the instance configuration. Click the Create button to deploy the instance. Within minutes, the Oracle Linux STIG profile instance is up and running.

Another simple way to launch an Oracle Linux 8 STIG profile instance on OCI is to go to the Oracle Linux 8 STIG (x86_64) or Oracle Linux 8 Arm STIG listing on the Oracle Cloud Marketplace, click Get App, and follow the prompts.

When you’ve deployed an Oracle Linux STIG instance, any changes that you make to an Oracle Linux STIG Image instance, such as installing other applications or modifying the configuration settings, can impact the compliance scores. For further details on launching a target STIG-compliant image, remediation considerations, and compliance, refer to the Oracle Linux STIG documentation.

Get started with enhanced OS security

Get started by signing up for an OCI account. You can test drive the Oracle Linux 8 STIG image by deploying it on Oracle Cloud Free Tier or OCI subscription resources. With a paid Oracle Cloud Infrastructure subscription, you receive Oracle Linux Premier Support at no extra cost.

For more information, refer to the following resources:

• Oracle Linux 8 STIG image (x86_64) (Oracle Cloud Marketplace)

• Oracle Linux 8 STIG Arm image (aarch64) (Oracle Cloud Marketplace)

• Oracle Linux STIG (Documentation)

• Oracle Linux 8 (Documentation)