VM Instance

CBL Mariner 2

CBL Mariner 2 is part of the Azure Stack Hyperconverged Infrastructure (HCI) which composes Azure Kubernetes Service (AKS). Azure IoT Edge runs this Linux distro for workloads on Windows IoT. 

CBL Mariner is a lightweight, minimalist distro preinstalled with packages including containerization. Its straightforward functionality uses basic Linux commands and tools to manage packages and security. RPM packages and disk images update the system and install custom packages based on your individual needs. Security features include signed update support, hardened kernel, and firewall based on iptables. 

Get it on Azure

CBL (Common Base Linux) Mariner is a Microsoft-reliable, unified, and open source platform for cloud infrastructure and edge products. The high performance distro maximizes memory and disk space for minimal booting time. Deployable as the container host or container so developers access applications across all dependencies. CBL Mariner is compatible with x86_64 processor architecture. 

CBL Mariner 2 increases functionality by adding new packages, generation of ISOs, and creation of RPM package sets. The RPM package manager streamlines building, verifying, installing, and removing packages, and simplifies security updates.  

Kpatch package introduces live kernel patching for zero downtime updates. Its Preboot Execution Environment (PXE) supports large fleets of client-server computer networks, Virtual Machines (VM), and Internet of Things (IoT) devices to quickly boot the OS via network connections, instead of CD or USB. Developers work with OpenJDK, Node.JS, Python, Ruby, Golang, Rust, Glibc, and more. 

CBL Mariner is cyber attack resistant. The hardened kernel prevents attacks and unauthorized usage. Updates are signed for verification to prevent package tampering. Address Space Layout Randomization (ASLR) prevents buffer overflow and corrupted data vulnerabilities from exploitation.  

Ntegral certified images are always up-to-date, secure, and built to work right out of the box. 

Ntegral packages applications following industry standards, and continuously monitors all components and libraries for vulnerabilities and application updates. When any security threat or update is identified, Ntegral automatically repackages the applications and pushes the latest versions to the cloud marketplaces.