Debian 11

Option A: Azure Portal

• Go to the Azure Marketplace and search for "Debian 11 (Bullseye) on Azure SecureAnyCloud".
• Select the image and click Create.
• Configure the basics:
  • Subscription: Select your Azure subscription.
  • Resource group: Create a new group or select an existing one.
  • Virtual machine name: Enter a name for your VM.
  • Region: Select your preferred Azure region.
  • Size: Standard_B2s is recommended.
• Under Administrator account, select SSH public key and enter your key.
• Under Inbound port rules, allow SSH (port 22).
• Click Review + create, then Create.

Option B: Azure CLI

az vm image terms accept --urn sac1647283583153:debian-11:default:latest
az vm create \
  --resource-group myResourceGroup \
  --name my-debian-11-azure-vm \
  --image sac1647283583153:debian-11:default:latest \
  --size Standard_B2s \
  --admin-username azureuser \
  --generate-ssh-keys \
  --public-ip-sku Standard

When your VM is running, connect over SSH:

ssh azureuser@<public-ip-address>

To find your VM's public IP address:

az vm show --resource-group myResourceGroup --name my-debian-11-azure-vm --show-details --query publicIps -o tsv

After you connect, verify the operating system:

cat /etc/os-release uname -r

Check disk space and memory:

df -h free -h

Verify that the Azure Linux Agent is running. On Debian, its service is named walinuxagent:

systemctl status walinuxagent

Apply the latest available package updates:

sudo apt-get update && sudo apt-get upgrade -y

The Azure network security group (NSG) controls inbound and outbound traffic. You can also configure the local firewall:

sudo firewall-cmd --list-all

To allow additional ports:

sudo firewall-cmd --permanent --add-port=80/tcp sudo firewall-cmd --permanent --add-port=443/tcp sudo firewall-cmd --reload