SecureAnyCloud
Deployment guide

Linux desktop

Overview

This page is the entry point for the SecureAnyCloud Hardened Debian & Linux Desktops AMIs listing on AWS Marketplace. The listing is a single product that offers several distributions and releases as separate software versions. Subscribe once, choose the version you want from the Software version list at launch, then open its guide below for the full setup and connection walk-through.

What SecureAnyCloud adds to every version:

  • Every image is built by SecureAnyCloud from the distribution's official cloud image and fully patched at build time.
  • Each image is hardened for EC2 with key-only SSH, cloud-init and current kernels.
  • No image carries build residue, shared keys or default passwords.

Pricing is metered hourly per EC2 instance type and is the same for every version in this listing. The recommended instance type is m5.large.

How to pick a version

  • Open the listing on AWS Marketplace, choose View purchase options, then choose Subscribe. One subscription covers every product and release in the listing, and the free trial starts with it.
  • When the subscription is active, choose Launch your software.
  • Choose One-click launch from AWS Marketplace, or Launch from EC2 Console for full control. In Version, choose the product and release you want. Each version is named <distribution> <release>[ <variant>] - <date>, for example AlmaLinux 10 with GNOME Desktop - YYYY-MM-DD. The date is when that version was added to the listing.
  • Choose your Region, an instance type (m5.large is recommended) and your EC2 key pair. Select a security group that opens port 22 from your own network only, then choose Launch.
  • After launch, open the product's guide below for first login.

You can run several products from the same subscription. Launch one instance per product, each from its own software version.

Releases and variants in this listing, newest release first:

  • AlmaLinux: 10 (with GNOME Desktop); 9 (with GNOME Desktop)
  • CentOS Stream: 10 (with GNOME Desktop); 9 (with GNOME Desktop)
  • Debian: 13 (with KDE Plasma Desktop)
  • Oracle Linux: 9 (with GNOME Desktop)
  • Ubuntu: 24.04 (GNOME Desktop, with XFCE Desktop); 22.04 (with GNOME Desktop)

Security model

Every version in this listing follows the same model:

  • Fully patched. Every package is updated when the image is built, superseded kernels are removed, and automatic security updates stay switched on.
  • Key-only SSH. You sign in with your EC2 key pair as the distribution's default user. Password login is disabled, the root account is locked and no account has a password.
  • Nothing shared between instances. No SSH keys, host keys, machine ID or credentials are baked into the image. Each instance generates its own on first boot.
  • IMDSv2. Launch with instance metadata version 2 (token required).
  • Only port 22. Open SSH in your security group to your own network only.

Remote desktop. Every desktop ships with its remote desktop server switched off, so nothing listens on the remote desktop port until you turn it on. No account has a password. Set your own over SSH first, then enable remote desktop with one command. Connect through an SSH tunnel, or open the port to your own address only.

Each product's guide shows the exact steps for that desktop.

Choose your product

Each entry lists the distribution, then the software version name to select at launch. Open the guide for that version.

  • AlmaLinux: AlmaLinux 10 with GNOME Desktop
  • AlmaLinux: AlmaLinux 9 with GNOME Desktop
  • CentOS Stream: CentOS Stream 10 with GNOME Desktop
  • CentOS Stream: CentOS Stream 9 with GNOME Desktop
  • Debian: Debian 13 with KDE Plasma Desktop
  • Oracle Linux: Oracle Linux 9 with GNOME Desktop
  • Ubuntu: Ubuntu 22.04 LTS with GNOME Desktop
  • Ubuntu: Ubuntu 24.04 LTS GNOME Desktop
  • Ubuntu: Ubuntu 24.04 LTS with XFCE Desktop

How to tell which version you launched

The version you chose appears on the instance's launch record in the EC2 console (AMI name and description) and in your AWS Marketplace subscription. On the instance itself, run cat /etc/os-release to see the distribution and release. Then open the matching guide above for the rest of the walk-through.

Support

SecureAnyCloud provides 24/7 support for every version in this listing through the AWS Marketplace support channel. Raise a ticket in the Marketplace console or email sales@secureanycloud.com.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Deploy on AWS

Launch Hardened Debian & Linux Desktops AMIs with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS