openSUSE Leap 16

Option A: Azure Portal

• Open the Azure Marketplace and search for "openSUSE Leap 16 on Azure SecureAnyCloud".
• Select the image and click Create.
• Configure the basics: Subscription, Resource group, VM name, Region and Size (Standard_B2s).
• Under Administrator account, select SSH public key and enter your key.
• Under Inbound port rules, allow SSH (port 22).
• Click Review + create, then Create.

Option B: Azure CLI

az vm image terms accept --urn sac1647283583153:opensuse-leap-16:default:latest
az vm create \
  --resource-group myResourceGroup \
  --name my-opensuse-leap-16-vm \
  --image sac1647283583153:opensuse-leap-16:default:latest \
  --size Standard_B2s \
  --admin-username azureuser \
  --generate-ssh-keys \
  --public-ip-sku Standard

Find the VM's public IP address, then connect:

az vm show --resource-group myResourceGroup --name my-opensuse-leap-16-vm --show-details --query publicIps -o tsv ssh azureuser@<vm-ip>

The image ships key-only SSH: password authentication is disabled and the root account is locked. Azure injects your public key at provisioning time.

Confirm the operating system, kernel and root filesystem:

grep -E '^(NAME|VERSION|ID|VERSION_ID|PRETTY_NAME)=' /etc/os-release uname -srm findmnt -no FSTYPE /

Check disk space and memory:

df -h / free -h

Confirm that SELinux is enforcing and that the Azure agents are healthy:

sudo getenforce systemctl is-active waagent cloud-init status

The image is patched at build time and ships with a systemd timer that applies security patches automatically. Patches released after the build are applied on your VM within its first day, or straight away if you run sudo zypper patch as shown below.

Confirm that the timer is armed:

systemctl is-enabled sac-zypper-patch.timer
systemctl list-timers --no-pager sac-zypper-patch.timer

To patch manually at any time, apply all pending security patches:

sudo zypper refresh
sudo zypper patch

To apply all available package updates, not only security patches:

sudo zypper update

openSUSE Leap 16 uses zypper for package management. List the configured, GPG-checked repositories:

zypper lr

Install, search for or remove packages, substituting your own package name:

sudo zypper install <package-name>
sudo zypper search <search-term>
sudo zypper remove <package-name>

The non-OSS repository is present but disabled. Enable it if you need packages such as additional firmware or codecs:

sudo zypper modifyrepo --enable openSUSE:repo-non-oss

The Azure network security group (NSG) controls inbound traffic, and the image opens only port 22. To run a host firewall inside the VM, install and enable firewalld, then open the ports you need and mirror them in the Azure NSG:

sudo zypper install firewalld
sudo systemctl enable --now firewalld
sudo firewall-cmd --permanent --add-port=443/tcp sudo firewall-cmd --reload