Deployment guide

Oracle Linux 10

Overview

Oracle Linux 10 is the latest major release of Oracle's enterprise Linux distribution. It delivers modern kernel features with UEK 8, enhanced security and improved performance for cloud workloads.

This guide covers the deployment and configuration of the SecureAnyCloud Oracle Linux 10 AMI on AWS, available on AWS Marketplace.

What you get:

Oracle Linux 10 with the latest security patches
AWS CLI for AWS service management
AWS CloudWatch Agent for monitoring and log collection
AWS Systems Manager Agent for remote management
Cloud Init for instance initialization
An OS package update script to keep the system current
24/7 SecureAnyCloud support with a guaranteed 24-hour response SLA

Prerequisites

Before you launch this AMI, make sure you have:

An active AWS account
An active subscription to Oracle Linux 10 on AWS Marketplace
An EC2 key pair for SSH access
Familiarity with EC2 instance management and SSH

Recommended instance type: t3.small (2 vCPU, 2 GB RAM) or larger. The minimum requirements are 1 vCPU, 1 GB RAM and 50 GB of disk space.

Launch the AMI

Open the AWS Marketplace and search for "Oracle Linux 10 SecureAnyCloud".
Choose Continue to Subscribe, accept the terms, then choose Continue to Configuration.
Select your preferred Region and Software Version.
Choose Continue to Launch.
Choose Launch through EC2 for full control over the instance configuration.
Select your instance type (t3.small recommended).
Configure storage with a minimum of 50 GB gp3.

Configure your Security Group with this inbound rule:

Port 22, TCP, source: your IP. SSH access.

Select your EC2 key pair and launch the instance.

Connect over SSH

When your instance is running and has passed both status checks (2/2), connect over SSH:

ssh -i your-key.pem ec2-user@<public-ip-address>

To switch to the root user, run:

sudo su -

Note: Wait for the EC2 instance to reach 2/2 successful status checks before you connect. Early SSH attempts can fail with "Permission denied" errors. This is expected, and the errors stop once the instance has fully initialized.

Verify the System

Check the OS version:

cat /etc/oracle-release

Check the kernel version:

uname -r

Using AWS CLI

The AWS CLI is preinstalled. Check its version:

aws --version

Configure credentials with aws configure, or attach an IAM role to the instance.

Configuring CloudWatch Agent

Run the configuration wizard as root:

/opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-config-wizard

Start the agent:

/opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-ctl -a fetch-config -m ec2 -s -c file:/opt/aws/amazon-cloudwatch-agent/bin/config.json

Check the status:

/opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-ctl -m ec2 -a status

Using Systems Manager

Check SSM Agent status:

systemctl status amazon-ssm-agent

Make sure the instance has an IAM role with the AmazonSSMManagedInstanceCore policy.

Configuring Cloud Init

To change the Cloud Init configuration, edit this file:

vi /etc/cloud/cloud.cfg

Server Components

AWS CLI: version 2.34.26, installed at /usr/local/aws-cli
AWS CloudWatch Agent: version 1.300064.1b1344, installed at /opt/aws/amazon-cloudwatch-agent
AWS Systems Manager Agent: latest version, installed at /usr/bin/amazon-ssm-agent
Cloud Init: version 24.4, installed at /etc/cloud

Filesystem Layout

/ (46 GB): the root filesystem (LVM on NVMe)
/boot (960 MB): the operating system kernel files

Note: Oracle Linux 10 uses NVMe storage devices on supported instance types.

Scripts and Log Files

In /stage/scripts:

initial_boot_update.sh: updates the OS with the latest packages on first boot
initial_boot_update.log: the output log for the boot update script

On Startup

An OS package update script runs on first boot. To disable it, run:

rm -f /stage/scripts/initial_boot_update.sh crontab -e
# Delete the @reboot line, save and exit

Common Administration Tasks

Update all packages:

dnf update -y

Install a package:

dnf install -y package-name

Search for packages:

dnf search keyword

Manage services:

systemctl start service-name
systemctl stop service-name
systemctl enable service-name
systemctl status service-name

View system logs:

journalctl -f

Check listening ports:

ss -tlnp

Oracle Linux Specific Features

Unbreakable Enterprise Kernel (UEK)

Oracle Linux 10 includes the Unbreakable Enterprise Kernel (UEK) 8, Oracle's optimized kernel for enterprise workloads. UEK 8 is based on the Linux 6.12 LTS kernel. Compared to the Red Hat Compatible Kernel (RHCK), it provides enhanced performance, advanced diagnostics and improved hardware support.

Verify which kernel is running:

uname -r

If the output contains uek, you are running the Unbreakable Enterprise Kernel. If it contains el10, you are running the RHCK.

Switch between kernels:

# List installed kernels grubby --info=ALL | grep title
# Set the default kernel (example for RHCK)
sudo grubby --set-default /boot/vmlinuz-<rhck-version>
# Reboot to apply
sudo reboot

UEK 8 highlights:

Based on Linux 6.12 LTS with Oracle enhancements
Optimized for Oracle Database and middleware workloads
DTrace tracing framework for advanced diagnostics
Enhanced Btrfs filesystem support
Improved NVMe, RDMA and network driver performance
Virtio and cloud platform optimizations

Ksplice zero-downtime patching

Oracle Linux includes Ksplice, a technology that applies critical kernel security patches without a reboot. It suits production database servers where uptime is critical.

Check the Ksplice status:

sudo ksplice kernel show

Apply available patches without reboot:

sudo ksplice kernel upgrade

Note: Ksplice requires an Oracle Linux Premier Support subscription for full functionality. If you need it, install Ksplice with sudo dnf install -y ksplice.

Oracle Database compatibility

Oracle Linux 10 is Oracle's recommended operating system for the latest Oracle Database deployments. Its key advantages are:

Prevalidated and certified for current Oracle Database versions
Required Oracle prerequisite packages available through oracle-database-preinstall RPMs
Automatic Storage Management (ASM) kernel driver support through UEK
Optimized huge pages and shared memory configuration for database workloads

Install Oracle Database prerequisites:

sudo dnf install -y oracle-database-preinstall-23ai

This package automatically configures the kernel parameters, user accounts and resource limits that an Oracle Database installation requires.

Troubleshooting

Cannot connect via SSH

Verify that the instance has passed 2/2 status checks.
Check that your security group allows port 22 from your IP.
Make sure you are using the correct key pair and username (ec2-user).

dnf update fails

Verify internet access (public subnet or NAT gateway).
Check DNS resolution: nslookup yum.oracle.com
Check disk space: df -h

CloudWatch Agent not working

Verify the agent status with the amazon-cloudwatch-agent-ctl command.
Check that the IAM role has CloudWatchAgentServerPolicy.
Review the logs: tail -f /opt/aws/amazon-cloudwatch-agent/logs/amazon-cloudwatch-agent.log

Security Recommendations

Restrict SSH access. Allow port 22 only from trusted IP addresses.
Use IAM roles. Use IAM roles for AWS API access instead of access keys.
Keep the system updated. Run dnf update regularly.
Enable SELinux. Verify its state with getenforce.
Configure firewalld. Use it for host-level security.
Monitor with CloudWatch. Set CPU, memory and disk alerts.
Use SSM Session Manager. It gives you secure, auditable remote access.
Harden the SSH configuration. Disable password authentication and use key-based authentication only.

Support

If you run into an issue with this product, contact SecureAnyCloud support:

Email: sales@secureanycloud.com
Website: secureanycloud.com
Support hours: 24/7, with a guaranteed 24-hour response SLA

Deploy on AWS

Launch Oracle Linux 10 with 24/7 support from SecureAnyCloud.

View on Marketplace

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS

Launch Oracle Linux 10 with 24/7 support from SecureAnyCloud.

View on Marketplace

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Overview

This guide covers the deployment and configuration of Oracle Linux 10 on Microsoft Azure, using the SecureAnyCloud preconfigured virtual machine image from the Azure Marketplace.

What you get:

Oracle Linux 10 with the Unbreakable Enterprise Kernel (UEK)
A Linux 6.x kernel with cutting-edge hardware support
LVM partitioning for flexible disk management
Azure Linux Agent (waagent) for cloud integration
Chronyd for NTP time synchronization
SELinux in enforcing mode
Gen2 Hyper-V virtual machine support
24/7 SecureAnyCloud support

Platform: Microsoft Azure (Gen2 Hyper-V)

Default user: azureuser

Prerequisites

Before you deploy this image, make sure you have:

An active Microsoft Azure subscription
Access to the Azure Portal or Azure CLI
An SSH key pair for Linux VM access
Familiarity with Azure VM management

Recommended VM size: Standard_B2s (2 vCPU, 4 GB RAM) or larger.

Deploy the Virtual Machine

Option A: Azure Portal

Open the Azure Marketplace and search for "Oracle Linux 10 on Azure SecureAnyCloud".
Select the image and choose Create.
Configure the basics:
- Subscription: select your Azure subscription.
- Resource Group: create a new one or select an existing one.
- Virtual Machine Name: enter a name for your VM.
- Region: select your preferred Azure region.
- Size: Standard_B2s is recommended.
Under Administrator Account, select SSH public key and enter your key.
Under Inbound Port Rules, allow SSH (port 22).
Choose Review + Create, then choose Create.

Option B: Azure CLI

az vm image terms accept --urn sac1647283583153:oracle-linux-10:default:latest
az vm create \
  --resource-group myResourceGroup \
  --name my-oracle-linux-10-azure-vm \
  --image sac1647283583153:oracle-linux-10:default:latest \
  --size Standard_B2s \
  --admin-username azureuser \
  --generate-ssh-keys \
  --public-ip-sku Standard

Connect over SSH

When your VM is running, connect over SSH:

ssh azureuser@<public-ip-address>

To find your VM's public IP, run:

az vm show --resource-group myResourceGroup --name my-oracle-linux-10-azure-vm --show-details --query publicIps -o tsv

Verify the Installation

After you connect, verify the operating system:

cat /etc/oracle-release uname -r

Check disk space and memory:

df -h free -h

Verify that the Azure Linux Agent is running:

systemctl status waagent

Update the System

Keep your system up to date with the latest security patches. Run:

sudo dnf update -y

Configure the firewall (optional)

The Azure Network Security Group (NSG) controls inbound and outbound traffic. You can also configure the local firewall. To list its current rules, run:

sudo firewall-cmd --list-all

To allow additional ports, run:

sudo firewall-cmd --permanent --add-port=80/tcp sudo firewall-cmd --permanent --add-port=443/tcp sudo firewall-cmd --reload

Common Use Cases

Oracle Database hosting (19c, 21c, 23ai, 26ai) with native kernel optimizations
Next-generation enterprise application hosting
Modern cloud-native and container workloads
Oracle WebLogic and Fusion Middleware deployments
Database servers (PostgreSQL, MySQL, MariaDB)

Troubleshooting

Cannot connect via SSH

Verify that the VM is in the Running state in the Azure Portal.
Check that port 22 is allowed in the Network Security Group.
Make sure you are using the correct username: azureuser
Verify that your SSH key matches the one you configured during deployment.

Azure Agent not running

sudo systemctl start waagent
sudo systemctl enable waagent

Package manager issues

sudo dnf update -y

If repositories are unreachable, check DNS resolution:

nslookup google.com

Important Notes

Oracle Linux is free to use, and no license is required.

Support

For help with this image, contact SecureAnyCloud support:

Website: secureanycloud.com
Product Catalog: secureanycloud.com/products
User Guides: secureanycloud.com/guides
SLA: 24-hour response guaranteed

Deploy on Azure

Launch Oracle Linux 10 on Azure with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on Azure