Blog
Building and hardening golden images, in practice.
How the work actually gets done — OpenSCAP hardening, image conversion, Windows on Linux, the supply-chain evidence — with the commands and the gotchas, not just the concepts.
Building a Windows Server AMI on Linux
You can build a hardened Windows Server AMI entirely on a Linux build host with QEMU/KVM, virtio drivers, an unattended answer file, and Cloudbase-Init. Here is how the pieces fit — and why it takes an hour.
Converting a QCOW2 image to an AWS AMI
A step-by-step guide to turning a QCOW2 disk built under QEMU/KVM into a bootable EC2 AMI using VM Import/Export — with the IAM, format, and regional gotchas that trip people up.
Automating CIS and STIG hardening with OpenSCAP
How to evaluate and auto-remediate a Linux image against a CIS Benchmark or DISA STIG using OpenSCAP and the SCAP Security Guide — and where doing it by hand goes wrong.
Subscribe viaRSS.
Get started now.
Request access, describe the image you want, and have your first hardened image in about 15 minutes — a typical estimate, before publishing to your clouds. Primcoat builds, hardens, scans, signs, and publishes it, on the operating systems you already run.