https://primcoat.app/blog Practical guides to building, hardening, and publishing golden VM images: OpenSCAP CIS and STIG automation, QCOW2-to-AMI conversion, Windows Server images on Linux, SBOMs, and signing. en Wed, 08 Jul 2026 00:00:00 GMT https://primcoat.app/blog/windows-server-ami-on-linux https://primcoat.app/blog/windows-server-ami-on-linux You can build a hardened Windows Server AMI entirely on a Linux build host with QEMU/KVM, virtio drivers, an unattended answer file, and Cloudbase-Init. Here is how the pieces fit — and why it takes an hour. Wed, 08 Jul 2026 00:00:00 GMT https://primcoat.app/blog/qcow2-to-aws-ami https://primcoat.app/blog/qcow2-to-aws-ami A step-by-step guide to turning a QCOW2 disk built under QEMU/KVM into a bootable EC2 AMI using VM Import/Export — with the IAM, format, and regional gotchas that trip people up. Wed, 01 Jul 2026 00:00:00 GMT https://primcoat.app/blog/automating-cis-stig-hardening-openscap https://primcoat.app/blog/automating-cis-stig-hardening-openscap How to evaluate and auto-remediate a Linux image against a CIS Benchmark or DISA STIG using OpenSCAP and the SCAP Security Guide — and where doing it by hand goes wrong. Wed, 24 Jun 2026 00:00:00 GMT