Skip to main content

Distributions

Distributions in Klarity ImageFactory represent the base operating system images provided by cloud marketplaces or internal catalogs. They serve as the starting point for every image build. ImageFactory maintains a comprehensive database of these distributions, tracking their versions, security status, and lifecycle events.

By centralizing the management of source images, ImageFactory ensures that you always build your golden images on a verified and up to date foundation.

Distribution Properties​

Each distribution entry contains metadata that defines the operating system and its characteristics.

  • Provider: The cloud platform where the source image resides.
  • OS Type: The broad category of the operating system, either LINUX or WINDOWS.
  • OS Subtype: The specific distribution or flavor, such as AMAZON, CENTOS, ORACLE_LINUX, REDHAT, ROCKY, SUSE, or UBUNTU.
  • OS Version: The specific version string (e.g., "22.04" for Ubuntu or "8.6" for RHEL).
  • OS Family: A grouping of related distributions, often used for applying common hardening scripts.
  • OS Latest: A flag indicating if this is the most recent version of the distribution available in ImageFactory.
  • OS EOL Date: The date when the operating system reaches its end-of-life and no longer receives security updates.
  • Architecture: Support for both x86_64 and ARM64 (Aarch64) architectures.

Provider-Specific Configurations​

Because each cloud provider manages its marketplace differently, ImageFactory uses specific configurations to locate and identify source images.

AWS​

  • Owner: The AWS Account ID that owns the source AMI.
  • Filter: The search criteria used to find the AMI (e.g., name patterns).
  • Current AMI ID: The specific ID of the AMI currently being used as the source.
  • Architecture: The CPU architecture (x86_64 or arm64).

Azure​

  • Image Publisher: The organization that published the image (e.g., Canonical or RedHat).
  • Image Offer: The specific product offering.
  • Image SKU: The specific version or edition of the offer.
  • Hyper-V Generation: Support for both V1 and V2 virtual machine generations.

GCP​

  • Project: The GCP project containing the source image.
  • Family: The image family name, which GCP uses to point to the latest version of an image.
  • Pin OS Version: An option to lock the distribution to a specific version rather than always using the latest in the family.

Exoscale​

  • Template ID: The unique identifier for the Exoscale template.
  • Template Name: The display name of the template.

IBM Cloud​

  • Filter: Criteria for selecting the base image.
  • OS Name: The name of the operating system as defined in IBM Cloud.
  • Base Image Name: The specific name of the source image.

VMware​

  • ESXi: Uses an iso_url for installation and a boot_command to automate the OS setup.
  • vCloud Director (VCD): Uses a catalog_name to locate the source template within the VCD environment.

Distribution Scanning and Updates​

ImageFactory includes an automated scanning mechanism that regularly checks cloud marketplaces for new source images. When a provider releases a new version of a supported distribution, ImageFactory detects it and adds it to the database.

This process ensures that your templates can always point to the latest available patches. If a template is configured to use the "latest" version of a distribution, ImageFactory will automatically use the new source image for the next build.

Lifecycle Management​

Managing the lifecycle of base images is critical for maintaining a secure infrastructure.

End-of-Life (EOL) Tracking​

ImageFactory tracks the EOL dates for all supported distributions. As an OS version approaches its EOL date, the platform provides warnings. This allows teams to proactively migrate their templates to newer, supported versions before security updates cease.

Deprecated Distributions​

When a distribution is no longer recommended for use, it can be marked as deprecated. Deprecated distributions remain available for existing templates but are hidden when creating new ones. This helps guide users toward more modern and secure options.

Compliance Scores​

Every distribution in ImageFactory is assigned compliance scores based on industry standards.

  • Level One: Represents a basic level of security hardening.
  • Level Two: Represents a more stringent set of security configurations, often required for highly regulated environments.

These scores are derived from initial scans of the marketplace images. When you build a golden image, ImageFactory applies additional hardening components to improve these scores, ensuring the final artifact meets your organization's specific compliance requirements.