Supported Distributions
Klarity ImageFactory provides extensive support for a wide range of Linux and Windows distributions. For each supported distribution, we maintain dedicated hardening scripts and compliance scanning profiles based on the relevant CIS Benchmarks.
Linux Distributions
The following table lists the Linux distributions currently supported for automated hardening. We regularly add support for new versions as they are released and as CIS publishes the corresponding benchmarks.
| Distribution | Version | Level 1 | Level 2 |
|---|---|---|---|
| Amazon Linux | 2 | View rules | ✓ |
| Amazon Linux | 2023 | View rules | ✓ |
| CentOS | 7 | View rules | ✓ |
| Oracle Linux | 7 | View rules | ✓ |
| Oracle Linux | 8 | View rules | ✓ |
| Oracle Linux | 9 | View rules | ✓ |
| Red Hat Enterprise Linux (RHEL) | 7 | View rules | ✓ |
| Red Hat Enterprise Linux (RHEL) | 8 | View rules | ✓ |
| Red Hat Enterprise Linux (RHEL) | 9 | View rules | ✓ |
| Red Hat Enterprise Linux (RHEL) | 10 | View rules | ✓ |
| Rocky Linux | 8 | View rules | ✓ |
| Rocky Linux | 9 | View rules | ✓ |
| SUSE Linux Enterprise Server (SLES) | 12 | View rules | ✓ |
| SUSE Linux Enterprise Server (SLES) | 15 | View rules | ✓ |
| Ubuntu | 16.04 | View rules | — |
| Ubuntu | 18.04 | View rules | ✓ |
| Ubuntu | 20.04 | View rules | ✓ |
| Ubuntu | 22.04 | View rules | ✓ |
| Ubuntu | 24.04 | View rules | ✓ |
Ubuntu 16.04 currently has Level 1 hardening only; Level 2 is not yet implemented for this version.
Windows Distributions
ImageFactory supports the most common Windows Server versions used in enterprise environments. Hardening for Windows is applied via PowerShell-based Ansible tasks.
| Distribution | Editions | Level 1 | Level 2 |
|---|---|---|---|
| Windows Server 2012 R2 | Standard, Datacenter | View rules | ✓ |
| Windows Server 2016 | Standard, Datacenter | View rules | ✓ |
| Windows Server 2019 | Standard, Datacenter | View rules | ✓ |
| Windows Server 2022 | Standard, Datacenter | View rules | ✓ |
| Windows Server 2025 | Standard, Datacenter | View rules | ✓ |
Architecture Support
ImageFactory supports both major processor architectures, though availability may vary by distribution and cloud provider:
- x86_64 (AMD64): Supported for all Linux and Windows distributions across all cloud providers.
- ARM64 (Aarch64): Supported for selected Linux distributions (e.g., Amazon Linux 2023, Ubuntu 22.04) on AWS and Azure.
Hyper-V Generation Support
For images destined for Microsoft Azure, ImageFactory supports both Hyper-V generations:
- Generation 1 (V1): The default for most legacy distributions.
- Generation 2 (V2): Required for modern features such as Trusted Launch, UEFI boot, and larger OS disks. ImageFactory automatically configures the appropriate generation based on the distribution and template settings.
Lifecycle Management
We actively track the End-of-Life (EOL) dates for all supported distributions.
EOL Tracking
When a distribution reaches its EOL date, it is marked as deprecated within ImageFactory. While existing images may still function, we stop providing updates to the hardening scripts and compliance profiles for that version. Customers are notified in advance of upcoming EOL dates to allow for migration to newer versions.
Deprecated Distributions
Images built using deprecated distributions will trigger a warning during the build process. We strongly recommend migrating to a supported version to ensure continued security and compatibility with cloud provider agents and features.
Requesting New Distributions
If your organization requires support for a distribution or version not listed here, please contact the Klarity ImageFactory support team. We prioritize new distribution support based on customer demand and the availability of official CIS Benchmarks.