Amazon Linux

2023: Amazon Linux 2023 optimized for cloud environments

Amazon has published the first stable release of the updated general-purpose distribution - Amazon Linux 2023 (LTS), optimized for cloud environments and supporting integration with the tools and advanced capabilities of the Amazon EC2 service. This became known on March 16, 2023.

The distribution replaced the Amazon Linux 2 product and differs from using CentOS as the basis in favor of the Fedora Linux package base. Assemblies are formed for x86_64 and ARM64 architectures (Aarch64). Despite the primary focus on use in AWS (Amazon Web Services), the distribution also comes in the form of a universal virtual machine image that can be used on the local system or in other cloud environments.

The distribution uses a predictable maintenance cycle, which implies the formation of new significant releases every two years with the release of interim quarterly updates. Each significant release branches off from the then current release of Fedora Linux. Intermediate releases are planned to include updated versions of some popular packages, such as Python, Java, Ansible and Docker, but these versions will be delivered in parallel in a separate namespace.

The total support time for each release will be five years, of which two years of the distribution will be under active development and three years in the maintenance phase with the formation of corrective updates. The user will be given the ability to bind to the status of repositories and independently select the tactics for installing updates and switching to the latest releases.

The formation of Amazon Linux 2023 involves components from Fedora 34, 35 and 36, as well as from CentOS Stream 9. At the same time, the distribution uses its own kernel, built on the basis of the 6.1 LTS kernel from kernel.org and supported independently of Fedora. Linux kernel updates are released using live patching technology, which allows you to fix vulnerabilities and apply important fixes to the kernel without rebooting the system.

In addition to switching to the Fedora Linux package base, from significant changes, the default inclusion of the SELinux forced access control system in "enforcing" mode and the use of advanced security enhancements in the Linux kernel, such as verification of kernel modules by digital signature, are noted. The distribution also carried out work to optimize performance and reduce boot time. As a file system for the root partition, it is possible to use file systems other than XFS^[1].

2021: Amazon unveils its Linux distribution

At the end of November 2021, Amazon introduced a Linux distribution that is built on the Fedora build. At the time of the announcement, a system called Amazon Linux 3 (AL2022) is available as a pre-release version, it can be tried in AWS Management Console, AWS Command Line Interface (CLI), AWS Tools for Windows PowerShell, RunInstances or through the AWS CloudFormation template.

The distribution will replace the Amazon Linux 2 product and is notable for moving away from using CentOS as the basis of the package base in favor of the Fedora Linux distribution. The assembly is designed for x86_64 and ARM64 architectures (Aarch64). Amazon is still trying to include Pink Hat Business Linux (RHEL) compatibility on Amazon Linux, but this launch required many technical details to be settled. Using Fedora as its upstream, the new Amazon distribution has been under deep scrutiny from information security professionals to ensure the sustainability of packages in the system, and includes all the latest security updates offered. The product is optimized for Amazon EC2, comes with built-in AWS attributes and includes built-in hands-on experience with lots of hardware.

Amazon introduced its Linux distribution

The new Amazon Linux also offers regular and universal quarterly updates. For example, almost every AL2022 update binds a specific version of the package repository. The user will only need to update when they want to make changes, not when a new variation is released. In order to improve overall stability, the product comes with SELinux enabled, which is the default. The basic method of ensuring the stability of SELinux, limiting all actions, unless, of course, they are explicitly allowed, is the polar opposite of the standard Linux stability coverage, allowing all actions, unless, of course, they are explicitly prohibited. According to the developers, with an effective deployment, SELinux significantly improves security at work. By installing the service from the very beginning, AL2022 will help the user block instances before attackers can attack.

The total support time for each version of Amazon Linux 3 will be until 2027, of which the distribution will be under active development for two years and three years in the maintenance phase with the formation of corrective updates.

The project also switched to a new predictable support cycle, involving the formation of new significant releases every two years with the release of interim quarterly updates. Intermediate releases plan to include new versions of some popular packages, such as programming languages, but these versions will be delivered in parallel in a separate namespace. Despite the primary focus on use in AWS, the distribution will also come in the form of a universal virtual machine image that can be used on the local system or in other cloud environments.^[2]

Notes