Feature: stig | Garden Linux

Skip to content

Main Navigation Start Here

Appearance

Sidebar Navigation

Overview

Tutorials

Local Tutorials

First Boot on KVM

First Boot on Lima

Cloud Tutorials

First Boot on AWS

First Boot on Azure

First Boot on GCP

First Boot on OpenStack

Container Tutorials

First Boot as OCI Image

On-Premises Tutorials

First Boot on Bare Metal

How-To Guides

Building Images

Choosing Flavors

Container Base Image

Customization

Building Flavors

Getting Images

Release Database

Initial Configuration

installation

PXE Boot

Kernel Builds

Platform-Specific Guides

AWS Platform Guide

Azure

Bare Metal

Gardener

Gcp

Kvm

Lima

OCI Platform

Openstack

Vmware

Security

Secure Boot

SSH Hardening

Time Configuration

System Management

Testing Images

Troubleshooting

Explanation

Architecture

Design Decisions

Flavors And Features

Image Types

Release Cadence

Security Posture

Use Cases

Reference

Glossary

Supporting Tools

builder

reference

Builder - Features

tutorials

Builder - Getting Started

python-gardenlinux-lib

how-to

Python Gardenlinux Lib - CLI

Python Gardenlinux Lib - Release Process

Python Gardenlinux Lib - Overview

Releases

Release Lifecycle

Maintained Releases

Archived Releases

Release Notes

Release 2150.1.0

Release 2150.0.0

Release 1877.14

Release 1877.13

Release 1877.10

Release 1877.9

Release 1877.8

Release 1877.7

Release 1877.6

Release 1877.5

Release 1877.4

Release 1877.3

Release 1877.2

Release 1877.1

Release 1877.0

Release 1592.18

Release 1592.16

Release 1592.15

Release 1592.14

Release 1592.13

Release 1592.12

Release 1592.11

Release 1592.10

Release 1592.9

Release 1592.8

Release 1592.7

Release 1592.6

Release 1592.5

Release 1592.4

Release 1592.3

Release 1592.2

Release 1592.1

Release 1592.0

Release 1443.20

Release 1443.19

Release 1443.18

Release 1443.17

Release 1443.16

Release 1443.15

Release 1443.10

Release 1443.9

Release 1443.8

Release 1443.7

Release 1443.5

Release 1443.3

Release 1443.2

Release 1443.1

Release 1443.0

Release 1312.7

Release 1312.5

Release 1312.3

Release 1312.2

Release 1312.1

Release 1312.0

Release 934.11

Release 934.10

Release 934.9

Release 934.8

Release 934.7

Release 934.6

Release 934.5

Release 934.4

Release 934.3

Release 934.2

Release 934.1

Release 934.0

Release 576.12

Release 576.11

Release 576.10

Release 576.9

Release 576.8

Release 576.7

Release 576.5

Release 576.3

Release 576.2

Release 576.1

Release 576.0

Release 318.9

Release 318.8

Release 318.4

Release 184.0

Release 27.1

Release 27.0

Architecture Decision Records (ADR)

ADR 0001: Adopting Architecture Decision Records (ADR) for Garden Linux

ADR 0002: Distributions Can Never Change Retroactively

ADR 0003: Update the Builder using Dependabot

ADR 0004: Vendoring dependencies in Go Applications

ADR 0005: How to handle Secure Boot Keys in glci

ADR 0006: New Test Framework to enable In-Place, Self-Contained Test Execution

ADR 0007: Non-Invasive, Read-Only Testing

ADR 0008: Unified and Declarative Test Logic

ADR 0009: Flexible Distribution and Reporting

ADR 0010: Incremental Migration and Coexistence of Tests

ADR 0011: Garden Linux versioning

ADR 0012: Remove the Firecracker Feature from Garden Linux

ADR 0013: Discontinue `packages_musthave` tests

ADR 0014: Enforce Pull Request References in git Commit History

ADR 0015: No Backports from Debian Stable in Garden Linux

ADR 0016: Avoid Host Dependency on `retry` Command in Makefile for tests-ng

ADR 0017: Retain Shell-Based CIS Implementation for tests-ng (No Custom Python Rewrite)

ADR 0018: Revert ADR 3 Update the Builder using Dependabot

ADR 0019: Standardize on systemd Timers

ADR 0020: Enforce Single Platform by Default in Garden Linux Builder

ADR 0021: Use of tiger tool in tests-ng

ADR 0022: System State Diffing in tests-ng

ADR 0023: Providing Garden Linux Images for Lima-VM via Containerized YAML Generator

ADR 0024: Promote Lima Image to Official Garden Linux Product

ADR 0025: Disable Debsums Tests entirely

ADR 0026: Use Parser Plugins for Files and Command Output in Test Framework

ADR 0027: Do not use systemd release candidates

ADR 0028: Pinning All GitHub Actions in Garden Linux Workflows

ADR 0029: Build features/cis with SELINUX=permissive Instead of SELINUX=enforcing

ADR 0030: Defining python-gardenlinux-lib as an internal tool

ADR 0031: S3 Artifact and Metadata Publishing Contract Between Builder and GLCI

ADR 0032: Static Feature/Test Coverage Analysis for Test Framework

Installation

features

Feature: _bfpxe

Feature: _build

Feature: _curl

Feature: _debug

Feature: _dev

Feature: _fips

Feature: _fwcfg

Feature: _ignite

Feature: _initrdDebug

Feature: _iso

Feature: _kdump

Feature: _legacy

Feature: _nocrypt

Feature: _nopkg

Feature: _oci

Feature: _prod

Feature: _pxe

Feature: _readonly

Feature: _secureboot

Feature: _selinux

Feature: _slim

Feature: _trustedboot

Feature: _unsigned

Feature: _usi

Feature: ali

Feature: aws

Feature: azure

Feature: baremetal

Feature: base

Feature: bluefield

Feature: capi

Feature: checkbox

Feature: chost

Feature: cis

Feature: cisAudit

Feature: cisModprobe

Feature: cisOS

Feature: cisPackages

Feature: cisPartition

Feature: cisSshd

Feature: cisSysctl

Feature: clamav

Feature: cloud

Feature: container

Feature: fedramp

Feature: firecracker

Feature: firewall

Feature: gardener

Feature: gcp

Feature: gdch

Feature: glvd

Feature: iscsi

Feature: khost

Feature: kvm

Feature: lima

Feature: log

Feature: metal

Feature: multipath

Feature: nodejs

Feature: nvme

Feature: openstack

Feature: openstackCloud

Feature: openstackMetal

Feature: python

Feature: pythonDev

Feature: sap

Feature: sapmachine

Feature: server

Feature: ssh

Feature: sssd

Feature: stig

Feature: stigDev

Feature: vhost

Feature: vmware

Flavor Matrix

Image Formats

Kernel

Platform Compatibility

Contributing

Documentation

Documentation Workflow

Documentation Quality Markers

Adding Repositories to Documentation Aggregation

Documentation Aggregation Architecture

Documentation Aggregation Configuration Reference

Documentation Aggregation Technical Reference

Documentation Aggregation Testing Guide

Contributing to the Garden Linux Documentation

Security Response Process

Testing

Developing Tests

Running Tests

Test Coverage

Contributing Workflow

On this page

Feature: stig

Description

DISA Security Technical Implementation Guides (STIG) Compliance

Meta


type	element
artifact	None
included_features	None
excluded_features	None

Edit this page on GitHub

Pager

Next pageOverview