Feature: disaSTIGlow | Garden Linux

Skip to content

Main Navigation Start Here

Appearance

Sidebar Navigation

Introduction

Tutorials

Local Tutorials

First Boot on KVM

First Boot on Lima

Cloud Tutorials

First Boot on AWS

First Boot on Azure

First Boot on GCP

First Boot on OpenStack

Container Tutorials

First Boot as OCI Image

On-Premises Tutorials

First Boot on Bare Metal

How-To Guides

Choosing Flavors

Getting Images

Building Images

Container Base Image

Bare Container Base Images

Full Container Base Images

Building a custom Feature

Installation

Cloud Installation

Install on AWS

Install on Azure

Install on GCP

Install on OpenStack

Container Installation

Local Installation

Install Locally Using KVM

Install Locally Using Lima

On-Premises Installation

Install Using ISO

Install Using PXE Boot

Disk Layout and Bootloader

Provision with cloud-init

Provision with Ignition

Post Installation Steps

Kernel Builds

Packaging

Creating Packages

Patching

Local Package Building

Github Actions Package Building

Patch Releases and Backporting

Build Dependencies

NULL Releases

Removing Packages from Repository

Python Library - Release Process

Releases

Creating Package Releases

Creating APT Repository Releases

Creating OS Releases

Reporting Issues

Deploying Secure Boot Images

Testing

Debug Tests

Run Tests

Setup Test Environment

Test in Cloud

Explanation

Use Cases

Architecture

Architectural Decisions

Release Hierarchy

Packaging

Package Sources

Repository Infrastructure

OS Releases

Kernel

Flavors

Container Base Image

Semantic Versioning

GitHub Actions Workflows

Boot Modes

Builder

Compliance Frameworks

Secure Boot and Trusted Boot

Security Posture

Testing

Test Framework Architecture

Test Organization

Reference

Glossary

Supporting Tools

Builder

Release Database

Python Library

Releases

Release Lifecycle

Maintained Releases

Archived Releases

Release Notes

Release 2150.5.0

Release 1877.19

Archived

Release 2150.4.0

Release 2150.3.0

Release 2150.2.0

Release 2150.1.0

Release 2150.0.0

Release 1877.17

Release 1877.16

Release 1877.15

Release 1877.14

Release 1877.13

Release 1877.10

Release 1877.9

Release 1877.8

Release 1877.7

Release 1877.6

Release 1877.5

Release 1877.4

Release 1877.3

Release 1877.2

Release 1877.1

Release 1877.0

Release 1592.18

Release 1592.16

Release 1592.15

Release 1592.14

Release 1592.13

Release 1592.12

Release 1592.11

Release 1592.10

Release 1592.9

Release 1592.8

Release 1592.7

Release 1592.6

Release 1592.5

Release 1592.4

Release 1592.3

Release 1592.2

Release 1592.1

Release 1592.0

Release 1443.20

Release 1443.19

Release 1443.18

Release 1443.17

Release 1443.16

Release 1443.15

Release 1443.10

Release 1443.9

Release 1443.8

Release 1443.7

Release 1443.5

Release 1443.3

Release 1443.2

Release 1443.1

Release 1443.0

Release 1312.7

Release 1312.5

Release 1312.3

Release 1312.2

Release 1312.1

Release 1312.0

Release 934.11

Release 934.10

Release 934.9

Release 934.8

Release 934.7

Release 934.6

Release 934.5

Release 934.4

Release 934.3

Release 934.2

Release 934.1

Release 934.0

Release 576.12

Release 576.11

Release 576.10

Release 576.9

Release 576.8

Release 576.7

Release 576.5

Release 576.3

Release 576.2

Release 576.1

Release 576.0

Release 318.9

Release 318.8

Release 318.4

Release 184.0

Release 27.1

Release 27.0

Testing

Developing Tests

Test Coverage Markers

Test CLI Reference

Architecture Decision Records (ADR)

ADR 0001: Adopting Architecture Decision Records (ADR) for Garden Linux

ADR 0002: Distributions Can Never Change Retroactively

ADR 0003: Update the Builder using Dependabot

ADR 0004: Vendoring dependencies in Go Applications

ADR 0005: How to handle Secure Boot Keys in glci

ADR 0006: New Test Framework to enable In-Place, Self-Contained Test Execution

ADR 0007: Non-Invasive, Read-Only Testing

ADR 0008: Unified and Declarative Test Logic

ADR 0009: Flexible Distribution and Reporting

ADR 0010: Incremental Migration and Coexistence of Tests

ADR 0011: Garden Linux versioning

ADR 0012: Remove the Firecracker Feature from Garden Linux

ADR 0013: Discontinue `packages_musthave` tests

ADR 0014: Enforce Pull Request References in git Commit History

ADR 0015: No Backports from Debian Stable in Garden Linux

ADR 0016: Avoid Host Dependency on `retry` Command in Makefile for tests-ng

ADR 0017: Retain Shell-Based CIS Implementation for tests-ng (No Custom Python Rewrite)

ADR 0018: Revert ADR 3 Update the Builder using Dependabot

ADR 0019: Standardize on systemd Timers

ADR 0020: Enforce Single Platform by Default in Garden Linux Builder

ADR 0021: Use of tiger tool in tests-ng

ADR 0022: System State Diffing in tests-ng

ADR 0023: Providing Garden Linux Images for Lima-VM via Containerized YAML Generator

ADR 0024: Promote Lima Image to Official Garden Linux Product

ADR 0025: Disable Debsums Tests entirely

ADR 0026: Use Parser Plugins for Files and Command Output in Test Framework

ADR 0027: Do not use systemd release candidates

ADR 0028: Pinning All GitHub Actions in Garden Linux Workflows

ADR 0029: Build features/cis with SELINUX=permissive Instead of SELINUX=enforcing

ADR 0030: Defining python-gardenlinux-lib as an internal tool

ADR 0031: S3 Artifact and Metadata Publishing Contract Between Builder and GLCI

ADR 0032: Static Feature/Test Coverage Analysis for Test Framework

Installation

Builder - Command-Line Interface

Container Images

Features

Feature: _autoinstall

Feature: _bfpxe

Feature: _build

Feature: _curl

Feature: _debug

Feature: _dev

Feature: _ephemeral

Feature: _fips

Feature: _fwcfg

Feature: _ignite

Feature: _initrdDebug

Feature: _install

Feature: _iso

Feature: _kdump

Feature: _legacy

Feature: _nocrypt

Feature: _nopkg

Feature: _oci

Feature: _prod

Feature: _pxe

Feature: _readonly

Feature: _secureboot

Feature: _selinux

Feature: _slim

Feature: _tpm2

Feature: _trustedboot

Feature: _unsigned

Feature: _usi

Feature: ali

Feature: aws

Feature: azure

Feature: baremetal

Feature: base

Feature: bluefield

Feature: capi

Feature: checkbox

Feature: chost

Feature: cis

Feature: cisAudit

Feature: cisModprobe

Feature: cisOS

Feature: cisPackages

Feature: cisPartition

Feature: cisSshd

Feature: cisSysctl

Feature: clamav

Feature: cloud

Feature: container

Feature: disaSTIGlow

Feature: disaSTIGmedium

Feature: fedramp

Feature: firecracker

Feature: firewall

Feature: gardener

Feature: gcp

Feature: gdch

Feature: glvd

Feature: iscsi

Feature: khost

Feature: kvm

Feature: lima

Feature: log

Feature: metal

Feature: multipath

Feature: nodejs

Feature: nvme

Feature: openstack

Feature: openstackCloud

Feature: openstackMetal

Feature: python

Feature: pythonDev

Feature: sap

Feature: sapmachine

Feature: server

Feature: ssh

Feature: sssd

Feature: stig

Feature: stigDev

Feature: vhost

Feature: vmware

Flavor Matrix

Flavors Configuration Reference

Kernel Flavors

Garden Linux Kernel

Packaging Rules

Python Library - API Reference

Python Library - Command-Line Interface

Contributing

Documentation

Documentation Workflow

Documentation Quality Markers

VitePress Features and Customizations

Adding Repositories to Documentation Aggregation

Documentation Aggregation Architecture

Documentation Aggregation Configuration Reference

Documentation Aggregation Technical Reference

Documentation Aggregation Testing Guide

Contributing to the Garden Linux Documentation

Security Response Process

Testing Garden Linux

Contributing Workflow

On this page

Feature: disaSTIGlow

Description

DISA Security Technical Implementation Guides (STIG) Compliance

Meta


type	element
artifact	None
included_features	None
excluded_features	None

Edit this page on GitHub

Pager

Previous pageFeature: container

Next pageFeature: disaSTIGmedium

Funded by the European Union – NextGenerationEU.

The views and opinions expressed are solely those of the author(s) and do not necessarily reflect the views of the European Union or the European Commission. Neither the European Union nor the European Commission can be held responsible for them.

Copyright © Linux Foundation Europe.

Feature: disaSTIGlow | Garden Linux is a project of the NeoNephos Foundation. For applicable policies including privacy policy, terms of use and trademark usage guidelines, please see https://linuxfoundation.eu. Linux is a registered trademark of Linus Torvalds.

Building this site is powered by

Terms of Use|Privacy Statement|Legal Disclosure