What is Azure Linux?
Azure Linux is, per Microsoft, a commercially supported Linux distribution optimized for Azure virtual machines and containerized workloads. Microsoft offers it to Azure customers at no additional charge. It can be used on Azure Virtual Machines, Virtual Machine Scale Sets, in Azure Kubernetes Service, in Arc-enabled AKS for hybrid and edge scenarios, and on GPU-enabled Azure VMs for AI workloads.
As the Azure Linux Container Host, the image serves container workloads on AKS specifically. It is lightweight and contains only the packages needed to run container workloads. The container host is hardened based on significant validation tests and internal usage, and is compatible with Azure agents. Microsoft highlights consistency from cloud to edge across AKS, Azure Local, and Azure Arc. You can deploy Azure Linux node pools in a new cluster, add them to existing clusters, or migrate existing nodes.
Core Features
- Small and lightweight: roughly 400 packages, up to five GB less disk space on AKS per Microsoft
- Secure supply chain: packages built, signed, and validated from source by Microsoft and hosted on Microsoft-owned platforms
- Secure by default: hardened Linux kernel with Azure optimizations, reduced attack surface
- Monthly security patches, critical updates within days
- Passes all CIS Level 1 benchmarks per Microsoft
- Compatibility with existing workloads: containerd runtime, upstream Linux kernel, support for all AKS extensions and add-ons
- Support for all NVIDIA GPU VM sizes used on AKS
Typical Use Cases
Node OS for AKS
Teams use Azure Linux as the node operating system for their AKS node pools to benefit from the reduced attack surface, lower disk footprint, and faster cluster operations.
Operating system for virtual machines
Azure Linux serves as the operating system for Azure Virtual Machines and Virtual Machine Scale Sets with a single Microsoft-maintained base.
Consistency from cloud to edge
Across AKS, Azure Local, and Azure Arc, organizations use the same operating system image and reduce drift between environments.
GPU workloads
For compute-intensive AI and analytics workloads, Azure Linux supports all NVIDIA GPU VM sizes used on AKS.
Benefits
- Available at no additional charge for Azure customers
- Fewer packages mean less patching and maintenance effort and a smaller attack surface
- Stability through backporting fixes in core components such as the kernel and OpenSSL, with larger version bumps limited to major release boundaries
- A single point of accountability: Microsoft builds, signs, tests, and supports the distribution
- Compatibility with existing Linux containers and the AKS ecosystem
- Demonstrated hardening through CIS Level 1 benchmarks
Integration with innFactory
As a Microsoft Solutions Partner, innFactory supports the adoption of Azure Linux: assessing your existing node pools and VM images, planning migrations for AKS clusters, aligning patch and update processes, and validating workload compatibility.
We also advise on hardening your Kubernetes platform and implementing compliance requirements. Contact us for a no-obligation consultation.
Typical Use Cases
Technical Specifications
Frequently Asked Questions
What does Azure Linux cost?
Microsoft states on the product page that Azure Linux is offered to Azure customers at no additional charge. You pay for the resources you use, such as virtual machines or AKS nodes.
Where can Azure Linux be used?
Microsoft describes Azure Linux as a commercially supported Linux distribution optimized for Azure virtual machines and containerized workloads. Microsoft names Azure Virtual Machines, Virtual Machine Scale Sets, Azure Kubernetes Service, Arc-enabled AKS for hybrid and edge deployments, and GPU-enabled Azure VMs for AI workloads as deployment environments.
What characterizes the Azure Linux Container Host?
The Azure Linux Container Host is an OS image optimized for running container workloads on AKS. It contains only the packages needed to run container workloads, is hardened based on significant validation tests, and is compatible with Azure agents. Per Microsoft, it has roughly 400 packages and takes up to five GB less disk space on AKS.
How secure is the supply chain?
The Linux and AKS teams at Microsoft build, sign, and validate the packages from source and host packages and sources on Microsoft-owned and secured platforms. Each package runs through a full set of unit tests and end-to-end testing on the existing image to prevent regressions before release.
How quickly are vulnerabilities addressed?
Microsoft monitors the CVE database and releases security patches monthly, with critical updates within days if necessary. Per Microsoft, Azure Linux passes all CIS Level 1 benchmarks, making it the only Linux distribution on AKS that does so.
Note: All product information on this page has been compiled with care, but is provided without guarantee and may be outdated or incomplete. Cloud services evolve rapidly — features, pricing, SLAs, and availability change frequently. Authoritative and up-to-date information can only be found on the official product page of Azure (official documentation). This page does not represent an offer by Azure.
