Debian Official Cloud Images

In this page you can find the Debian cloud images provided by the Debian Cloud Team for some cloud providers. End users do not need to download these images, as they are usually provided by their cloud providers. For now we are supporting:

• Amazon EC2 (amd64, arm64; Also see the wiki and the AWS Marketplace listing)
• Microsoft Azure (amd64; Also see the wiki and The Azure Marketplace)
• OpenStack (amd64, arm64, ppc64el; two flavours using openstack-debian-images and using the toolchain from the cloud team. Also see the wiki)
• Plain VM (amd64), suitable for use with QEMU

From buster on we provide images for different cloud providers in one directory. There we use file names like this:

• debian-11-generic-ppc64el-daily-20210425-618.qcow2
• debian-11-genericcloud-amd64-daily-20210425-618.qcow2
• debian-11-ec2-arm64-daily-20210425-618.tar.xz

• azure: Optimized for the Microsoft Azure environment
• ec2: Optimized for the Amazon EC2
• generic: Should run in any environment using cloud-init, for e.g. OpenStack, DigitalOcean and also on bare metal.
• genericcloud: Similar to generic. Should run in any virtualised environment. Is smaller than `generic` by excluding drivers for physical hardware.
• nocloud: Mostly useful for testing the build process itself. Doesn't have cloud-init installed, but instead allows root login without a password.

How to upload to OpenStack?

Once you have downloaded the image, you would typically need to upload it to Glance, using a command like this one (example for amd64):

openstack image create \
    --container-format bare \
    --disk-format qcow2 \
    --property hw_disk_bus=scsi \
    --property hw_scsi_model=virtio-scsi \
    --property os_type=linux \
    --property os_distro=debian \
    --property os_admin_user=debian \
    --property os_version='10.9.1' \
    --public \
    --file debian-10-generic-amd64-20210329-591.qcow2 \
    debian-10-generic-amd64-20210329-591.qcow2

Note that hw_disk_bus=scsi and hw_scsi_model=virtio-scsi select the virtio-scsi driver instead of the virtio-blk, which is nicer (on older versions of Qemu, virtio-blk doesn't have the FSTRIM feature, for example). Also, the properties os_type, os_distro, os_version and os_admin_user are OpenStack standards as per this document. It is best practice to set them, especially on public clouds, to allow your cloud users to filter the image list to search what they need, for example using a command like this one:

openstack image list --property os_distro=debian

How can I verify my download is correct and exactly what has been created by Debian?

For the current official images (in the per-distribution directories), the safest method is to download the image and checksum files over TLS from cloud.debian.org or cdimage.debian.org. These names support DNSSEC, so a validating resolver can ensure that a client is connected to a Debian host. And TLS ensures that the data is not manipulated in flight.

The legacy OpenStack images (in the OpenStack/ directory) provide checksums and signatures. See SHA512SUMS.sign, etc. For more information about the verification steps, read the verification guide

If you're interested in contributing checksum signatures for the current images, please reach us on the list: debian-cloud at lists.debian.org.

Other questions?

Questions can be forwarded to the Debian Cloud Team: debian-cloud at lists.debian.org.