Welcome to Amazon Linux 2023!
Amazon Linux 2023 is the next generation of Amazon Linux from Amazon Web Services (AWS). It provides a stable, and high-performance execution environment to develop and run cloud applications. With Amazon Linux 2023 (AL2023), you get an application environment that offers long term support with access to the latest innovations in Linux. Using Fedora as the upstream, AL2023 is a stable distribution that has gone through extensive testing to offer package stability and is maintained and managed with all necessary security updates. Amazon Linux 2023 is provided at no additional charge.
Amazon Linux 2023 was released to general availability in all AWS regions on March 15, 2023.
Quick links
- Learn how to get started with Amazon Linux 2023
- Review Amazon Linux 2023 documentation
- Review Amazon Linux 2023 FAQs
- Look at our roadmap to learn of the upcoming features
- Review Release Notes for the AL2023 Preview AMIs
- Review Release Notes for the AL2023 Release Candidate 0 Released on 2023-02-22
- Review Release Notes for the AL2023 GA release
If you find a security issue, contact our security team rather than opening an issue.
We use GitHub issues to gather feedback about Amazon Linux 2023 and to track bug reports and feature requests. You can look at existing issues to see whether your concern is already known. If it is not, you can open a new issue.
If you just have questions about Amazon Linux 2023, you can start or join a discussion. Feedback on Amazon Linux 2023 can also be provided through your designated AWS representative or AWS re:Post.
Our supported architectures include x86_64 and aarch64 (written as arm64 in some contexts). Amazon Linux 2023 does not ship any i686 packages for runtime compatibility with 32bit x86 code.
Note: Amazon Linux 2023 does not support A1 instances. Only instances based on Graviton2 and later generation processors are supported.
Optimized for AWS: Amazon Linux 2023 is optimized for Amazon EC2, comes well integrated with latest AWS features, and offers an integrated experience with many of AWS-specific tools.
Flexible and consistent update experience: Based on Fedora, AL2023 provides frequent and flexible quarterly updates. AL2023 also locks to a specific version of the Amazon Linux package repository, giving you control over how and when you absorb updates.
Easy to plan and manage operating system lifecycle: New Amazon Linux major versions will be available every two years and each major version, including AL2023, will come with five years of long term support.
High security standard: Major applications within AL2023 come with pre-configured SELinux policies to help you meet your compliance needs. AL2023 also allows you to set security policies at boot time.
Predictable two-year major release cycle and long-term support: Starting with AL2023, a new major version of Amazon Linux releases every two years and comes with five years of long-term support, with each release consisting of standard support (2 years), and maintenance (3 years). This support commitment gives customers the stability they need to manage long project lifecycles.
Frequent and flexible updates: During the standard support phase (2 years), the release receives quarterly minor version updates to provide customers with security updates, bug fixes, and new features. Based on Fedora, this also gives customers access to a wide variety of modern software packages.
Improved security posture: AL2023 includes pre-configured security policies that make it easy for customers to implement common industry guidelines. These policies can be configured at launch time or run time, including setting the system crypto policy to FUTURE or LEGACY, locking down SELinux, and setting SELinux to enforcing or permissive mode.
Repository locking: Amazon Linux 2023 gives customers control over how and when they choose updates and provides the ability to lock major and minor versions as well as specific versions of your Amazon Linux repository. This enables you to ensure consistency of package versions and updates across your environment.
Kernel hardening: Many hardening features are enabled by default. This includes secure-boot related features such as kernel module signing, and making the kernel lockdown feature available.
Kernel Live Patching: Amazon Linux 2023 includes kernel live patching functionality. This enables you to patch critical and important security vulnerabilities in the Linux kernel without reboot or downtime. [Not available until AL2023 GA]
To launch an Amazon Linux 2023 instance from the EC2 Management Console, navigate to EC2 Dashboard —> Images —> AMIs, then select Public images, and use the search term "al2023-ami". Make sure that amazon is listed in the Owner alias column. Select the image from the list, click on the Launch instance from image button and follow the instructions.
To launch the latest Amazon Linux 2023 AMI using CloudFormation, you can use the following template:
Parameters:
LatestAmiId:
Type: 'AWS::SSM::Parameter::Value<AWS::EC2::Image::Id>'
Default: '/aws/service/ami-amazon-linux-latest/al2023-ami-kernel-6.1-arm64'
Resources:
Instance:
Type: 'AWS::EC2::Instance'
Properties:
ImageId: !Ref LatestAmiId
Make sure to replace the AMI alias section if needed. The following aliases are available:
- al2023-ami-kernel-6.1-arm64 for arm64 architecture
- al2023-ami-minimal-kernel-6.1-arm64 for arm64 architecture (minimal AMI)
- al2023-ami-kernel-6.1-x86_64 for x86_64 architecture
- al2023-ami-minimal-kernel-6.1-x86_64 for x86_64 architecture (minimal AMI)
You can launch specific Amazon Linux 2023 AMI using its AMI ID. You can determine the needed Amazon Linux 2023 AMI ID by looking at the AMI list in the EC2 Management Console or by using SSM. If you are using SSM, please refer to this article for details and make sure to indicate the AMI aliases from the section above.
The Amazon Linux container image is built from the same software components that are included in the Amazon Linux AMI. It's available for use in any environment as a base image for Docker workloads. If you're using the Amazon Linux AMI for applications in Amazon Elastic Compute Cloud (Amazon EC2), you can containerize your applications with the Amazon Linux container image.
Use the Amazon Linux container image in your local development environment and then push your application to AWS using Amazon Elastic Container Service (Amazon ECS). For more information, see Using Amazon ECR images with Amazon ECS in the Amazon Elastic Container Registry User Guide.
The Amazon Linux container image is available on Amazon ECR Public. Support for the Amazon Linux container image can be found by visiting the AWS developer forums.
To pull the Amazon Linux container image from Amazon ECR Public
-
Authenticate your Docker client to the Amazon Linux Public registry. Authentication tokens are valid for 12 hours. For more information, see Private registry authentication in the Amazon Elastic Container Registry User Guide. Note
The get-login-password command is supported using the latest version of AWS CLI version 2. For more information, see Installing the AWS Command Line Interface in the AWS Command Line Interface User Guide.$ aws ecr-public get-login-password --region us-east-1 | docker login --username AWS --password-stdin public.ecr.awsThe output is as follows:
Login succeeded -
Pull the Amazon Linux container image using the docker pull command. To view the Amazon Linux container image on the Amazon ECR Public Gallery, see Amazon ECR Public Gallery - amazonlinux. Note
To get the latest version of the container image of Amazon Linux 2023, use the tag :2023. To get a specific version of the container image, you need to use the tag listed in the Amazon ECR Public Gallery -amazonlinux, for example :2023.0.20211222.0. The following examples use the tag :2023 and pull the most recent available container image of Amazon Linux 2023.# docker pull public.ecr.aws/amazonlinux/amazonlinux:2023 -
(Optional) Run the container locally.
# docker run -it public.ecr.aws/amazonlinux/amazonlinux:2023 /bin/bashNote If seccomp is enabled, you might get an EPERM error when using Amazon Linux container images. To run a container without the default seccomp profile, add the following option to the docker command.
--security-opt seccomp=unconfinedThis is the updated command.
docker run -it --security-opt seccomp=unconfined public.ecr.aws/amazonlinux/amazonlinux:2023 /bin/bash
To pull the Amazon Linux container image from Docker Hub
-
Pull the Amazon Linux container image using the docker pull command.
# docker pull amazonlinux:2023 -
(Optional) Run the container locally.
# docker run -it amazonlinux:2023 /bin/bash
