Feature: cloud
Description
A feature that configures Garden Linux for hyperscaler and cloud environments, providing the cloud kernel, optimized boot settings, and shared cloud configuration.
What it does
All cloud platform features (ali, aws, azure, gcp, gdch, kvm, openstack, vmware) include cloud as their base. Provides:
- The cloud-optimized kernel (
linux-image-cloud-$arch) - Kernel command line defaults and boot timeout settings
- cgroup swap accounting
- Auto-logout profile script
- systemd-networkd default network configuration
- Kernel module denylists (firewire, unused filesystems, USB storage, network protocols)
- systemd-resolved configuration
- sysctl tuning for cloud environments
- Root partition repart configuration
- Kernel post-install hooks for command line and syslinux updates
Files
Files present in this feature and their purpose. See the feature file reference for the semantics of each file type.
| File | Purpose |
|---|---|
exec.config (ref) | Applies cloud-specific configuration: network defaults, module denylists, and service settings. |
file.include.markers.yaml (ref) | Maps files to test-coverage marker IDs. |
info.yaml (ref) | Declares type: element and included/excluded features. |
pkg.include (ref) | Installs: fdisk, linux-image-cloud-$arch. |
file.include/etc/kernel/entry-token (file.include) | Sets the boot entry token used by systemd-boot. |
file.include/etc/kernel/cmdline.d/00-default.cfg (file.include) | Default kernel command line parameters for cloud images. |
file.include/etc/kernel/cmdline.d/40-enable-swap-cgroup-accounting.cfg (file.include) | Enables swap cgroup accounting for memory management. |
file.include/etc/kernel/cmdline.d/60-timeout.cfg (file.include) | Sets the systemd boot timeout. |
file.include/etc/kernel/postinst.d/00-kernel-cmdline (file.include) | Regenerates the kernel command line after kernel updates. |
file.include/etc/kernel/postinst.d/zz-update-syslinux (file.include) | Updates the syslinux bootloader after kernel installs. |
file.include/etc/kernel/postrm.d/zz-update-syslinux (file.include) | Updates the syslinux bootloader after kernel removal. |
file.include/etc/modprobe.d/disabled_firewire.conf (file.include) | Denylists firewire kernel modules (not needed in cloud environments). |
file.include/etc/modprobe.d/disabled_fs.conf (file.include) | Denylists unused filesystem modules to reduce attack surface. |
file.include/etc/modprobe.d/disabled_net.conf (file.include) | Denylists unused network protocol modules to reduce attack surface. |
file.include/etc/modprobe.d/disabled_udf.conf (file.include) | Denylists the UDF filesystem module. |
file.include/etc/modprobe.d/disabled_usb.conf (file.include) | Denylists USB storage modules (not needed in cloud environments). |
file.include/etc/profile.d/50-autologout.sh (file.include) | Configures automatic session logout after inactivity. |
file.include/etc/repart.d/root.conf (file.include) | systemd-repart partition definition for the root partition (enables auto-growth). |
file.include/etc/sysctl.d/20-cloud.conf (file.include) | Cloud-optimized sysctl settings. |
file.include/etc/sysctl.d/21-ipv4-settings.conf (file.include) | IPv4 network sysctl tuning for cloud environments. |
file.include/etc/sysctl.d/22-ipv6-settings.conf (file.include) | IPv6 network sysctl tuning for cloud environments. |
file.include/etc/systemd/system/rngd.service.d/architecture.conf (file.include) | Architecture-specific override for the rngd entropy service. |
Related features
Includes:
server— provides the server base layer (auditd, SELinux, networking, SSH)._legacy— adds BIOS/legacy boot support for cloud images that may boot on older hypervisors._fwcfg— providesfw_cfg-based metadata retrieval used by some hypervisors.
Excludes (incompatible with):
openstackMetal—cloudandopenstackMetalare mutually exclusive due to incompatible kernel and network configurations.