Harden new builds with Insights image builder and compliance

Learning path | 4 resources | 1 hr and 30 mins | Published on March 19, 2025

Custom-harden your new builds and keep them that way with Red Hat Insights image builder and Red Hat Insights compliance.

Explore Red Hat Insights

  1. Overview: Harden new builds with Insights image builder and compliance
  2. Build a customized hardened image Page | 45 mins
  3. Scan your system and assess compliance issues Page | 30 mins
  4. Create the remediation playbook Page | 15 mins

Overview: Harden new builds with Insights image builder and compliance

Harden_New_Builds_featured_image

Security hardening and Linux patching are by far the two most common topics customers ask me about, as a Red Hat Enterprise Linux (RHEL) specialist. Between the ever-increasing number of common vulnerabilities and exposures (CVEs) (a 20% yearly increase according to the Australian Government) and the constant threat of cyber attacks, the security workload for Linux teams occupies a substantial proportion of their time.

So how can Linux teams improve their fleet's security posture for the entire lifecycle of workloads without significantly increasing the overall effort associated with managing them? This learning path shows you how to use Insights image builder and Red Hat Insights to build hardened systems with customized security policies. Then report and remediate compliance issues without having to deploy new infrastructure. Let’s get started!

Prerequisites:

  • Sign up for a no-cost developer Red Hat Enterprise Linux subscription or have an existing subscription at your disposal.
  • Access to console.redhat.com.
  • An environment to deploy your host (e.g., bare metal, VMware, AWS, Azure, etc.).
  • Knowledge of the security compliance baseline to align with your system (e.g., CIS or PCI-DSS) and any customizations needed for the baseline to suit your requirements.

In this learning path, you will:

  • Use Insights image builder and Red Hat Insights to build hardened systems using customized security policies.
  • Report and remediate compliance issues without having to deploy new infrastructure.