Debian Stretch on Amazon EC2

Status

• 2019-05-14 Debian 9.9 AMIs updated to include kernel security updates for "Microarchitectural Data Sampling" (MDS) information disclosure vulnerabilities in Intel CPUs, DSA 4444.

• 2019-04-29 Debian 9.9 AMIs available for both amd64 and arm64. See the release announcement for details.

• 2019-02-18 Debian 9.8 AMIs available for both amd64 and arm64. In addition to the standard package changes and new architecture, this AMI also updates the ENA NIC driver, adding support for new hardware features. See the release announcement for additional details.

• 2019-01-22 Debian 9.6 AMIs updated to include security updates for DSA 4371 (apt)

• 2019-01-14 Debian 9.6 AMIs updated with systemd, perl, openssl, tiff, and tzdata updates.

• 2018-11-10 Debian 9.6 AMIs available. See the release announcement for details.

• 2018-10-01 Debian 9.5 AMIs updated to include kernel security updates for DSA 4308, as well as updates to curl, python, and openssh.

• 2018-08-20 Debian 9.5 AMIs updated to include kernel security updates for DSA 4279

• 2018-08-14 Debian 9.5 AMIs updated to include kernel security updates for DSA 4272

• 2018-08-06 Debian 9.5 AMIs updated to include kernel security updates for DSA 4266

• 2018-07-15 Debian 9.5 AMIs available. See the release announcement for details.

• 2018-06-13 Debian 9.4 AMIs updated several security updates: DSA 4226 (perl), DSA 4222 (gnupg2), DSA 4208 (procps)

• 2018-05-14 Debian 9.4 AMIs updated to include kernel security updates for DSA 4196

• 2018-05-01 Debian 9.4 AMIs updated to include kernel security updates for DSA 4188 and perl updates for DSA 4172

• 2018-04-10 Debian 9.4 AMIs updated to include security updates for several packages including curl and openssl.

• 2018-03-11 Debian 9.4 AMIs available. See the release announcement for details.

• 2018-02-22 Debian 9.3 AMIs updated to include kernel updates for DSA 4120, addressing multiple vulnerabilities.

• 2018-01-06 Debian 9.3 AMIs updated to include kernel updates for DSA 4078, addressing the Meltdown attack.

• 2017-12-24 Debian 9.3 AMIs updated to include DSA 4071 and DSA 4073 updates. These are also the first AMIs published to the new eu-west-3 (Paris) region.

• 2017-12-17 Debian 9.3 AMIs available. See the release announcement for details.

• 2017-10-08 Debian 9.2 AMIs available. See the release announcement for details.

• 2017-08-31 Debian 9.1 AMIs have been refreshed with package updates available as of 2017-08-31. AMI details are available below.

• 2017-07-22 Debian 9.1 ("stretch r1") AMIs available. Details about updated packages can be found in the release announcement.

• 2017-06-21 Stretch release AMIs available. Notable changes include passing 'net.ifnames=0' to address Bug 863385 and the installation of unattended-upgrades. Details below.

• 2017-04-20 The second pre-release round of EC2 AMIs was announced. See AMI details below, or the blog announcement

• 2017-01-28 The first pre-release round of EC2 AMIs was announced in January, 2017. Details on Noah's blog

Image notes

• HVM images only - current generation EC2 instances all support HVM virtualisation.

• 64-bit images only - current generation EC2 instances all support 64 bit; if you require 32 bit, please look at Multiarch

• SR-IOV networking - Enhanced Networking (ENI)

• ENA networking - Elastic Network Adapter

• Multiple ENI support - DHCP client is configured to support the number of network interfaces the instance supports (up to 8), hot plugged with udev

• Multiple sub-interfaces - DHCP client is configured to support multiple IP addresses per interface

• AWS CLI is installed by default

• Python-boto is installed by default

• apt-transport-https is installed; you can change your sources.list to https://cloudfront.debian.net (or other https site) if you wish!

Stretch

AMI names

• arm64: debian-stretch-hvm-arm64-gp2-2019-05-14-84905

• amd64: debian-stretch-hvm-x86_64-gp2-2019-05-14-84483

Both are owned by AWS account ID 379101102735.

These images can be launched via their AWS Marketplace listing or directly using the region specific IDs below. Note that there is a delay in the Marketplace publication process, so Marketplace may not always have the current AMI.

See also Cloud and Teams/Cloud.