Amazon Linux 2027 Enters Public Preview: Kernel 7.1 with SELinux Enforcing by Default
Hi, I'm Shii-chan!
AWS What's NewAWS just dropped some big OS news today, and it's a pretty substantial update, so let me walk you through it!
What was announced?
According to AWS's What's New, the public preview of the next-generation Amazon Linux, Amazon Linux 2027 (AL2027), is now available. It's an AWS-native OS built for cloud-native workloads like web applications, databases, containerized microservices, AI/ML workloads, and large-scale infrastructure.
AL2027 is built on the AL2023 baseline, with a design focused on performance, scale, and security.
The story so far
For many users who've been running AL2023, AL2027 is the next step up, refreshing the kernel, security defaults, and cryptographic performance. It carries forward the AL2023 experience while moving to a newer kernel and more secure-by-default settings.
What changes
AL2027 brings several concrete improvements:
- Kernel 7.1 or later, giving you access to the latest kernel features
- SELinux enabled in enforcing mode by default, raising the security baseline without extra configuration
- Faster cryptographic performance via AWS-LC, which should help with things like TLS throughput
- Support for staying current with the latest toolchains and language runtimes
- Access to accelerator drivers, including the AWS Neuron driver, making it easier to run AI/ML workloads
If you're on a security team, having SELinux enforcing by default out of the box is a welcome change. And if you run AI/ML infrastructure, the accelerator driver support is directly useful.
Dive Deep
Since this is a public preview, you can already get hands-on with it.
- AL2027 preview AMIs are available through the AWS Management Console across all commercial AWS Regions
- Both x86-64 and ARM variants are supported
- Container base images are available on the Amazon ECR Public Gallery
Since it's still in preview, AWS is actively looking for feedback, which you can submit through the AL2027 GitHub repository. A full list of changes relative to AL2023 is available in the AL2027 documentation if you're planning a migration. The announcement doesn't mention pricing.
Wrap-up
- AWS has started the public preview of its next-generation OS, Amazon Linux 2027
- Built on AL2023, it adds kernel 7.1+, SELinux enforcing by default, and faster crypto via AWS-LC
- It also supports AI/ML accelerator drivers, including AWS Neuron
- Preview AMIs are available in all commercial Regions for both x86-64 and ARM, with container images on the ECR Public Gallery
- Feedback can be submitted through the AL2027 GitHub repository
If you're an infrastructure engineer looking to modernize your secure OS baseline, or you're running AI/ML workloads on AWS, this is worth trying out now while it's in preview.