shiichan

Amazon Linux 2027 Enters Public Preview: Kernel 7.1 with SELinux Enforcing by Default

Hi, I'm Shii-chan!

AWS What's New aws.amazon.com

AWS just dropped some big OS news today, and it's a pretty substantial update, so let me walk you through it!

What was announced?

According to AWS's What's New, the public preview of the next-generation Amazon Linux, Amazon Linux 2027 (AL2027), is now available. It's an AWS-native OS built for cloud-native workloads like web applications, databases, containerized microservices, AI/ML workloads, and large-scale infrastructure.

AL2027 is built on the AL2023 baseline, with a design focused on performance, scale, and security.

The story so far

For many users who've been running AL2023, AL2027 is the next step up, refreshing the kernel, security defaults, and cryptographic performance. It carries forward the AL2023 experience while moving to a newer kernel and more secure-by-default settings.

What changes

AL2027 brings several concrete improvements:

  • Kernel 7.1 or later, giving you access to the latest kernel features
  • SELinux enabled in enforcing mode by default, raising the security baseline without extra configuration
  • Faster cryptographic performance via AWS-LC, which should help with things like TLS throughput
  • Support for staying current with the latest toolchains and language runtimes
  • Access to accelerator drivers, including the AWS Neuron driver, making it easier to run AI/ML workloads

If you're on a security team, having SELinux enforcing by default out of the box is a welcome change. And if you run AI/ML infrastructure, the accelerator driver support is directly useful.

Dive Deep

Since this is a public preview, you can already get hands-on with it.

  • AL2027 preview AMIs are available through the AWS Management Console across all commercial AWS Regions
  • Both x86-64 and ARM variants are supported
  • Container base images are available on the Amazon ECR Public Gallery

Since it's still in preview, AWS is actively looking for feedback, which you can submit through the AL2027 GitHub repository. A full list of changes relative to AL2023 is available in the AL2027 documentation if you're planning a migration. The announcement doesn't mention pricing.

Wrap-up

  • AWS has started the public preview of its next-generation OS, Amazon Linux 2027
  • Built on AL2023, it adds kernel 7.1+, SELinux enforcing by default, and faster crypto via AWS-LC
  • It also supports AI/ML accelerator drivers, including AWS Neuron
  • Preview AMIs are available in all commercial Regions for both x86-64 and ARM, with container images on the ECR Public Gallery
  • Feedback can be submitted through the AL2027 GitHub repository

If you're an infrastructure engineer looking to modernize your secure OS baseline, or you're running AI/ML workloads on AWS, this is worth trying out now while it's in preview.