Open Image Cloud publishes ready-to-use, signed, reproducible cloud images for OpenStack and Proxmox, built in the open from official upstream releases.
- 🌐 Website and catalog: https://openimages.cloud
- 📦 Image registry: https://images.openimages.cloud (Swiss-hosted Infomaniak Object Storage behind the Cloudflare CDN)
- 🔐 Verification guide: https://openimages.cloud/verify/
- 📜 Conventions and image standards:
CONVENTIONS.md,IMAGE_STANDARDS.md
- 🔁 Reproducible builds in public GitHub Actions workflows, from pinned upstream artefacts and a signed builder container. Commit, CI run and builder digest are recorded in every image's
MANIFEST.json. - 🧪 Boot-tested twice before and after publishing: in QEMU with a ConfigDrive, then on a live OpenStack (cloud-init, SSH and DNS must pass).
- 🔒 Keyless cosign signatures bound to the identity of our build workflows and logged in Sigstore's Rekor: nothing to manage on your side.
- ☁️ One cloud-init policy for every distribution: OpenStack (ConfigDrive), Proxmox (NoCloud) and any provider that speaks either.
- 📌 Versioned, immutable paths:
images.openimages.cloud/<os>/<version>/<file>, plus alatest/alias refreshed on each release.
Versions below are read live from each image's published manifest.
1 Amazon Linux 2 reached end of life upstream on 2025-06-30. Builds continue for existing workloads; new deployments should target Amazon Linux 2023.
| Image | Latest | Variants | Login user | Status | Repository |
|---|---|---|---|---|---|
| FreeBSD 15 |  |
freebsd |
✅ Stable | freebsd |
|
| FreeBSD 14 |  |
freebsd |
✅ Stable2 | freebsd |
2 14.5 is the last FreeBSD 14 release; the 14 branch is supported until 2028-11-30. Prefer FreeBSD 15 for new deployments.
| Component | Releases | Status | Repository |
|---|---|---|---|
| Octavia Amphora | 2026.1, 2025.2, 2025.1 |
✅ Stable | octavia-amphora |
| Manila Service Image | 2026.2 |
✅ Stable | manila-service-image |
| Trove Guest Image | 2026.2 |
✅ Stable | trove-guest-image |
Amphora, Manila and Trove images follow the OpenStack release series. Older series stay at their immutable paths, so you can keep matching the release of your deployment.
| Image | Purpose | Repository |
|---|---|---|
| Windows Server 2022 | Windows guests with cloudbase-init | windows-server-2022 |
| Cloud Rescue | Bootable rescue and diagnostic image | cloud-rescue |
Need another distribution? Open an issue: new images are added on demand.
curl -fLO https://images.openimages.cloud/alpine-linux/3.24.1/alpine-3.24.1-uefi-x86_64.qcow2
curl -fLO https://images.openimages.cloud/alpine-linux/3.24.1/alpine-3.24.1-uefi-x86_64.qcow2.bundle
cosign verify-blob alpine-3.24.1-uefi-x86_64.qcow2 \
--bundle alpine-3.24.1-uefi-x86_64.qcow2.bundle --new-bundle-format \
--certificate-identity-regexp '^https://github.com/open-img-cloud/\.github/\.github/workflows/build-(libguestfs|dib|nix-flake|freebsd)-image\.yml@' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comVerified OK means the file was produced, unmodified, by one of our reusable build workflows. The verification guide also covers checksums and reading the provenance manifest.
Everything runs from this repository: reusable workflows and composite actions shared by every image repo. An image repo stays thin: a pinned VERSION, one build hook and an upstream watcher. Three build engines cover the catalog:
| Engine | Used for | Hook |
|---|---|---|
| libguestfs | Customising official upstream cloud images | build/customize.sh |
| diskimage-builder | Images assembled from scratch (Octavia, Manila, Trove, Gentoo) | build/dib-build.sh |
| Nix flake | NixOS, through the native NixOS image framework | build/nix-build.sh |
A daily watcher opens a pull request when upstream ships a new version. A tag on the merged version builds, boot-tests, signs and publishes the image. Builds run on GitHub-hosted runners with KVM.
Storage: Infomaniak Object Storage in Switzerland is the single source of truth, served through the Cloudflare CDN by images-router. The website lives in oic-website.
Image repositories are released under GPL-2.0 (GPL-3.0 for freebsd), the website under Apache-2.0. See each repository's LICENSE.
Issues and pull requests are welcome: a new distribution, another architecture (arm64, riscv64), a security report or a pipeline improvement. To add an image repo, start with CONVENTIONS.md.
Build once. Verify everywhere. Deploy anywhere.
