CIS-Harden your Ubuntu in Google Cloud

Hugo Huang

on 9 November 2021

This article was last updated 2 year s ago.


CIS Benchmarks are best practices for the secure configuration of a target system. The Center for Internet Security, Inc. (CIS®) is the authority backing CIS Benchmarks. Ubuntu Pro is entitled to be CIS compliant and packaged with CIS toolings from Canonical.

Let’s SSH into your Ubuntu Pro virtual machine. If you haven’t yet upgrade your Ubuntu LTS to Ubuntu Pro, please follow this tutorial. In less than One Minute, you will be able to get your Ubuntu Pro machine without losing any of your mission critical workloads. Once you SSH into your Ubuntu Pro, input:

You will see:

SERVICE ENTITLEDSTATUSDESCRIPTION
cisyesdisabledCenter for Internet Security Audit Tools
[…]

Let’s enable CIS for this VM:

You will see:

If you check the status:

You will see:

SERVICEENTITLEDSTATUSDESCRIPTION
cisyesenabledCenter for Internet Security Audit Tools
[…]

With tooling packages installed, let’s harden your Ubuntu 16.04 Pro system with CIS Level 1 Server profile:

In less than 3 minutes, your Ubuntu Pro will go through the whole process of hardening and you will get a CIS level-1 compliant environment with no more manual configuration. Let’s audit the system:

The output should be similar to:

The HTML report as shown above will also present your CIS score. For comprehensive CIS hardening instructions, you can check Ubuntu CIS Compliance documentation.

Ubuntu cloud

Ubuntu offers all the training, software infrastructure, tools, services and support you need for your public and private clouds.

Newsletter signup

Get the latest Ubuntu news and updates in your inbox.

By submitting this form, I confirm that I have read and agree to Canonical’s Privacy Policy.

Related posts

Ubuntu Pro 24.04 LTS Lands on Google Cloud: Power Up Your Cloud Experience

Exciting news for cloud enthusiasts and developers! Ubuntu Pro 24.04 LTS (Noble Numbat) is now available on Google Cloud, bringing a robust and secure...

Install FreePBX and Asterisk on Ubuntu 24.04 LTS for security patches until 2036

Deploying FreePBX and Asterisk on a single Ubuntu virtual machine in a public cloud is an ideal solution for personal users and small to medium-sized...

Ubuntu 20.04 LTS on Azure: how to stay secure after standard support ends

As standard support for Ubuntu 20.04 LTS ends on May 31, 2025, Azure users must choose between upgrading to a newer version or enabling extended security with...