Hardened CentOS Stream 9 Minimal - ARM64 64KB Page

This product provides the CentOS Stream 9 repository snapshot, aarch64 architecture, booted 64KB-page kernel, and Non-LVM/GPT storage layout identified in the published release manifest, delivered as an Amazon Machine Image (AMI) by Hanwei. The image applies Hanwei's versioned security-hardening baseline, records its build-date package state, and is constructed without embedded customer credentials or account-specific configuration.

Marketplace software charges cover Hanwei's minimal ARM64 image preparation, verified kernel/page-size and Non-LVM/GPT layout preparation, application of the verified security-hardening baseline, build-date package recording, credential-free AMI construction, repeatable image build, and bounded final-image testing. Applicable Marketplace software charges and AWS infrastructure charges follow final Seller Portal and AWS terms.

• CentOS Stream and ARM64 image preparation: Hanwei prepares the final CentOS Stream 9 repository snapshot and aarch64 image state identified in the release manifest. The manifest identifies /etc/os-release, release packages, enabled repositories, repository metadata date, installed RPM NEVRAs, kernel, architecture, and default boot target.
• 64KB-page kernel preparation: Hanwei installs and verifies the final AMI's booted kernel. The manifest records the kernel source, package name and NEVRA, uname -r, bootloader entry, kernel configuration evidence, and the getconf PAGE_SIZE output. The 64KB page size is a configuration fact for the recorded AMI, not a general performance, efficiency, stability, security, or compatibility claim.
• Non-LVM/GPT layout preparation: Hanwei prepares the final AMI's non-LVM partition and filesystem layout and records the partition-table type, partition inventory, root backing device, filesystems, mount points, capacity state, bootloader configuration, and /etc/fstab entries. Non-LVM means only that the documented final storage layout does not use Logical Volume Manager for the represented volumes; it does not describe all customer-attached storage.
• Versioned security-hardening baseline: Hanwei applies a versioned operating-system profile. Only controls, values, exceptions, and effective states verified on the final AMI are included in the published release scope.
• Build-date package baseline: The release manifest records the image-build date, repository sources, installed RPM NEVRAs, kernel state, and update state. This records a point in time and does not represent the AMI as continuously current after publication or launch.
• Credential-free construction: The published AMI contains no reusable customer password, private SSH key, AWS access key, secret access key, session token, customer CLI profile, internal repository credential, cloud-init secret, or account-specific endpoint configuration.
• Repeatable construction and bounded EC2 testing: Final-image verification covers launch, reboot, operating-system identity, architecture, kernel and page-size state, boot selection, partition/filesystem/mount state, configured cloud-init and SSH state, security-profile controls, enabled services, listening ports, and credential absence on the recorded EC2 baseline.