Sold by: Epok Systems
Deployed on AWS
Free Trial
AWS Free Tier
Production-ready Kubernetes worker node AMI optimized for Amazon EKS. Built on NixOS 25.05 with containerd, kubelet, AWS optimizations, and enterprise security hardening. Includes EKS bootstrap script for seamless cluster integration. Immutable infrastructure ensures reproducible, reliable Kubernetes deployments. Perfect for modern containerized workloads requiring declarative system management. This is a repackaged software product wherein additional charges apply for seller maintenance.
Overview
Welcome to NixOS 25.05 Kubernetes Worker Node, a production-grade Amazon Machine Image (AMI) engineered specifically for Amazon Elastic Kubernetes Service (EKS) deployments. Built on NixOS 25.05, the latest stable release of the revolutionary immutable Linux distribution, this AMI combines cutting-edge Kubernetes technology with enterprise-grade security practices to deliver a robust, reliable, and reproducible foundation for your containerized workloads.
Why NixOS for Kubernetes Workloads?
NixOS offers an immutable, declarative approach to system configuration that eliminates configuration drift and ensures perfect reproducibility across your Kubernetes cluster. Unlike traditional Linux distributions, NixOS treats your entire system configuration as code, enabling you to version control, test, and deploy infrastructure changes with confidence. This makes it ideal for Kubernetes environments where consistency and reliability are paramount.
Pre-Configured for Amazon EKS
This AMI is optimized specifically for Amazon EKS, with all essential components pre-installed:
- Container Runtime: containerd enabled and systemd-managed for industry-standard container support
- Kubernetes Components: kubelet, kubectl, and kubeadm pre-installed and ready for cluster integration
- EKS Bootstrap Script: Pre-configured /etc/eks/bootstrap.sh script for seamless EKS cluster joining via UserData
- AWS Authenticator: AWS IAM authentication integrated into the bootstrap process
- CNI Ready: Required directories pre-created for CNI plugin compatibility
AWS-Optimized Configuration
Designed for AWS EC2 and EKS environments with performance optimizations:
- Enhanced Networking: ENA (Elastic Network Adapter) support for improved network performance
- NVMe Optimization: Optimized storage configuration for NVMe-backed EC2 instances
- NTP Configuration: Time synchronization via AWS for accurate cluster coordination
- Journald Tuning: Low I/O journald configuration optimized for high-performance workloads
- Cloud-Init Compatible: Seamless integration with AWS cloud-init for automated configuration
Enterprise Security Hardening
Pre-configured with security best practices out of the box:
- Firewall Enabled: Built-in firewall protection to secure worker nodes from unauthorized access
- SSH Hardening: Password authentication disabled, root login disabled, key-based authentication only
- AppArmor Support: Mandatory access control framework enabled for container security
- Minimal Attack Surface: Only essential services enabled, reducing potential vulnerabilities
- ECDSA Key Support: Modern cryptographic standards with ECDSA key support (RSA deprecated)
Immutable Infrastructure Benefits
Leverage NixOS's unique approach to system management:
- Rollback Capability: Instantly roll back to any previous system state, ensuring cluster reliability
- Declarative Configuration: Define your entire system in /etc/nixos/configuration.nix - version control your infrastructure
- Reproducible Deployments: Deploy identical worker nodes across development, staging, and production environments
- No Configuration Drift: System configuration is immutable, preventing accidental changes
Use Cases
- Amazon EKS Clusters: Deploy consistent, secure worker nodes across your EKS clusters
- Production Kubernetes Workloads: Run mission-critical containerized applications with confidence
- Multi-Environment Deployments: Maintain identical worker nodes across dev, staging, and production
- Compliance Requirements: Meet security and compliance requirements with pre-hardened configurations
- High-Performance Workloads: Optimized for applications requiring low-latency networking and storage
Getting Started
- Launch an EC2 instance using this AMI with appropriate IAM role for EKS cluster access
- Use the EKS bootstrap script in UserData: /etc/eks/bootstrap.sh my-cluster-name
- The instance will automatically join your EKS cluster
- (Optional) Customize /etc/nixos/configuration.nix for specific requirements
Technical Specifications
- OS: NixOS 25.05 (latest stable release), x86_64 architecture
- Container Runtime: containerd (systemd-managed)
- Kubernetes Components: kubelet, kubectl, kubeadm
- Default User: ec2-user (with sudo privileges, SSH keys from EC2 metadata)
- Authentication: SSH key-based (ECDSA recommended)
- Security: Firewall enabled, SSH hardened, AppArmor support
- AWS Optimizations: ENA, NVMe, NTP, journald tuning
Why Choose This AMI?
This AMI saves you hours of configuration time while providing a secure, production-ready foundation for your EKS worker nodes. Whether you're building new Kubernetes clusters, scaling existing deployments, or implementing Infrastructure as Code practices, this AMI delivers the performance, security, and consistency you need.
Highlights
- EKS-Optimized & Production-Ready: Pre-configured containerd, kubelet, and EKS bootstrap script for instant cluster integration. Includes AWS optimizations (ENA, NVMe, NTP) and enterprise security hardening. Launch worker nodes that join your EKS cluster with a single UserData command.
- Immutable Infrastructure with NixOS: Leverage NixOS 25.05's unique declarative system management for perfect reproducibility. Eliminate configuration drift across all worker nodes, roll back instantly to any previous state, and version control your entire system configuration as code.
- Enterprise Security Hardening: Pre-configured firewall, SSH hardening, AppArmor support, and minimal attack surface. Security best practices applied out of the box, ensuring your Kubernetes worker nodes meet compliance requirements without additional configuration.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux 25.05
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 7 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.02 |
t2.micro | $0.01 |
t3.micro | $0.01 |
r6i.8xlarge | $0.09 |
m6i.12xlarge | $0.11 |
m5ad.2xlarge | $0.07 |
r6id.xlarge | $0.06 |
r5n.2xlarge | $0.07 |
t3.xlarge | $0.06 |
r6in.4xlarge | $0.08 |
Dimensions summary
You pay by the hour for the software running on each EC2 instance. Pricing has one dimension per instance type, and the type you launch sets your hourly rate. Options span many families, including general-purpose (m, t), compute-optimized (c), memory-optimized (r, x), storage-optimized (i, d), accelerated (g, p, inf, trn), and high-memory (u) instances. Rates scale with instance size, so larger sizes within a family cost more per hour. You choose the type that fits your worker node needs and are billed only for the hours each instance runs.
Top-of-mind questions for buyers
You get the NixOS 25.05 worker node image pre-configured for EKS. It includes containerd, kubelet, and the EKS bootstrap script, plus AWS optimizations like ENA and NVMe. Each running instance joins your cluster with a single UserData command. You pay per hour per instance running this image.
The software rate meters per running hour on each instance. A fully stopped instance does not accrue the hourly software charge. Underlying AWS storage fees may still apply while stopped, but the software license bills only for time the instance runs.
There is one rate per instance type, and the type you launch sets your hourly cost. Larger sizes within a family and more powerful families like accelerated or high-memory types cost more per hour. Your bill scales with the number of nodes and their hours. Documentation lists t3.small as a testing minimum.
epoksystems.com+1
Helpful?
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
...
Resources
Vendor resources
Support
Vendor support
Need help? Contact our experts at support@epoksystems.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
NixOS: Immutable, declarative Linux distro with powerful package management for efficient cloud deployments
Production-ready NixOS 25.05 AMI for AWS: Immutable, declarative Linux distribution with enterprise-grade security hardening. Perfect for Infrastructure as Code, DevOps workflows, and reproducible cloud deployments. Includes XRDP + KDE Plasma desktop environment support. This is a repackaged software product wherein additional charges apply for seller maintenance.
This is a repackaged software product wherein additional charges apply for seller maintenance.
NixOS: Immutable, declarative Linux distro with powerful package management for efficient cloud deployments
Elevate your application to a new level of performance, reliability, and cost-efficiency due to enhanced container management with Elastic Kubernetes Service (EKS). Leveraging this robust framework will steer you away from the intricacies of traditional legacy systems problems like maintenance overhead, security concerns, location dependencies, etc.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.