Linux & OS Platform

SUSE | Red Hat | Hardening | Lifecycle | Automation

We build, harden and operate Linux platforms on SUSE and Red Hat for critical systems. A Linux platform is more than an installed OS: it covers CIS and STIG hardening, controlled patching, lifecycle planning and automation – and that is where stability is decided, long before any pod starts.

Underneath every Kubernetes cluster there is an operating system – and that is where stability and security are actually decided. We build, harden and operate Linux platforms on SUSE and Red Hat, both as a foundation for container platforms and for classic mission-critical systems. We have done it in highly regulated environments where every change must be justified, documented and traceable.

SUSE and Red Hat – the right distribution for the job

We work primarily with SUSE Linux Enterprise and Red Hat Enterprise Linux, as well as derivatives such as openSUSE, Rocky and AlmaLinux. We help you choose distribution and support model based on lifespan, certifications and the platforms you already run – and set a standardised base that can be reproduced instead of hand-built servers.

Hardening – security from installation

We harden systems according to CIS Benchmarks and DISA STIG, with SELinux or AppArmor, locked-down services, a minimal attack surface, disk and network encryption and controlled access. Hardening is implemented as code and continuously verified with OpenSCAP or equivalent, so a deviation is detected immediately rather than at the next audit.

Patching & lifecycle

We set up controlled patching with SUSE Manager, Red Hat Satellite or equivalent – with test rings, maintenance windows and the ability to roll back. Lifecycle planning turns major version upgrades into planned projects instead of emergencies when support runs out.

Automation & operations

Ansible, Terraform and image builds with Packer make servers reproducible. We add monitoring, logging and alerts that matter, and can support with troubleshooting and second-line operations when something breaks in production. The goal is a platform where changes are predictable and nobody has to guess how a machine ended up the way it did.

What goes into a stable Linux platform?

CIS and DISA STIG hardening, verified with OpenSCAP
Controlled patching with SUSE Manager or Red Hat Satellite, with test rings
Lifecycle planning against vendor support windows
Automation as code with Ansible, Terraform and Packer

We have operated and evolved a Rancher-managed Kubernetes platform on SUSE Linux for the Danish Defence. Read the case.

Linux platform FAQ

SUSE or Red Hat as the Linux platform for Kubernetes?

Both work well. The choice is usually driven by which Kubernetes platform you run (Rancher/RKE2 pairs naturally with SUSE, OpenShift with Red Hat), the certifications and support agreements you need, and the skills you already have. Derivatives such as Rocky and AlmaLinux can be an option when you don't need vendor support.

How often should a Linux platform be patched?

Security updates should be rolled out continuously on a fixed cadence, with test rings and maintenance windows, and critical vulnerabilities faster than that. What matters is that patching is automated, traceable and reversible, so it becomes routine rather than a project.