Microsoft Launches Azure Linux 4.0 Preview and Azure Container Linux GA at Open Source Summit
At Open Source Summit North America in Minneapolis, Microsoft unveiled Azure Linux 4.0 — a Fedora-based cloud VM OS — in public preview alongside the general availability of Azure Container Linux, an immutable container-optimized OS with no package manager.
Microsoft announced two Linux distributions for cloud-native and AI workloads at Open Source Summit North America (Minneapolis, May 18–20, 2026). Azure Linux 4.0 entered public preview on Azure Virtual Machines, and Azure Container Linux reached general availability simultaneously. Both are designed as hardened, minimal operating systems targeting the infrastructure layer beneath Kubernetes clusters and AI training workloads.
Azure Linux 4.0
Azure Linux 4.0 is based on Fedora Linux and is delivered open-source on GitHub under the name azurelinux. The 4.0 release brings a reduced default package footprint compared to its 3.0 predecessor, a smaller attack surface via a tighter default-deny SELinux policy, and updated kernel versions aligned with Azure’s hardware roadmap including support for the latest Cobalt (ARM) and EPYC-based instances.
The distribution targets workloads running on Azure Virtual Machines where operators want predictable update cadence, minimal bloat, and a Microsoft-supported Linux that ships security patches faster than general-purpose distros. It is the same OS that powers AKS node pools and several Azure-managed services internally — making it the default substrate for a significant portion of Azure’s own infrastructure.
Azure Container Linux
Azure Container Linux takes a different philosophical approach: it is an immutable OS with no package manager. The system image is read-only at runtime. Updates are applied by atomically swapping the entire OS image, similar to the model used by Flatcar, CoreOS, and Google’s Container-Optimized OS.
The immutability constraint eliminates a class of common attack vectors — an attacker who gains code execution cannot persist by installing packages or modifying system binaries. For AI training clusters running unvetted research code or user-submitted jobs, that property is operationally significant.
Azure Container Linux reached GA today, meaning Microsoft’s SLA, support contracts, and production readiness guarantees apply. A broader rollout on Azure Kubernetes Service and Azure Arc is planned for Microsoft Build on June 2, 2026.
Why This Matters for AI Infrastructure
Both announcements connect to the same underlying pressure: running AI workloads at scale requires infrastructure that boots fast, patches reliably, and doesn’t introduce surprise vulnerabilities via a sprawling package dependency graph. An AI training cluster with 10,000 nodes cannot afford a single vulnerable userspace library across that fleet.
The shift toward minimal, immutable OS images mirrors what Google has operated internally for years and what Kubernetes-native deployments increasingly assume. Microsoft is standardising its own infrastructure on this model and making it available to Azure customers under the same terms.
Microsoft has also pushed changes to upstream Fedora and the Linux kernel through this project — kernel improvements for Azure’s hardware accelerators, network drivers for high-bandwidth interconnects, and telemetry APIs for hypervisor integration. Open-sourcing Azure Linux 4.0 means those contributions flow to the broader community.
Getting Started
Azure Linux 4.0 is available now in the Azure Marketplace under the “Azure Linux” publisher. Azure Container Linux is available for AKS node pool configuration today:
az aks nodepool add \
--resource-group myRG \
--cluster-name myAKS \
--name aclinuxpool \
--os-sku AzureLinuxContainerHost \
--node-count 3Full documentation is at the Azure Linux GitHub repository and the Azure documentation portal.