Cloud Security Authors: Elizabeth White, Liz McMillan, Yeshim Deniz, Lori MacVittie, Pat Romanski

Related Topics: Containers Expo Blog, Microsoft Cloud, Linux Containers, Open Source Cloud, Silverlight, @CloudExpo, Apache

Containers Expo Blog: Blog Post

Step-by-Step: Build Linux VMs in the Cloud with Windows Azure

Windows Azure Virtual Machines provides Linux and Windows VM support

The Windows Azure Infrastructure as a Service (IaaS) offering supports running Windows virtual machines and Linux virtual machines in the Cloud. In this article, I provide step-by-step guidance for running a new Linux virtual machine in the cloud using our Windows Azure platform.


That’s right, Linux!

Windows Azure runs Linux VMs as a first-class citizen on our cloud platform, with support in the Preview offering for four common Linux distributions:

  • SUSE Linux Enterprise Server (SLES) 11 SP2
  • OpenSUSE 12.1
  • CentOS 6.3
  • Ubuntu 12..04.1 and 12.10

The best news is … you can try this out for FREE by signing up for a FREE Windows Azure 90-day Trial of our Virtual Machine Preview.

NOTE: When activating your FREE Trial for Windows Azure, you will be prompted for credit card information.  This information is used only to validate your identity and your credit card will not be charged, unless you explicitly convert your FREE Trial account to a paid subscription at a later point in time.

What about custom Linux images?

If the standard Linux platform images don’t meet your exact needs, there’s several options for leveraging or customizing other images for Windows Azure VMs …

  • We’ve recently announced our own Open Source VM Depot for Linux images for Windows Azure VMs. 
  • SUSE Studio provides integrated Windows Azure support for deploying customized SLES and OpenSUSE images directly to Windows Azure.  You’ll need to enable support for Windows Azure deployment under your SUSE Studio Account Settings by activating “Experimental Features”  after registering on the SUSE Studio site.
  • We also provide step-by-step guidance for preparing your own Linux images for use with Windows Azure if you need further customization flexibility.

Step-by-Step: Build a Linux Apache Web Server VM in the Windows Azure Cloud
In this scenario, we’ll work through the process of provisioning a new Linux Apache web server running SUSE Linux Enterprise Server 11 SP2 in a virtual machine on the Windows Azure cloud platform.

  1. To prepare your Windows Azure environment, make sure you’ve first completed all steps in our Getting Started article.
  2. After you’ve provisioned a new Linux virtual machine, we’ll be configuring it via a remote Secure Shell (SSH) console session.  If you don’t already have an SSH client installed on your PC, I highly recommend PuTTY.  Download PuTTY and install it before proceeding.
  3. Open Internet Explorer and browse to https://manage.windowsazure.com/ to enter the Windows Azure portal. Then, log in with your credentials.

  4. In the menu located at the bottom, select New | Compute | Virtual Machine | From Gallery to start creating a new virtual machine.

    Creating a new Virtual Machine

  5. On the VM OS Selection page, click Platform Images on the left menu and select the SUSE Linux Enterprise Server 11 SP2 OS image from the list. Click the Next button to continue.

  6. On the Virtual Machine Configuration page, specify a unique Virtual Machine Name and Administrative Password to be provisioned for the new VM. 

    Virtual Machine Configuration

    Note: It is suggested to use secure passwords for administrative users and service accounts, as Windows Azure virtual machines could be accessible from the Internet knowing just their public DNS host names.  You can also read this document on the Microsoft Security website that will help you select a secure password: http://www.microsoft.com/security/online-privacy/passwords-create.aspx.

    Record the username and password information that you’ve entered above for use when remotely connecting to this new virtual machine later in this step-by-step guide.

    Click the Next button to continue.

  7. On the Virtual Machine Mode page, specify a unique public DNS host name that you’ll use to initially access this new VM remotely.  For the Storage Account and Region/Affinity Group/Virtual Network fields, select the storage account and affinity group that you previously created in the Getting Started article.

    Click the Next button to continue.

    Virtual Machine Mode

    Record the public DNS hostname for testing this new virtual machine after the configuration steps are complete.

  8. On the Virtual Machine Options page, accept the default values and click the Checkmark button to begin provisioning your new virtual machine.

    Virtual Machine Options

  9. You will be returned to the Virtual Machines page and your new virtual machine will be listed with a status of Starting (Provisioning) while it is being initially provisioned on the Windows Azure cloud platform.

    Provisioning a New Virtual Machine

    As the new virtual machine is being provisioned, you will see the Status column on the Virtual Machines page of the Windows Azure Management Portal cycle through several values including Stopped, Stopped (Provisioning), and Running (Provisioning).  When provisioning for this new Virtual Machine is completed, the Status column will display a value of Running and you may continue with the next step in this guide.

  10. After the new virtual machine has finished provisioning, click on the Name of the new Virtual Machine displayed on the Virtual Machines page of the Windows Azure Management Portal. This will navigate to a Dashboard page for this new virtual machine.

    Virtual Machine Dashboard

  11. On the Virtual Machine Dashboard page, make note of the SSH Details.  You’ll use this information to connect to the new virtual machine remotely via an SSH client to configure the Apache web server daemon.

  12. On the Virtual Machine Dashboard page, click on the Endpoints link located in the top navigation area of this page.  This will navigate to the Endpoints page for this virtual machine, listing all firewall endpoint traffic that is currently permitted inbound to this virtual machine.

    Virtual Machine Endpoints

    Note that SSH traffic has automatically been permitted inbound to this new Linux virtual machine, but no other network traffic is permitted by default.  In the next two steps, we’ll add a new endpoint to permit inbound web http traffic to our virtual machine.

  13. On the Virtual Machine Endpoints page, click the +Add Endpoint button located on the bottom toolbar of this page.  This will launch the Add Endpoint wizard.

    Add Endpoint Wizard

    Click the Next button to continue.

  14. On the Specify the details of the endpoint wizard page, enter a name ( web-http ), a public port ( 80 ) and a private port ( 80 ) in the respective fields. 

    Specify the Details of the Endpoint

    Click the Checkmark button to provision the new endpoint.

  15. On your PC, launch an SSH client, such as PuTTY, and establish a new remote SSH session to your virtual machine using the SSH details recorded in Step 9 above in the Host Name and Port fields of the SSH connection properties.

    Establish a new Remote SSH Session with PuTTY

    Click the Open button to establish a remote SSH session to your virtual machine.

  16. Because this is the first time connecting to this virtual machine, you may be presented with a Security Alert dialog box prompting you to accept the host key for securing this SSH session.  

    PuTTY Security Alert during First-Time SSH Connection

    Click the Yes button to accept this host key into your SSH client cache and continue with establishing the connection.

  17. In the new SSH session window, authenticate with the Username and Password information recorded above in Step 4 above.

    SSH Session Window

  18. In the SSH session window, enter the following command to elevate your session for performing root-level administrative commands:

    sudo su -

    When prompted, confirm your identity by re-entering the same Password used to authenticate in Step 17 above.

  19. In the SSH session window, install the packages needed for running the YaST2 setup and configuration tool by entering each of the following commands, pressing ENTER after each line:

    zypper install yast2
    zypper install yast2-ncurses
    zypper install yast2-ncurses-pkg
    zypper install yast2-qt
    zypper install yast2-packager
    zypper install yast2-runlevel
    zypper install yast2-network
    zypper install yast2-http-server

  20. In the SSH session window, launch the YaST2 setup and configuration tool by entering the following command:


    This will launch the YaST2 Control Center menu-based setup and configuration tool.

    YaST2 Control Center

  21. In the YaST2 Control Center, press ENTER on the Software menu choice and then select Software Management by pressing ENTER again. This will launch the YaST2 Software Management tool shown below.

    YaST2 Software Management

  22. In the YaST2 Software Management tool, press ALT+F to change the Filter type, select Patterns using your arrow keys and press ENTER.

    Selecting a Pattern Filter

  23. In the YaST2 Software Management tool, press TAB to switch your cursor focus to the Patterns List and scroll down using your arrow keys until Web and LAMP Server is highlighted.

    Selecting the Web and Lamp Server Pattern Filter

  24. In the YaST2 Software Management tool, press ALT+T to open the Actions menu, then press ALT+A to select All Listed Packages, then press ALT+I to select the option to Install All.  After this is completed, a + ( plus sign ) should appear next to each of the 9 selected packages.

    Selecting to Install All Packages in the Web and Lamp Server Pattern Filter

  25. In the YaST2 Software Management tool, press ALT+A to start the installation. Press ENTER when prompted for confirmation. 

    Performing the Web and Lamp Server Package Installation

    Once the installation is complete, the YaST2 Control Center main menu will appear again.

  26. In the YaST2 Control Center main menu, use arrow keys to select Network Services –> HTTP Server to configure the newly installed Web server.

    Selecting the HTTP Server Wizard Configuration Tool

    Press ENTER on the HTTP Server menu selection.

  27. In the HTTP Server Wizard, press F10 on each screen of the wizard to accept default configuration values and finish the wizard. 

    HTTP Server Configuration Wizard

    Once the configuration process is complete, the YaST2 Control Center main menu will appear again.

  28. In the YaST2 Control Center main menu, use arrow keys to select System –> System Services (Runlevel) to start the Web server.

    Selecting System Services (Runlevel) to Start Web Server

    Press ENTER on the System Services (Runlevel) menu selection.

  29. In the YaST2 System Services (Runlevel) tool, use arrow keys to select apache2 in the Service list.  Press ALT+E to enable and start the Apache HTTP daemon.

    Enabling the Apache Web Daemon

  30. In the YaST2 System Services (Runlevel) tool, after the Apache Web Daemon is started, press ENTER and then ALT+O to accept the new Runlevel changes.

    Accepting the Runlevel Changes

    Press ENTER to confirm that changes will be saved.

We’re done! Let’s test it!

After the above steps are completed, the Apache Web Daemon will be running on SUSE Linux Enterprise Server 11 SP2 in a virtual machine on the Windows Azure cloud platform.

  • Test the new virtual machine by opening a new browser window and navigating to:


    Use the public DNS hostname value recorded in Step 7 above.

    Testing the Linux HTTP Web Server VM

What’s Next? Keep Building!

Learn more about Windows Azure Virtual Machines with this FREE online training:

In addition to running Linux virtual machines on the Windows Azure cloud platform, did you know that Windows Server 2012 Hyper-V and our FREE Hyper-V Server 2012 products support running Linux virtual machines in your on-premise data center?

  • Do It: Learn more about these products at:
    • Build your Windows Server 2012 Lab
    • Join our FREE Early Experts Virtualizer Knowledge Quest
    • Build a FREE Hyper-V Server 2012 cluster
    • Download Linux Integration Services for Hyper-V

Which Linux workloads are you planning to virtualize?

Feel free to leave your comments below with your thoughts, questions and ideas for virtualizing Linux workloads on the Windows Azure cloud platform, Windows Server 2012 and our FREE Hyper-V Server 2012.


Build Your Lab! Build Your Lab! Download Windows Server 2012
Build Your Lab in the Cloud! Don’t Have a Lab? Build Your Lab in the Cloud with Windows Azure Virtual Machines
Join our "Early Experts" study group! Want to Get Certified? Join our Windows Server 2012 "Early Experts" Study Group

More Stories By Keith Mayer

Keith Mayer is a Technical Evangelist at Microsoft focused on Windows Infrastructure, Data Center Virtualization, Systems Management and Private Cloud. Keith has over 17 years of experience as a technical leader of complex IT projects, in diverse roles, such as Network Engineer, IT Manager, Technical Instructor and Consultant. He has consulted and trained thousands of IT professionals worldwide on the design and implementation of enterprise technology solutions.

Keith is currently certified on several Microsoft technologies, including System Center, Hyper-V, Windows, Windows Server, SharePoint and Exchange. He also holds other industry certifications from IBM, Cisco, Citrix, HP, CheckPoint, CompTIA and Interwoven.

Keith is the author of the IT Pros ROCK! Blog on Microsoft TechNet, voted as one of the Top 50 "Must Read" IT Blogs.

Keith also manages the Windows Server 2012 "Early Experts" Challenge - a FREE online study group for IT Pros interested in studying and preparing for certification on Windows Server 2012. Join us and become the next "Early Expert"!

@ThingsExpo Stories
In the next five to ten years, millions, if not billions of things will become smarter. This smartness goes beyond connected things in our homes like the fridge, thermostat and fancy lighting, and into heavily regulated industries including aerospace, pharmaceutical/medical devices and energy. “Smartness” will embed itself within individual products that are part of our daily lives. We will engage with smart products - learning from them, informing them, and communicating with them. Smart produc...
As ridesharing competitors and enhanced services increase, notable changes are occurring in the transportation model. Despite the cost-effective means and flexibility of ridesharing, both drivers and users will need to be aware of the connected environment and how it will impact the ridesharing experience. In his session at @ThingsExpo, Timothy Evavold, Executive Director Automotive at Covisint, will discuss key challenges and solutions to powering a ride sharing and/or multimodal model in the a...
SYS-CON Events announced today that Coalfire will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Coalfire is the trusted leader in cybersecurity risk management and compliance services. Coalfire integrates advisory and technical assessments and recommendations to the corporate directors, executives, boards, and IT organizations for global brands and organizations in the technology, cloud, health...
A completely new computing platform is on the horizon. They’re called Microservers by some, ARM Servers by others, and sometimes even ARM-based Servers. No matter what you call them, Microservers will have a huge impact on the data center and on server computing in general. Although few people are familiar with Microservers today, their impact will be felt very soon. This is a new category of computing platform that is available today and is predicted to have triple-digit growth rates for some ...
SYS-CON Events announced today that Transparent Cloud Computing (T-Cloud) Consortium will exhibit at the 19th International Cloud Expo®, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. The Transparent Cloud Computing Consortium (T-Cloud Consortium) will conduct research activities into changes in the computing model as a result of collaboration between "device" and "cloud" and the creation of new value and markets through organic data proces...
Cognitive Computing is becoming the foundation for a new generation of solutions that have the potential to transform business. Unlike traditional approaches to building solutions, a cognitive computing approach allows the data to help determine the way applications are designed. This contrasts with conventional software development that begins with defining logic based on the current way a business operates. In her session at 18th Cloud Expo, Judith S. Hurwitz, President and CEO of Hurwitz & ...
Major trends and emerging technologies – from virtual reality and IoT, to Big Data and algorithms – are helping organizations innovate in the digital era. However, to create real business value, IT must think beyond the ‘what’ of digital transformation to the ‘how’ to harness emerging trends, innovation and disruption. Architecture is the key that underpins and ties all these efforts together. In the digital age, it’s important to invest in architecture, extend the enterprise footprint to the cl...
SYS-CON Events announced today that MathFreeOn will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. MathFreeOn is Software as a Service (SaaS) used in Engineering and Math education. Write scripts and solve math problems online. MathFreeOn provides online courses for beginners or amateurs who have difficulties in writing scripts. In accordance with various mathematical topics, there are more tha...
The best way to leverage your Cloud Expo presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering Cloud Expo and @ThingsExpo will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at Cloud Expo. Product announcements during our show provide your company with the most reach through our targeted audiences.
@ThingsExpo has been named the Top 5 Most Influential Internet of Things Brand by Onalytica in the ‘The Internet of Things Landscape 2015: Top 100 Individuals and Brands.' Onalytica analyzed Twitter conversations around the #IoT debate to uncover the most influential brands and individuals driving the conversation. Onalytica captured data from 56,224 users. The PageRank based methodology they use to extract influencers on a particular topic (tweets mentioning #InternetofThings or #IoT in this ...
@ThingsExpo has been named the Top 5 Most Influential M2M Brand by Onalytica in the ‘Machine to Machine: Top 100 Influencers and Brands.' Onalytica analyzed the online debate on M2M by looking at over 85,000 tweets to provide the most influential individuals and brands that drive the discussion. According to Onalytica the "analysis showed a very engaged community with a lot of interactive tweets. The M2M discussion seems to be more fragmented and driven by some of the major brands present in the...
In the next forty months – just over three years – businesses will undergo extraordinary changes. The exponential growth of digitization and machine learning will see a step function change in how businesses create value, satisfy customers, and outperform their competition. In the next forty months companies will take the actions that will see them get to the next level of the game called Capitalism. Or they won’t – game over. The winners of today and tomorrow think differently, follow different...
In an era of historic innovation fueled by unprecedented access to data and technology, the low cost and risk of entering new markets has leveled the playing field for business. Today, any ambitious innovator can easily introduce a new application or product that can reinvent business models and transform the client experience. In their Day 2 Keynote at 19th Cloud Expo, Mercer Rowe, IBM Vice President of Strategic Alliances, and Raejeanne Skillern, Intel Vice President of Data Center Group and ...
More and more brands have jumped on the IoT bandwagon. We have an excess of wearables – activity trackers, smartwatches, smart glasses and sneakers, and more that track seemingly endless datapoints. However, most consumers have no idea what “IoT” means. Creating more wearables that track data shouldn't be the aim of brands; delivering meaningful, tangible relevance to their users should be. We're in a period in which the IoT pendulum is still swinging. Initially, it swung toward "smart for smar...
Virgil consists of an open-source encryption library, which implements Cryptographic Message Syntax (CMS) and Elliptic Curve Integrated Encryption Scheme (ECIES) (including RSA schema), a Key Management API, and a cloud-based Key Management Service (Virgil Keys). The Virgil Keys Service consists of a public key service and a private key escrow service. 

The Internet of Things (IoT), in all its myriad manifestations, has great potential. Much of that potential comes from the evolving data management and analytic (DMA) technologies and processes that allow us to gain insight from all of the IoT data that can be generated and gathered. This potential may never be met as those data sets are tied to specific industry verticals and single markets, with no clear way to use IoT data and sensor analytics to fulfill the hype being given the IoT today.
Data is the fuel that drives the machine learning algorithmic engines and ultimately provides the business value. In his session at Cloud Expo, Ed Featherston, a director and senior enterprise architect at Collaborative Consulting, will discuss the key considerations around quality, volume, timeliness, and pedigree that must be dealt with in order to properly fuel that engine.
What happens when the different parts of a vehicle become smarter than the vehicle itself? As we move toward the era of smart everything, hundreds of entities in a vehicle that communicate with each other, the vehicle and external systems create a need for identity orchestration so that all entities work as a conglomerate. Much like an orchestra without a conductor, without the ability to secure, control, and connect the link between a vehicle’s head unit, devices, and systems and to manage the ...
Machine Learning helps make complex systems more efficient. By applying advanced Machine Learning techniques such as Cognitive Fingerprinting, wind project operators can utilize these tools to learn from collected data, detect regular patterns, and optimize their own operations. In his session at 18th Cloud Expo, Stuart Gillen, Director of Business Development at SparkCognition, discussed how research has demonstrated the value of Machine Learning in delivering next generation analytics to impr...
For basic one-to-one voice or video calling solutions, WebRTC has proven to be a very powerful technology. Although WebRTC’s core functionality is to provide secure, real-time p2p media streaming, leveraging native platform features and server-side components brings up new communication capabilities for web and native mobile applications, allowing for advanced multi-user use cases such as video broadcasting, conferencing, and media recording.