Skip to content

CirrOS

Stable

Tiny test image for OpenStack (Tempest, smoke checks), republished unchanged. Not for production.

0.6.3 · qcow2 · x86_64 · user cirros

Note: Test image with a well-known password (cirros / gocubsgo): never use it in production.

Download

Quick start

OpenStack

OpenStack Glance
curl -fLO https://images.openimages.cloud/cirros/0.6.3/cirros-0.6.3-x86_64.qcow2
echo "7d6355852aeb6dbcd191bcda7cd74f1536cfe5cbf8a10495a7283a8396e4b75b  cirros-0.6.3-x86_64.qcow2" | sha256sum -c -

openstack image create \
  --disk-format qcow2 --container-format bare \
  --file cirros-0.6.3-x86_64.qcow2 \
  --min-disk 1 \
  --property os_distro=cirros \
  --property os_admin_user=cirros \
  --property architecture=x86_64 \
  --property os_type=linux \
  --property hw_qemu_guest_agent=no \
  --property hw_disk_bus=scsi \
  --property hw_scsi_model=virtio-scsi \
  --property hw_vif_multiqueue_enabled=true \
  --property os_require_quiesce=no \
  --property oic_id=cirros \
  --property oic_version=0.6.3 \
  --property oic_sha256=7d6355852aeb6dbcd191bcda7cd74f1536cfe5cbf8a10495a7283a8396e4b75b \
  cirros-0.6.3

Proxmox VE

The disk boots on Proxmox VE (BIOS or UEFI) and gets its address by DHCP, but this test image ignores the Proxmox cloud-init drive: no SSH key or user is applied. Log in on the console with the well-known password instead.

Verify before booting

cosign 2.x / 3.x
curl -fLO https://images.openimages.cloud/cirros/0.6.3/cirros-0.6.3-x86_64.qcow2
curl -fLO https://images.openimages.cloud/cirros/0.6.3/cirros-0.6.3-x86_64.qcow2.bundle

cosign verify-blob cirros-0.6.3-x86_64.qcow2 \
  --bundle cirros-0.6.3-x86_64.qcow2.bundle --new-bundle-format \
  --certificate-identity-regexp '^https://github.com/open-img-cloud/\.github/\.github/workflows/build-(libguestfs|dib|nix-flake|freebsd)-image\.yml@' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Expect Verified OK. Details in the verification guide.

Keep images up to date

Automation should not scrape this page. The catalog index lists the latest version of every image with versioned URLs, SHA-256 and SHA-512 digests, sizes, firmware and the cosign identity; the version history of this image lists every published release.

About

The official CirrOS x86_64 disk image, byte for byte: verified against the upstream SHA256SUMS, signed with Sigstore cosign and boot-tested. No cloud-init (own metadata client), no guest agent, and a well-known password (cirros / gocubsgo): for testing a cloud, never for workloads.

  • openstack
  • test-image
  • tempest
  • signed