Skip to content

Rocky Linux 10

Stable

Community enterprise Linux, binary-compatible with RHEL 10.

10.2-20260525.0 · qcow2 · x86_64 · user rocky

Note: Requires an x86-64-v3 CPU (Haswell or newer). Supported until 2035-05-31.

Download

Quick start

OpenStack

OpenStack Glance
curl -fLO https://images.openimages.cloud/rocky-linux-10/10.2-20260525.0/rocky-linux-10-10.2-20260525.0-x86_64.qcow2
echo "a31cab1ac2302a4b39425f2d47b7d19bb85fbafaa21ffb970f4205a12b4a3aaa  rocky-linux-10-10.2-20260525.0-x86_64.qcow2" | sha256sum -c -

openstack image create \
  --disk-format qcow2 --container-format bare \
  --file rocky-linux-10-10.2-20260525.0-x86_64.qcow2 \
  --min-disk 10 \
  --property os_distro=rocky \
  --property os_version=10.2 \
  --property os_admin_user=rocky \
  --property architecture=x86_64 \
  --property os_type=linux \
  --property hw_qemu_guest_agent=yes \
  --property hw_disk_bus=scsi \
  --property hw_scsi_model=virtio-scsi \
  --property hw_vif_multiqueue_enabled=true \
  --property os_require_quiesce=yes \
  --property oic_id=rocky-linux-10 \
  --property oic_version=10.2-20260525.0 \
  --property oic_sha256=a31cab1ac2302a4b39425f2d47b7d19bb85fbafaa21ffb970f4205a12b4a3aaa \
  rocky-linux-10-10.2-20260525.0

Proxmox VE

Creates a cloud-init template (VM 9000) on local-lvm. The local storage needs the Import content type (default on new Proxmox VE 9.1 installs). Adjust the storages, bridge and SSH key path to your setup.

Proxmox VE 9
# Download into the "import" content of a file storage; PVE checks the sha256.
pvesh create /nodes/$(hostname)/storage/local/download-url \
  --content import --filename rocky-linux-10-10.2-20260525.0-x86_64.qcow2 \
  --url https://images.openimages.cloud/rocky-linux-10/10.2-20260525.0/rocky-linux-10-10.2-20260525.0-x86_64.qcow2 \
  --checksum a31cab1ac2302a4b39425f2d47b7d19bb85fbafaa21ffb970f4205a12b4a3aaa --checksum-algorithm sha256

qm create 9000 --name rocky-linux-10 --memory 2048 --cores 2 \
  --net0 virtio,bridge=vmbr0 --scsihw virtio-scsi-single \
  --serial0 socket --vga serial0 --agent enabled=1
qm set 9000 --scsi0 local-lvm:0,import-from=local:import/rocky-linux-10-10.2-20260525.0-x86_64.qcow2,discard=on
qm set 9000 --ide2 local-lvm:cloudinit --boot order=scsi0 \
  --ciuser rocky --sshkeys ~/.ssh/id_ed25519.pub --ipconfig0 ip=dhcp
qm template 9000

In the web UI: Datacenter > Storage, edit local and add Import to its content; then on that storage, Import > Download from URL with the URL above and the SHA-256 checksum, and pick the downloaded file as the import source when adding the VM disk. On Proxmox VE 8, download the file with wget and use import-from=/root/rocky-linux-10-10.2-20260525.0-x86_64.qcow2 instead.

Verify before booting

cosign 2.x / 3.x
curl -fLO https://images.openimages.cloud/rocky-linux-10/10.2-20260525.0/rocky-linux-10-10.2-20260525.0-x86_64.qcow2
curl -fLO https://images.openimages.cloud/rocky-linux-10/10.2-20260525.0/rocky-linux-10-10.2-20260525.0-x86_64.qcow2.bundle

cosign verify-blob rocky-linux-10-10.2-20260525.0-x86_64.qcow2 \
  --bundle rocky-linux-10-10.2-20260525.0-x86_64.qcow2.bundle --new-bundle-format \
  --certificate-identity-regexp '^https://github.com/open-img-cloud/\.github/\.github/workflows/build-(libguestfs|dib|nix-flake|freebsd)-image\.yml@' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Expect Verified OK. Details in the verification guide.

Keep images up to date

Automation should not scrape this page. The catalog index lists the latest version of every image with versioned URLs, SHA-256 and SHA-512 digests, sizes, firmware and the cosign identity; the version history of this image lists every published release. OpenStack operators using openstack-image-manager can point it at the ready-made definitions:

osism openstack-image-manager
curl -fsSo oic-images.yml https://images.openimages.cloud/osism/images.yml
openstack-image-manager --cloud admin --images oic-images.yml --latest

About

Cloud-init-ready, signed Rocky Linux 10 qcow2 image built from the official Rocky GenericCloud release, verified against the upstream checksum list. Like RHEL 10 it needs an x86-64-v3 CPU (Haswell or newer) exposed by the hypervisor CPU model.

  • openstack
  • proxmox
  • cloud-init
  • signed
  • rhel-compatible