Azure Linux 4.0 is Microsoft’s first general-purpose Linux

Sign in<br>Subscribe

Microsoft shipped Azure Linux 4.0 into public preview at Build 2026, and for the first time you can run it on any Azure virtual machine, not just as the host underneath Azure Kubernetes Service. That sounds like a small distinction. But, this is the moment Microsoft's in-house Linux stops being a special-purpose appliance distro and becomes a general-purpose Linux distro.<br>I have been following this distribution since before it had a marketing name. So let me put 4.0 in context...<br>What I keep on about<br>Microsoft has built more than one Linux distribution. Back in February 2022 I went looking through Microsoft's package mirrors and found CBL-Delridge, a Debian-based distro that powered Azure Cloud Shell. It was never announced. Mary Jo Foley wrote it up at ZDNet after reading that post. By November 2022, Delridge was 404: its apt repository went dark and Cloud Shell moved to Microsoft's other Linux: CBL-Mariner.<br>CBL stands for Common Base Linux, a whole family of internal distros named after Seattle geography. Delridge was the Debian one. Mariner was an RPM one, built from scratch with spec files borrowed from Photon OS, Fedora, and Linux From Scratch. Mariner is the one that survived. In March 2024 Microsoft renamed it Azure Linux and renamed the GitHub repository to match.<br>So when I say Azure Linux, I mean the distribution that started internal development in September 2019, went public on GitHub in November 2020, hit 2.0 in April 2022, and has been the container host for AKS since 2023. None of that history was aimed at you running it on your own VM.<br>That is what changes now.<br>What is actually new in 4.0<br>Azure Linux 4.0 is derived from Fedora, right now a Fedora 43 snapshot, rather than assembled package by package the way 1.0 through 3.0 were. Microsoft no longer maintains every spec file by hand. Instead it tracks Fedora upstream and applies declarative overlays, where every deviation from Fedora carries a written description of why it exists. The rendered spec files are checked into the repository so you can read exactly what Microsoft changed and why.<br>The component stack moved up accordingly:<br>Kernel 6.18 LTS , Azure-tuned, with the Hyper-V integration and GPU and AI accelerator support you would expect from an Azure cloud kernel. Microsoft maintains its own kernel fork and embeds its signing keys directly in the build.<br>dnf5 replaces tdnf, Microsoft's lean C reimplementation of dnf inherited from Photon OS. This is the single most user-visible change. You now get standard dnf5 tooling and the full plugin ecosystem instead of a Microsoft-specific package manager.<br>glibc 2.42 , systemd 258 , OpenSSL 3.5 (with post-quantum cryptography support), Python 3.14 , and RPM 6.0 with a modernized database backend and stronger signature verification.<br>FIPS 140-3 certification is in progress and slated for general availability.<br>Security is solid. SELinux is supported on every image, the kernel ships with hardening turned on (ASLR, stack protection, seccomp, and systemd service sandboxing), packages and repositories are cryptographically signed, and Microsoft publishes SBOMs for the supply chain.<br>Why this is the next step<br>Here is the part that matters. For most of its life, Azure Linux was infrastructure you ran on without knowing it. It was the host OS for AKS nodes, the base image for Microsoft's own first-party services, the system distro that hosts WSLg. You did not pick it. It was underneath the thing you picked.<br>Azure Linux 4.0 is built to be picked. It runs across every Azure compute surface:<br>Virtual machines and scale sets , deployable straight from the Azure Marketplace with no additional OS licensing cost.<br>Containers , with base, distroless, and language-runtime images on the Microsoft Container Registry, built from the same supply chain as the VM images.<br>AKS , where it has been the container host since 2023, now joined by Azure Container Linux, a Flatcar-based immutable variant that shares the same kernel for stricter compliance environments.<br>WSL , so you can develop locally on the same Linux you deploy to production with wsl --install -d AzureLinux (soon, go try it on Azure first) .<br>Databricks migrated more than 100,000 VMs and over a million CPU cores to Azure Linux. LinkedIn moved its infrastructure to Azure Linux. Azure Linux already runs behind AKS, Azure SQL, and Cosmos DB. The 4.0 preview takes that and gives it to everyone else.<br>What makes Azure Linux different<br>There are a lot of cloud Linux distributions. Amazon has Amazon Linux. The Flatcar and CoreOS lineage offers immutable container hosts. Ubuntu and RHEL run nearly everywhere. So what is distinct here?<br>A few things stand out:<br>The supply chain is auditable by design. Building on Fedora with declarative overlays means every change from upstream is documented in the repository. That is a stronger story than most distributions can tell about what is in their packages and...