AZURE ARC · HYBRID GOVERNANCE
Hybrid governance as code — at $0/month.
Onboard 2 on-premises Ubuntu servers to Azure Arc, then layer on patching, compliance, tagging and RBAC with free Azure services — every layer reproduced from infrastructure as code.
Last refreshed: Sep 16, 2026, 4:14 PM
Arc machines
2
Connected
Azure Policies
3
assigned
Monthly cost
$0
$2 budget alert
Lynis index
71
hardening score
Arc machines
Live inventory from the snapshot.
| Name | Status | OS | Tags |
|---|---|---|---|
| vm-01 | Connected | Ubuntu 22.04 LTS | env=lab |
| vm-02 | Connected | Ubuntu 22.04 LTS | — |
Milestones
M0–M7 complete · M8 this site · M9 next.
Local environment
2 × Ubuntu 22.04 arm64 (Multipass)
Arc onboarding
azcmagent → Azure Arc
Terraform IaC
RG + tags + workspace
Azure Policy
3 policies (tag / region / AMA)
Update Manager
patch assessment + schedule
Log Analytics
AMA + scoped DCR
CI/CD
GitHub Actions (OIDC)
Security audit
Lynis + Ansible CIS
Presentation site
this site (Azure Static Web Apps)
Hybrid networking
Tailscale + Azure VM