Supported platforms

Windows and enterprise Linux, on every supported Salt release.

Gardience is verified on real machines, not copied from a vendor support list: every platform below joined a Gardience server and ran the full product, from patching and security hardening to compliance scanning, reboot recovery, and inventory. Mixed fleets on Salt 3006, 3007, and 3008 work side by side.

2016–2025

every Windows Server release, plus Windows 10, and 11

platforms verified: Windows Server and desktop, RHEL, Oracle, Rocky, SUSE, Ubuntu, Debian, Amazon Linux

3006–3008

every supported Salt release: 3006 LTS, 3007, and 3008 LTS

100%

of features verified on every listed platform

On Broadcom's commercial Salt?

Salt 3008 breaks Broadcom's console. Gardience runs on it today.

Broadcom documents that upgrading masters to Salt 3008 cuts them off from its console until a patched plugin is installed by hand on every master (KB 448159), and its Salt product is supported only to October 2028 (KB 413088). Gardience keeps your states, keys, and agents, and moves you to 3008 LTS with no rewrite.

Free migration assessment Why teams switch

Platform support by Salt release

✓ Verified means the platform passed every Gardience feature on a real machine: remote management, compliance scanning, security baseline enforcement, OS patching, reboot, and reconnect, and hardware and software inventory. Gardience server runs Salt 3008 LTS. Last verified 18 October 2026.
* Windows 10 shares its code base with Windows Server 2016 and 2019 (both verified on every check) and was verified live connecting to Gardience and running jobs with the Salt 3008 agent.

Operating system	Salt 3006 LTS (3006.28)	Salt 3007 (3007.15)	Salt 3008 LTS (3008.3)
Windows Server 2025	✓ Verified	✓ Verified	✓ Verified
Windows Server 2022	✓ Verified	✓ Verified	✓ Verified
Windows Server 2019	✓ Verified	✓ Verified	✓ Verified
Windows Server 2016	✓ Verified	✓ Verified	✓ Verified
Windows 11	✓ Verified	✓ Verified	✓ Verified
Windows 10	✓ Verified^*	✓ Verified^*	✓ Verified^*
Ubuntu 24.04 LTS	✓ Verified	✓ Verified	✓ Verified
Ubuntu 22.04 LTS	✓ Verified	✓ Verified	✓ Verified
Ubuntu 20.04 LTS	✓ Verified	✓ Verified	✓ Verified
Debian 12	✓ Verified	✓ Verified	✓ Verified
Debian 11	✓ Verified	✓ Verified	✓ Verified
Red Hat Enterprise Linux 10	✓ Verified	✓ Verified	✓ Verified
Red Hat Enterprise Linux 9	✓ Verified	✓ Verified	✓ Verified
Red Hat Enterprise Linux 8	✓ Verified	✓ Verified	✓ Verified
Oracle Linux 10	✓ Verified	✓ Verified	✓ Verified
Oracle Linux 9	✓ Verified	✓ Verified	✓ Verified
Oracle Linux 8	✓ Verified	✓ Verified	✓ Verified
Rocky Linux 9	✓ Verified	✓ Verified	✓ Verified
Rocky Linux 8	✓ Verified	✓ Verified	✓ Verified
SUSE Linux Enterprise 15 SP6	✓ Verified	✓ Verified	✓ Verified
Amazon Linux 2023	✓ Verified	✓ Verified	✓ Verified

Verification details

The record behind every check mark. Security baseline score is out of 100, before and after Gardience enforced it; updates pending before and after Gardience patched the machine.

Operating system	Salt	Connects	Scan	Baseline score	Baseline	Updates pending	Patch	Reboot	Inventory
Windows Server 2025	3006.28	✓	✓	100	✓	0	✓	✓	✓
Windows Server 2025	3007.15	✓	✓	100	✓	0	✓	✓	✓
Windows Server 2025	3008.3	✓	✓	100	✓	0	✓	✓	✓
Windows Server 2022	3006.28	✓	✓	100	✓	0	✓	✓	✓
Windows Server 2022	3007.15	✓	✓	100	✓	0	✓	✓	✓
Windows Server 2022	3008.3	✓	✓	100	✓	0	✓	✓	✓
Windows Server 2019	3006.28	✓	✓	100	✓	0	✓	✓	✓
Windows Server 2019	3007.15	✓	✓	100	✓	0	✓	✓	✓
Windows Server 2019	3008.3	✓	✓	100	✓	0	✓	✓	✓
Windows Server 2016	3006.28	✓	✓	100	✓	0	✓	✓	✓
Windows Server 2016	3007.15	✓	✓	100	✓	0	✓	✓	✓
Windows Server 2016	3008.3	✓	✓	100	✓	0	✓	✓	✓
Windows 11	3007.15	✓	✓	100	✓	1	✓	✓	✓
Ubuntu 24.04 LTS	3006.28	✓	✓	100	✓	0	✓	✓	✓
Ubuntu 24.04 LTS	3007.15	✓	✓	100	✓	0	✓	✓	✓
Ubuntu 24.04 LTS	3008.3	✓	✓	100	✓	0	✓	✓	✓
Ubuntu 22.04 LTS	3006.28	✓	✓	100	✓	0	✓	✓	✓
Ubuntu 22.04 LTS	3007.15	✓	✓	100	✓	0	✓	✓	✓
Ubuntu 22.04 LTS	3008.3	✓	✓	100	✓	0	✓	✓	✓
Ubuntu 20.04 LTS	3006.28	✓	✓	100	✓	0	✓	✓	✓
Ubuntu 20.04 LTS	3007.15	✓	✓	100	✓	0	✓	✓	✓
Ubuntu 20.04 LTS	3008.3	✓	✓	100	✓	0	✓	✓	✓
Debian 12	3006.28	✓	✓	100	✓	0	✓	✓	✓
Debian 12	3007.15	✓	✓	100	✓	0	✓	✓	✓
Debian 12	3008.3	✓	✓	100	✓	0	✓	✓	✓
Debian 11	3006.28	✓	✓	100	✓	0	✓	✓	✓
Debian 11	3007.15	✓	✓	100	✓	0	✓	✓	✓
Debian 11	3008.3	✓	✓	100	✓	0	✓	✓	✓
Red Hat Enterprise Linux 10	3006.28	✓	✓	43 → 100	✓	323 → 0	✓	✓	✓
Red Hat Enterprise Linux 10	3007.15	✓	✓	43 → 100	✓	323 → 0	✓	✓	✓
Red Hat Enterprise Linux 10	3008.3	✓	✓	43 → 100	✓	323 → 0	✓	✓	✓
Red Hat Enterprise Linux 9	3006.28	✓	✓	43 → 100	✓	275 → 0	✓	✓	✓
Red Hat Enterprise Linux 9	3007.15	✓	✓	43 → 100	✓	275 → 0	✓	✓	✓
Red Hat Enterprise Linux 9	3008.3	✓	✓	86 → 100	✓	274 → 0	✓	✓	✓
Red Hat Enterprise Linux 8	3006.28	✓	✓	100	✓	0	✓	✓	✓
Red Hat Enterprise Linux 8	3007.15	✓	✓	71 → 100	✓	0	✓	✓	✓
Red Hat Enterprise Linux 8	3008.3	✓	✓	100	✓	0	✓	✓	✓
Oracle Linux 10	3006.28	✓	✓	57 → 100	✓	223 → 0	✓	✓	✓
Oracle Linux 10	3007.15	✓	✓	57 → 100	✓	223 → 0	✓	✓	✓
Oracle Linux 10	3008.3	✓	✓	57 → 100	✓	223 → 0	✓	✓	✓
Oracle Linux 9	3006.28	✓	✓	57 → 100	✓	81 → 0	✓	✓	✓
Oracle Linux 9	3007.15	✓	✓	57 → 100	✓	81 → 0	✓	✓	✓
Oracle Linux 9	3008.3	✓	✓	57 → 100	✓	81 → 0	✓	✓	✓
Oracle Linux 8	3006.28	✓	✓	57 → 100	✓	78 → 0	✓	✓	✓
Oracle Linux 8	3007.15	✓	✓	57 → 100	✓	78 → 0	✓	✓	✓
Oracle Linux 8	3008.3	✓	✓	57 → 100	✓	78 → 0	✓	✓	✓
Rocky Linux 9	3006.28	✓	✓	86 → 100	✓	0	✓	✓	✓
Rocky Linux 9	3007.15	✓	✓	86 → 100	✓	108 → 0	✓	✓	✓
Rocky Linux 9	3008.3	✓	✓	86 → 100	✓	0	✓	✓	✓
Rocky Linux 8	3006.28	✓	✓	71 → 100	✓	0	✓	✓	✓
Rocky Linux 8	3007.15	✓	✓	71 → 100	✓	0	✓	✓	✓
Rocky Linux 8	3008.3	✓	✓	86 → 100	✓	0	✓	✓	✓
SUSE Linux Enterprise 15 SP6	3006.28	✓	✓	86 → 100	✓	0	✓	✓	✓
SUSE Linux Enterprise 15 SP6	3007.15	✓	✓	86 → 100	✓	0	✓	✓	✓
SUSE Linux Enterprise 15 SP6	3008.3	✓	✓	86 → 100	✓	0	✓	✓	✓
Amazon Linux 2023	3006.28	✓	✓	86 → 100	✓	0	✓	✓	✓
Amazon Linux 2023	3007.15	✓	✓	86 → 100	✓	0	✓	✓	✓
Amazon Linux 2023	3008.3	✓	✓	86 → 100	✓	0	✓	✓	✓

Master and agent versions

Salt master	Agent 3006.28 (LTS)	Agent 3006.9 (LTS, old patch)	Agent 3007.15	Agent 3008.3 (LTS)
3008.3 (Gardience default)	Works	Refused at sign-in	Works	Works
3006.9	Agent newer than master: not supported	Works	Not supported	Not supported

Upgrade old 3006 agents before or right after the master. Salt 3008 masters require a newer agent sign-in protocol by default, a protection against downgrade attacks. Agents on 3006.9 are refused until upgraded; 3006.28 and 3007.15 connect normally.
Never let an agent be newer than its master. Salt does not support it. Gardience pins the agent and its patching never upgrades it.
3007 is a short-term release. Its active support ended in June 2026. It works with Gardience, but plan a move to 3008 LTS.
Support windows: 3006 LTS gets security fixes to June 2027; 3008 LTS gets active support to June 2027 and security fixes to June 2028 (Salt lifecycle).
Debian 11 is past end of life. Salt's install script refuses it, so install the agent from Salt's package repository (the Gardience enrollment guide shows how). Gardience itself works on it, as the table shows.

Running something not listed?

Tell us the operating system and Salt version. We run the same checks on it and send you the results, usually within two business days.

Request a compatibility run Try it on your own machines

How the test works: the launcher and checks are in the Gardience source (tools/tests/aws/matrix-launch.sh and matrix-test.py). Every machine joins one Gardience server; every check goes through the product, the way an operator would use it.