Availability and pricing

Cloud	Version	Software price	Last build
AWS Marketplace EC2 AMI · all commercial regions	9.2.0	$0.05/hr Recommended instance: t3.medium · 5-day free trial	2026-10-23	Listing ↗
Azure Marketplace VM image · plan payg-gen2 · Gen2	9.2.0	$0.028/vCPU/hr Recommended VM: Standard_D2s_v3	2026-10-24	Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts

Base OS	Ubuntu 24.04 LTS
Hardening	CIS Level 1, Ubuntu 24.04 LTS (tailored)
License	OSL-3.0
Upstream	PrestaShop SA
Machine-readable	product.json · catalog.json

What is PrestaShop

PrestaShop is a leading open-source eCommerce platform for building and running online stores - a PHP 8 web application served by Nginx with PHP-FPM and backed by MySQL 8. The bundled feature set covers product catalog and category management, customer accounts, shopping cart and one-page checkout, order and invoice management, promotions and vouchers, multi-currency and multi-language storefronts, SEO-friendly URLs, a customizable responsive storefront theme, a REST/webservice API, and a full back office for merchandising, shipping, payment, and tax configuration - extensible through a native module ecosystem. This image ships the open-source core only (OSL-3.0 core, AFL-3.0 modules and themes) with its bundled native modules and the default storefront theme; it includes nothing from the commercial PrestaShop Addons marketplace or PrestaShop Checkout. A self-hosted alternative to hosted store builders that keeps your catalog, orders, and customer data inside your own AWS account. OSL-3.0 license - no per-store fees, no vendor lock-in.

What the Lynxroute image adds

Security hardening:

Store installed at first boot with generated admin credentials (saved to /root/prestashop-credentials.txt)
Web installer removed and the admin (back office) folder randomized per instance after setup
TLS enabled by default (self-signed); Certbot pre-installed - trusted HTTPS with Let's Encrypt in one command
MySQL 8 database bound to 127.0.0.1 only
UFW firewall - ports 22 and 443 only
fail2ban, AppArmor
CVE scan - every image is scanned for vulnerabilities before release

OS hardening (CIS Level 1):

CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
CIS Conformance Report at /etc/lynxroute/cis-report.html
CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md

Deploy

Launch in one command

Credentials are generated at first boot and written to /root/prestashop-credentials.txt.

AWS CLIAzure CLI

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-ik3f7vshwmvuk/latest \
  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx

# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer prestashop --plan payg-gen2
az vm create -g my-rg -n prestashop --size Standard_D2s_v3 \
  --image lynxroute:prestashop:payg-gen2:latest --admin-username azureuser --generate-ssh-keys

Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

PrestaShop 9.2.0 r2

AWS · 2026-10-23Azure · 2026-10-24

Security: fixes PHP2Shell (CVE-2026-109618, CVE-2026-109619), an unauthenticated remote code execution flaw in PHP, by shipping Ubuntu php8.3 8.3.6-0ubuntu0.24.04.13 (USN-8948-1). Every earlier image of this product carries the vulnerable PHP; replace running instances or run: sudo apt-get update && sudo apt-get install --only-upgrade "php8.3*"
The application version is unchanged (PrestaShop 9.2.0); this is a security rebuild
Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com
Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build