Catalog / CI/CD & workflow orchestration

Temporal

Durable execution platform for reliable workflows and microservice orchestration

CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside

Availability and pricing
CloudVersionSoftware priceLast build
AWS Marketplace
EC2 AMI · all commercial regions
1.32.1$0.05/hr
Recommended instance: t3.large · 5-day free trial
2026-10-23Listing ↗
Azure Marketplace
VM image · plan payg-gen2 · Gen2
1.32.0$0.028/vCPU/hr
Recommended VM: Standard_D2s_v3
2026-09-17Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts
Base OSUbuntu 24.04 LTS
HardeningCIS Level 1, Ubuntu 24.04 LTS (tailored)
LicenseMIT
UpstreamTemporal Technologies Inc.
Machine-readableproduct.json · catalog.json
What is Temporal

Temporal is an open-source durable execution platform for orchestrating long-running, fault-tolerant application workflows. Developers write workflows and activities as ordinary code (with Go, Java, Python, TypeScript, .NET, and PHP SDKs) and the Temporal Server guarantees they run to completion despite process crashes, restarts, or infrastructure failures - persisting every step and driving automatic activity retries, durable timers, signals, queries, schedules, and child workflows. The server is written in Go and runs four services (frontend, history, matching, worker); a separate Web UI provides workflow visibility, search, and history inspection. This image bundles a local PostgreSQL for event history and advanced (searchable) visibility, so the whole platform runs on one instance with no external dependencies. MIT license - a self-hosted durable workflow engine with no per-action fees and no vendor lock-in.

What the Lynxroute image adds

Security hardening:

  • Unique Web UI admin password and PostgreSQL password generated per instance at first boot
  • Web UI gated by an nginx TLS reverse proxy with HTTP Basic Auth; TLS terminated on 443
  • gRPC frontend (port 7233) bound to 127.0.0.1 only - never exposed; attach VPC workers explicitly
  • Bundled PostgreSQL bound to 127.0.0.1 only
  • UFW firewall - ports 22 (SSH) and 443 (HTTPS) only
  • fail2ban, AppArmor
  • CVE scan - every image is scanned for vulnerabilities before release

OS hardening (CIS Level 1):

  • CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
  • auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

  • SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
  • CIS Conformance Report at /etc/lynxroute/cis-report.html
  • CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Deploy

Launch in one command

Credentials are generated at first boot and written to /root/temporal-credentials.txt.

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-a5vehjmtlbfww/latest \
  --instance-type t3.large --key-name my-key --security-group-ids sg-xxxxxxxx
# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer temporal --plan payg-gen2
az vm create -g my-rg -n temporal --size Standard_D2s_v3 \
  --image lynxroute:temporal:payg-gen2:latest --admin-username azureuser --generate-ssh-keys
Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Temporal 1.32.1

AWS · 2026-10-23
  • Temporal Server updated 1.32.0 -> 1.32.1, a bugfix release with no schema changes. MIT unchanged
  • Fixes task-queue user-data preservation, standalone activity routing and fair-task garbage collection
  • Temporal CLI remains at 1.9.1
  • Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build