Availability and pricing

Cloud	Version	Software price	Last build
Azure Marketplace VM image · plan payg-gen2 · Gen2	41.0.1.Final	$0.028/vCPU/hr Recommended VM: Standard_D2s_v3	2026-09-06	Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts

Base OS	Ubuntu 24.04 LTS
Hardening	CIS Level 1, Ubuntu 24.04 LTS (tailored)
License	LGPL-2.1
Upstream	WildFly
Machine-readable	product.json · catalog.json

What is WildFly

WildFly is an open-source Jakarta EE 10 application server written in Java, the community successor to JBoss Application Server. It runs WAR and EAR applications and implements the full Jakarta EE web and platform profiles: servlets and JSP, JAX-RS REST services, WebSocket, CDI, JPA/Hibernate, Bean Validation, JTA transactions, JMS messaging (ActiveMQ Artemis), and Jakarta Security. It ships a modular, fast-booting runtime with a web management console, a scriptable jboss-cli, a deployment scanner for drop-in deployments, and datasource/connection-pool management. This image runs WildFly in standalone mode with an explicitly sized JVM heap. WildFly is wholly community open source under LGPL-2.1 - distinct from the commercial JBoss EAP - with no open-core feature gating and no vendor lock-in.

What the Lynxroute image adds

Security hardening:

Standalone mode with a non-root service user and an explicitly sized JVM heap (-Xms/-Xmx)
Random management admin user generated at first boot (add-user), written to /root/wildfly-credentials.txt (root-only)
nginx TLS perimeter on port 443 (self-signed certificate, ready for your own CA cert or Let's Encrypt; certbot pre-installed)
WildFly application HTTP (8080) and the management interface (9990) bound to 127.0.0.1 only
UFW firewall pre-configured (ports 22 and 443 only)
fail2ban, auditd, AppArmor pre-configured
CVE scan - every image is scanned for vulnerabilities before release

OS hardening (CIS Level 1):

CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
CIS Conformance Report at /etc/lynxroute/cis-report.html
CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md

Deploy

Launch in one command

Credentials are generated at first boot and written to /root/wildfly-credentials.txt.

Azure CLI

# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer wildfly --plan payg-gen2
az vm create -g my-rg -n wildfly --size Standard_D2s_v3 \
  --image lynxroute:wildfly:payg-gen2:latest --admin-username azureuser --generate-ssh-keys

Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

WildFly 41.0.0.Final - July 2026

Azure · 2026-07-22

WildFly 41.0.0.Final on Ubuntu 24.04 LTS - version bump from 40.0.1.Final
Standalone mode, non-root service user, explicitly sized JVM heap
nginx TLS perimeter on 443; application (8080) and management (9990) bound to localhost
Certbot pre-installed for a trusted HTTPS certificate: sudo certbot --nginx
Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base
CVE-scanned before every release