{
 "slug": "wildfly",
 "name": "WildFly",
 "tagline": "Jakarta EE application server in standalone mode",
 "category": "api-app-server",
 "use_cases": [
  "jakarta-ee",
  "java-ee",
  "enterprise-java"
 ],
 "aliases": [
  "jboss application server"
 ],
 "status": "live",
 "upstream": {
  "vendor": "WildFly",
  "url": "https://www.wildfly.org",
  "license": "LGPL-2.1",
  "license_url": "https://github.com/wildfly/wildfly/blob/main/LICENSE.txt"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "restricted",
   "restricted_on": "2026-08-24"
  },
  "azure": {
   "status": "live",
   "version": "41.0.1.Final",
   "last_build": "2026-09-06",
   "offer_id": "wildfly",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:wildfly:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.wildfly?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/wildfly/",
  "json": "https://lynxroute.com/products/wildfly/product.json"
 },
 "release_notes": [
  {
   "version": "41.0.0.Final",
   "title": "WildFly 41.0.0.Final - July 2026",
   "notes": "* WildFly 41.0.0.Final on Ubuntu 24.04 LTS - version bump from 40.0.1.Final\n* Standalone mode, non-root service user, explicitly sized JVM heap\n* nginx TLS perimeter on 443; application (8080) and management (9990) bound to localhost\n* Certbot pre-installed for a trusted HTTPS certificate: sudo certbot --nginx\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n* CVE-scanned before every release\n",
   "source": "backfill-aws-listing",
   "live": {
    "azure": "2026-07-22"
   }
  },
  {
   "version": "40.0.0.Final",
   "title": "WildFly 40.0.0.Final - Initial release (June 2026)",
   "notes": "* WildFly 40.0.0.Final on Ubuntu 24.04 LTS\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Standalone mode, non-root service user, explicitly sized JVM heap\n* Random management admin user generated at first boot\n* nginx TLS perimeter on 443; application (8080) and management (9990) bound to localhost\n* UFW firewall pre-configured (ports 22, 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {}
  }
 ],
 "release_history": [
  {
   "version": "41.0.1.Final",
   "azure": "2026-09-06"
  },
  {
   "version": "41.0.0.Final",
   "azure": "2026-07-22"
  }
 ],
 "deploy": {
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer wildfly --plan payg-gen2\naz vm create -g my-rg -n wildfly --size Standard_D2s_v3 \\\n  --image lynxroute:wildfly:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "WildFly is an open-source Jakarta EE 10 application server written in Java, the community successor to JBoss Application Server. It runs WAR and EAR applications and implements the full Jakarta EE web and platform profiles: servlets and JSP, JAX-RS REST services, WebSocket, CDI, JPA/Hibernate, Bean Validation, JTA transactions, JMS messaging (ActiveMQ Artemis), and Jakarta Security. It ships a modular, fast-booting runtime with a web management console, a scriptable jboss-cli, a deployment scanner for drop-in deployments, and datasource/connection-pool management. This image runs WildFly in standalone mode with an explicitly sized JVM heap. WildFly is wholly community open source under LGPL-2.1 - distinct from the commercial JBoss EAP - with no open-core feature gating and no vendor lock-in.",
  "image_adds": "Security hardening:\n* Standalone mode with a non-root service user and an explicitly sized JVM heap (-Xms/-Xmx)\n* Random management admin user generated at first boot (add-user), written to /root/wildfly-credentials.txt (root-only)\n* nginx TLS perimeter on port 443 (self-signed certificate, ready for your own CA cert or Let's Encrypt; certbot pre-installed)\n* WildFly application HTTP (8080) and the management interface (9990) bound to 127.0.0.1 only\n* UFW firewall pre-configured (ports 22 and 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}