Sold by: Penni Tech LLC
Deployed on AWS
This is a repackaged open source software product wherein additional charges apply for security hardening of the operating system and deployment, HTTPS enabled by default with a certificate generated on each instance, per-instance secret generation with a one-time first-login credential that you change on first sign-in, automatic operating system security updates, and a set of operator commands for status, logs, backup, restore and upgrade.
Overview
linkding is an open source, self-hosted bookmark manager. Save links with tags and notes, search and filter them, and work with them through its web interface or its REST API.
linkding itself is open source software under the MIT licence. This image adds the following engineering by Penni Tech LLC:
SECURITY HARDENING. SSH password authentication is disabled, password-based root login is disabled and the root account is locked. The image contains no authorized keys, no default passwords and no hardcoded secrets of any kind. linkding stores its data in an embedded SQLite database, so there is no database server and no database port; the application binds only to localhost behind the reverse proxy. Exactly three ports listen externally: 22, 80 and 443.
HTTPS BY DEFAULT. An nginx reverse proxy, installed from the Amazon Linux 2023 repository, terminates TLS on port 443 and redirects port 80 to it. A self-signed certificate is generated on your own instance at first boot. Modern security headers, including HSTS, are set by the proxy, and the proxy does not advertise its version.
PER-INSTANCE SECRETS. At first boot, and only at first boot, the instance generates its own administrator password from the kernel random source. It is unique to your instance and does not exist in the image. The administrator credential is written to a root-only file for you to retrieve over SSH, is intended to be used exactly once, and should be changed by you at first sign-in, in linkding's own settings.
AUTOMATIC OPERATING SYSTEM SECURITY UPDATES. The image applies security updates to Amazon Linux 2023 automatically, and because nginx is an Amazon Linux package rather than a container, those updates cover it too. The application container is deliberately NOT auto-updated: it is built from the upstream linkding 1.47.0 image pinned by SHA256 digest plus a layer of Debian and Python security updates, with pip removed from the final image, so your deployment cannot silently change underneath you. You rebuild or move versions when you choose, with the included upgrade command.
OPERATOR TOOLING. Five commands are installed and documented: linkding-status, linkding-logs, linkding-backup, linkding-restore and linkding-upgrade. Backup produces a single archive containing the application data, including the SQLite database, and the instance environment; restore reverses it; upgrade takes a backup first and keeps the previous configuration so you can roll back.
REPRODUCIBLE, SCANNED BUILD. The image is built with Packer from the Amazon Linux 2023 base image published by AWS. nginx and Docker come from the signed Amazon Linux repository; every other bundled binary is verified against its published SHA256 checksum. The build is scanned with Trivy and will not produce an image if the host operating system, including nginx, or the application container has a critical or high severity vulnerability for which a fix exists. The scan of this release found no fixable vulnerabilities in either the host or the application container. The licence and copyright notices of all bundled software are preserved under /usr/share/licenses.
This is an independent repackaging. Penni Tech LLC is not affiliated with the linkding project.
Highlights
- HTTPS on port 443 by default, using a self-signed certificate generated on your own instance at first boot, with HTTP redirected to HTTPS.
- The administrator password is generated on your instance at first boot and is unique to it. The image contains no hardcoded credentials, no default passwords and no authorized SSH keys.
- Five documented operator commands for status, logs, backup, restore and upgrade, with the application container built from an upstream image pinned by SHA256 digest.
Details
Sold by
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
AmazonLinux 2023
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.05 |
t3.large | $0.05 |
t3.xlarge | $0.05 |
m6i.large | $0.05 |
m6i.xlarge | $0.05 |
Vendor refund policy
No refunds. Subscriptions can be cancelled at any time.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release: linkding 1.47.0 on Amazon Linux 2023 behind an nginx 1.30.5 reverse proxy with HTTPS by default, a per-instance administrator password for one-time first login, automatic operating system security updates, and operator commands for status, logs, backup, restore and upgrade. The application container is pinned by SHA256 digest and carries additional Debian and Python security updates.
Additional details
Usage instructions
LAUNCH
- Subscribe, then launch from the AWS Marketplace website or EC2 console.
- Choose an EC2 key pair; you need it to retrieve your first-login password over SSH.
- Security group: 443/tcp required (the application); 80/tcp optional (redirects to HTTPS); 22/tcp needed once to retrieve the credential, restrict it to your own address. No other port is needed; the application listens only on localhost. Automatic security updates need outbound HTTPS (443) to the Amazon Linux repositories; keep the default outbound rule.
- Wait about two minutes for first-boot configuration.
FIRST LOGIN (CREDENTIAL CHANGE REQUIRED) SSH in as ec2-user and run: sudo cat /root/linkding-credentials.txt It holds the URL, the admin username (admin) and a password generated on your instance at first boot (root-only file). Browse to https://<instance-public-dns>/ and sign in; the certificate is self-signed, so expect a browser warning. Then change the password: open https://<instance-public-dns>/change-password/ (also under Settings).
YOUR OWN TLS CERTIFICATE sudo install -m 0644 fullchain.pem /etc/pki/nginx/server.crt sudo install -m 0600 privkey.pem /etc/pki/nginx/private/server.key sudo systemctl reload nginx If you serve linkding on your own domain, add https://your.domain to LD_CSRF_TRUSTED_ORIGINS (comma-separated) in /etc/linkding/linkding.env and run: sudo systemctl restart linkding
COMMANDS linkding-status: services, container, listening ports, certificate, disk. linkding-logs [-f] [nginx|--system]: logs. sudo linkding-backup [dir]: briefly pauses linkding for a consistent copy, then writes one tar.gz with app data (including the SQLite database) and env file (contains secrets, mode 0600; default /var/backups/linkding). sudo linkding-restore <archive> [--keep-env]: restore; destructive, prompts first. sudo linkding-upgrade [image:tag@sha256:...]: backs up, then rebuilds the app image with current security updates or moves to a new pinned release; keeps the previous Dockerfile for rollback.
WHERE DATA LIVES /etc/linkding/linkding.env: per-instance secrets and settings (root-only, SENSITIVE) /var/lib/linkding/data: application data, including the SQLite database /opt/linkding: container definition and Dockerfile /etc/nginx/nginx.conf: proxy and TLS config /etc/pki/nginx: TLS certificate and private key (key SENSITIVE) /usr/share/doc/linkding/README.md: full documentation on the instance
ENCRYPTION AND KEYS The root EBS volume is unencrypted, as Marketplace requires; enable EBS encryption at launch if needed. The only cryptographic material is the self-signed TLS key and certificate in /etc/pki/nginx, generated at first boot. To rotate: delete both files and /var/lib/linkding/.firstboot-complete, run sudo systemctl start linkding-firstboot, then sudo systemctl reload nginx.
EXTERNAL SERVICES None are required. When you add a bookmark, linkding fetches that page over HTTPS to read its title and description, so that feature needs outbound internet access. Optional per-user features (favicons, Internet Archive snapshots) also call out to those services when enabled.
HEALTH Run linkding-status, and check the instance's Status checks tab in the EC2 console.
QUOTAS The product uses one EC2 instance and its root EBS volume and creates no other AWS resources; raise EC2 quotas in the Service Quotas console if needed.
COST EC2, EBS, data transfer and the hourly software fee.
UPGRADING In place: sudo linkding-upgrade. To a new instance: linkding-backup on the old one, then linkding-restore <archive> --keep-env on the new one.
BUNDLED SOFTWARE linkding 1.47.0 (MIT); nginx 1.30.5 (BSD-2-Clause); Docker Compose 5.6.0 (Apache-2.0); Docker Engine 25.0.16 (Apache-2.0); Amazon Linux 2023. nginx and Docker are Amazon Linux packages. Licences are in /usr/share/licenses.
SUPPORT info@penni-tech.com , best effort within 2 business days.
Support
Vendor support
Email support at info@penni-tech.com , best effort response within 2 business days.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This is a repackaged open source software product wherein additional charges apply for security hardening of the operating system and deployment, HTTPS enabled by default with a certificate generated on each instance, per-instance secret generation with a one-time first-login credential that you change on first sign-in, automatic operating system security updates, and a set of operator commands for status, logs, backup, restore and upgrade.
Automated backup and instant recovery for SaaS applications: GitHub, GitLab, Jira, Confluence, Trello, Notion, and Shopify. Setup in minutes with no scripting. Daily automated backups, 256-bit AES encryption, data residency options (US/UK/EU/AU). ISO 27001, SOC2, GDPR & HIPAA compliant. Built on AWS.
Self-hosted backup solution for Microsoft 365
MSP360 Backup is an easy-to-use backup and disaster recovery solution developed with a security first approach. Utilzing Object Lock technology, your backup data is secured against even the most advanced ransomware attacks.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.