Hardened Node.js 22 on Ubuntu 24.04 LTS ARM64

This product provides Node.js 22 with npm, Nginx, PM2, build-essential, Python 3, Git, CA certificates, and curl pre-integrated on Ubuntu 24.04 LTS for the ARM64 architecture. Hanwei delivers the environment as an Amazon Machine Image (AMI) for AWS Graviton-based EC2 instances with security hardening, optimized performance configuration, unattended operating-system security updates, and a reduced service footprint.

Marketplace software charges cover Hanwei's ARM64 integration of the Node.js runtime, reverse-proxy layer, process manager, and native-module build toolchain; application of the security-hardening and optimized performance configuration; operating-system preparation; and AMI construction. Hanwei support is supplementary and is not the sole basis for the software charges.

As of this listing revision, Node.js 22 is in Maintenance LTS and is planned to reach upstream End-of-Life on April 30, 2027. Customers remain responsible for monitoring the upstream lifecycle and migrating to a supported Node.js release before support ends. Operating-system security updates do not upgrade the Node.js major version or extend its upstream lifecycle.

• ARM64 runtime and toolchain integration: Node.js 22 and npm are installed on Ubuntu 24.04 LTS ARM64 with build-essential, Python 3, Git, CA certificates, and curl. The included compiler and build tools support npm packages that compile native ARM64 extensions.
• Reverse-proxy integration: Nginx is included and prepared as the reverse-proxy and web-server layer. Customers remain responsible for configuring domains, TLS certificates, upstream application ports, routes, headers, request limits, and workload-specific proxy behavior.
• Process-management integration: PM2 is included for Node.js process management. It can be configured by customers for cluster mode, restart policies, and log management. Application definitions, environment variables, secrets, process counts, memory limits, startup behavior, and log retention remain customer-controlled.
• Security-hardening baseline: SSH access uses key-pair authentication, password authentication is disabled, and unnecessary services are removed to reduce the delivered operating-system footprint.
• Optimized performance configuration: The Ubuntu ARM64 environment, Nginx reverse-proxy layer, Node.js runtime, and PM2 process-management layer are prepared as an integrated stack for Graviton-based EC2 instances. Customers must validate throughput, latency, concurrency, memory use, process counts, proxy limits, native-module behavior, and scaling for their selected instance type and workload.
• Unattended operating-system security updates: Ubuntu unattended-upgrades is enabled for configured security updates. Customers should review its repositories, schedule, package scope, restart behavior, and operational impact after launch.
• Build-date package baseline: Ubuntu packages are prepared at versions available from the configured repositories when the image is built. Customers remain responsible for reviewing and applying updates after launch.