Hardened Node.js 22 on CentOS Stream 9

This product provides Node.js 22 with npm, gcc, make, Python 3, and Git pre-integrated on CentOS Stream 9. Hanwei delivers the environment as an Amazon Machine Image (AMI) with a security-hardening baseline, optimized performance configuration, a reduced package and service footprint, and automatic operating-system security updates through dnf-automatic.

Marketplace software charges cover Hanwei's integration of the Node.js runtime and native-module build toolchain; application of the CentOS security-hardening and optimized performance baseline; operating-system minimization and update configuration; and AMI construction. Hanwei support is supplementary and is not the sole basis for the software charges.

As of this listing revision, Node.js 22 is in Maintenance LTS and is planned to reach upstream End-of-Life on April 30, 2027. Customers remain responsible for monitoring the upstream lifecycle and migrating to a supported Node.js release before support ends. Operating-system security updates do not upgrade the Node.js major version or extend its upstream lifecycle.

• Runtime and build-tool integration: Node.js 22 and npm are installed with gcc, make, Python 3, and Git to support application deployment and npm packages that compile native extensions.
• Reduced operating-system footprint: The AMI is prepared from a minimal CentOS Stream 9 installation, with unnecessary services and packages removed. Customers should confirm that the resulting package set supports their application and operational requirements.
• Security-hardening baseline: SELinux runs in enforcing mode. SSH uses key-pair authentication and does not accept password authentication. The standardized CentOS baseline also configures audit logging and kernel security controls.
• Optimized performance configuration: The standardized CentOS profile raises the file-descriptor limit from 1,024 to 65,536 and the memory-map ceiling from 65,530 to 262,144. The device receive backlog is raised from 1,000 to 16,384, the TCP SYN backlog from 128 to 8,192, socket buffer maxima are set to 16 MB, TCP congestion-window state is retained across idle periods, and the system journal is capped at 500 MB.
• Automatic operating-system security updates: dnf-automatic is enabled for the configured operating-system repositories. Customers should review its repositories, schedule, package scope, restart behavior, and operational impact after launch.
• Build-date package baseline: CentOS packages are prepared at versions available from the configured repositories when the image is built. Customers remain responsible for reviewing and applying updates after launch.