Paid production AMI from Software Sushi that packages NVIDIA OpenShell v0.1.2 on Ubuntu 24.04 ARM64 with hardening, first-boot identity, a local mTLS gateway and support contact.
This is a paid production AMI packaging service from Software Sushi. Additional software charges apply for independent AWS packaging, host hardening, first-boot identity provisioning, a local mutual-TLS gateway, validation, maintenance and setup documentation. OpenShell is Apache-2.0 software authored by NVIDIA; Software Sushi does not claim NVIDIA authorship, endorsement or NVIDIA support.
Delivered Marketplace version title: 0.3.3-openshell-ubuntu-aws-r6-261006. Installed OpenShell identity: NVIDIA OpenShell v0.1.2 on Ubuntu 24.04 ARM64 with the Docker driver. Run commands and agent workloads in sandboxes governed by explicit policies. The gateway listens on loopback with mutual TLS. Each instance creates its own identity during first boot; no TLS identity, passwords or provider credentials are baked into the image. Runtime images are preloaded. The included customer walkthrough needs no GPU, model-provider keys or inference service.
Customer setup: launch the approved Marketplace version on t4g.medium with at least 32 GiB root storage. Connect as ubuntu through AWS Systems Manager with a minimally privileged instance role, or through SSH restricted to your administrative CIDR. After first boot, run openshell status and bash /opt/sushi/docs/demo.sh. Docker access grants host administration, so gateway users must be trusted administrators. This is a CPU runtime image; it does not include GPU/CUDA, inference models or a MicroVM configuration. Optional model providers and credentials are configured by the customer after launch. Support contact: info@softwaresushi.com.
The primary commercial offer is paid hourly software at USD 0.10 per running t4g.medium instance-hour. An optional seven-day free trial for one concurrent t4g.medium instance changes software billing only; the same installed software remains available before and after the trial and converts to the paid hourly offer when the trial ends. This is not a trial-only, beta, alpha, preview or evaluation edition, and there is no product-imposed software expiry that removes the installed capability. Additional concurrent instances incur software fees. EC2 compute, EBS, data transfer and optional model-provider costs are billed separately, including during the software trial. New AMI releases do not automatically update running instances.
Highlights
Paid production AMI packaging of OpenShell v0.1.2 with hardening, first-boot identity and a local mTLS gateway.
Policy-controlled Docker sandboxes for command and agent workloads without baked credentials.
Primary paid hourly software offer; optional seven-day free trial changes billing only, not the installed software.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 7 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
You pay one hourly rate for each running instance built on the t4g.medium instance size (Graviton, 2 vCPU, 4 GiB RAM). Billing is usage-based, so charges accrue only while an instance runs. There are no tiers to choose between; the single dimension scales simply by how many hours you run. If you run several instances at once, each is billed separately at the same hourly rate. AWS charges for EC2, storage, and data transfer apart from this software fee. Any model provider you connect bills its own usage.
Top-of-mind questions for buyers
What does the t4g.medium hourly dimension give me in terms of hardware?
The t4g.medium is a Graviton instance with 2 vCPU and 4 GiB RAM. A root volume of at least 32 GiB is recommended. The software runs on this CPU-based image. It does not include GPU, CUDA, inference models, or a MicroVM configuration.
Am I charged the software rate when my instance is stopped?
The software fee accrues per running instance-hour, so a stopped instance does not accrue the software charge. AWS may still bill underlying storage and other resources while an instance is stopped. If you run several instances at once, each one is billed separately at the hourly rate.
What costs are not included in the hourly software price?
The hourly price covers the software only. AWS bills EC2, EBS storage, and data transfer separately. Any model provider you connect after launch charges its own usage. You supply your own agent, provider key, and credentials; none are baked into the image.
docs.softwaresushi.com
Helpful?
Vendor refund policy
We offer a full refund of software charges for the first 48 hours billing starts if the product does not perform as described. To request a refund, email info@softwaresushi.com with your EC2 instance ID and a description of the issue. AWS infrastructure costs (EC2, EBS, data transfer) are billed by AWS and are not eligible for refund by us.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Sushi OpenShell Ubuntu 24.04 ARM64. Launch t4g.medium, connect as ubuntu via SSM or SSH, run openshell status and bash /opt/sushi/docs/demo.sh. Gateway is loopback mTLS.
Additional details
Usage instructions
Launch t4g.medium with at least 32 GiB root storage. Restrict SSH to your administrative CIDR or use an SSM instance role. Connect as ubuntu; run openshell status and bash /opt/sushi/docs/demo.sh. The gateway uses loopback and per-instance mTLS.
Software Sushi provides AMI packaging and setup guidance at info@softwaresushi.com. Include the product/version, sanitized reproduction steps and error category; do not send credentials, private configuration, session keys or customer content. Guaranteed response times require a separate agreed arrangement. NVIDIA support and model-provider credits are not included.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Deploy autonomous AI agents and multi-agent workflows on Amazon Bedrock using Bedrock Agents, Knowledge Bases, AWS Lambda, Amazon OpenSearch Service, and AWS Step Functions with enterprise-grade security, governance, and operational support.
VAREK checks every action an AI agent attempts against your policy before it runs. Only SATISFIED actions execute; everything else is refused at the Linux kernel boundary.
OpenHands Core with local Agent Canvas, Python terminal/Git and a private Telegram adapter. Customer cloud-model credentials are required after launch.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.