Docker on Ubuntu 26 Hardened
Addressed security gaps and documentation challenges while meeting compliance and reducing setup time
What is our primary use case?
My main use case for Docker on Ubuntu 20.04 LTS is that we deployed Docker on Ubuntu 26 Hardened x86-64 from AWS Marketplace as our base AMI for all our backend microservices. As a software engineer, we needed a CIS hardened, secure Ubuntu image with Docker pre-configured to meet our compliance requirements. We currently run about 15 Docker containers per EC2 instance for our e-commerce platform APIs, background workers, and cron jobs. This image saved us time in hardening Ubuntu ourselves, helped us pass our internal security audit much faster since it comes pre-hardened and with Docker already installed and configured, and reduced our developers' setup time from two days to less than two hours per environment. It provides a secure foundation with a minimal attack surface, has automatic security updates configured, and Docker optimized for Ubuntu 26. We saw a 35% reduction in vulnerabilities compared to our previous vanilla Ubuntu plus manual Docker install, and it also integrates perfectly with AWS ECS and our GitHub Actions CI/CD pipeline.
A specific project where using the pre-hardened Docker on Ubuntu 20.04 LTS image really made our work easier was when we had a legacy monolithic older system running directly on Ubuntu 22.0 EC2 instances, where every deployment was manual, took two hours, and often broke because of dependency issues with Node.js 18, Python 3.11, and Redis PostgreSQL client conflicts. Our security team flagged 12 high severity vulnerabilities on the host OS, and we were failing our SOC 2 audit because the OS was not hardened.
What is most valuable?
The best features Docker on Ubuntu 20.04 LTS offers include security hardened by default, a Docker optimized kernel, fast and clean boot, and very seamless AWS integration.
The security hardening by default is the first feature that I really love about Docker on Ubuntu 20.04 LTS. It comes with CIS level one hardening, unnecessary ports closed, SSH hardened, automatic kernel live patching enabled, and Docker daemon configured with TLS and secure defaults. We do not have to run any Ansible hardening playbooks anymore. I also love the AWS integrations because it works perfectly with AWS SSM, CloudWatch agent, and IAM roles, allowing us to manage the Docker host without SSH using SSM Session Manager, which is now more secure.
Docker on Ubuntu 20.04 LTS has positively impacted my organization by saving time; we previously spent 16 engineering hours per environment to harden Ubuntu and install secure Docker, and now with this Marketplace AMI, it takes just 20 minutes. For five environments, we saved over 75 hours of DevOps work, amounting to approximately $4,500 in engineering cost saved. Security has also improved, reducing the need to hire an external consultant for hardening and auditing our Docker host, which would have cost around 3 to 5K. This hardened image meets 80% of our SOC 2 checklist, making audit preparation much faster and resulting in zero security-related incidents or Docker daemon crashes in just four months, compared to two incidents on our old self-configured host, thus reducing downtime and improving customer experience.
What needs improvement?
Docker on Ubuntu 20.04 LTS can be improved in terms of documentation, as it is very limited and lacks a clear guide on what hardening was applied.
The limited documentation has negatively affected my team, as new users find it hard due to the steep learning curve; there is not enough documentation online to guide them on setup or getting things done independently, forcing them to rely on customer support for training, which can be time-consuming.
In addition to documentation, support response from the publisher on AWS Marketplace was slow, taking two days.
For how long have I used the solution?
I have been working in my current field for four years and four months.
What do I think about the stability of the solution?
Docker on Ubuntu 20.04 LTS is extremely stable; we have been running 16 instances in production for four months with zero OS level crashes and an uptime of 99.95%.
What do I think about the scalability of the solution?
The scalability of Docker on Ubuntu 20.04 LTS is excellent; we use it in an auto-scaling group, and new instances with Docker containers came up in under two minutes.
How are customer service and support?
My experience with customer support has been that the customer support from Ubuntu is extremely helpful and responsive, but customer support from AWS Marketplace was a bit slow to respond since they took two days.
Which solution did I use previously and why did I switch?
Before switching to Docker on Ubuntu 20.04 LTS Hardened, we evaluated and used three alternatives, one of which was vanilla Ubuntu 22.04 LTS and another was Amazon Linux 2023 with Docker and AWS ECS with Fargate managed container services.
The main reason we switched from vanilla Ubuntu 22.04 LTS to Docker on Ubuntu 20.04 LTS was that it was slow and inconsistent; every engineer hardened the OS slightly differently, and the script failed 30% of the time due to APT repository issues, leading to us spending 1.5 days per environment just for setup and security audit. We had 12 high vulnerabilities in our last SOC 2 scan because we missed kernel patches, but with Docker on Ubuntu 26 hardened, hardening is already done and verified.
How was the initial setup?
Deploying Docker on Ubuntu 20.04 LTS in my environment is very easy and smooth compared to doing it manually, with just a couple of small learning curves because it is a hardened image.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing was very reasonable and cost-efficient.
I love the transparent pricing with no hidden fees built into our normal AWS bill, the ability to share the AMI with other AWS accounts in our organization after one purchase, and the ease of cancellation, allowing us to unsubscribe anytime from the Marketplace and manage subscriptions. We have also seen improvements in our security and significant savings in time and cost.
What other advice do I have?
I would rate Docker on Ubuntu 20.04 LTS four out of five.
I did not rate it lower; I chose a four instead of a five because if they would expose more documentation, especially online, I would have rated it a five out of five, but since the documentation is very limited, that is why I rate it a four out of five.
One notable feature that sets Docker on Ubuntu 20.04 LTS apart from other solutions I have tried is its clean and intuitive, user-friendly interface that makes it accessible for all types of users.
My advice to others looking into using Docker on Ubuntu 20.04 LTS is that if you are on AWS and need a secure, compliant Docker host quickly without spending weeks hardening Ubuntu 26 yourself, this is the best option. I recommend it for startups and mid-sized companies, and also large companies that need security compliance, but make sure to read the hardening list and test your application as some privileged containers may need extra permissions due to hardening. I have given this product an overall rating of four out of five.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Cross‑OS containers have unified our secure AI workflows and support hybrid deployments
What is our primary use case?
We are working on two different deployments, one based on WSL, which is like Windows WSL, and the other one is Ubuntu. We have a local setup deployment that basically serves as a local AI inference agent based on NVIDIA GPUs, and we use Kubernetes with Docker.
What is most valuable?
First of all, since it is cross-OS, it is very easy for us to do small deployments on edge computers that are using Windows with Ubuntu, and then do the full production on Linux local servers. We use this frequently, and they have made a lot of progress lately with their cross-integrations and WSL integrations and Kubernetes.
A second thing that we really appreciate is that it is very easy for people to understand because it reminds them of the Git workflow, so all the image management is so convenient that people feel they are working with Git. Here they are not managing code; they are managing images.
Since we are doing a cross-compile, we want to decouple it and basically have a constant image for our environment. We are building OS inside OS, and we are using this feature. It allows us to create an independent cross-compile image that is basically decoupled from the host.
For us it is a small tool; it is not a big investment, so we are not tracking the ROI of the product directly, but I can tell you that it gives a lot of useful features and overall the ROI is worth it. Especially, now they have this MCP integration and all management of all MCP servers is in this new feature, and it basically allows you to deploy MCP servers securely because each MCP server is running in a separate Docker. In combination with all those features, the ROI is good.
What needs improvement?
I think the licensing is still confusing. Since it is so easy to install, the licensing remains confusing regarding what is for enterprise and what is for personal use. Basically, you can install it, but then you get a message that this is personal mode, and people are afraid whether they stand with the license or not. The licensing is a little bit confusing.
A second thing is that there is this Docker Hub, and I don't know why, but people say that they have issues with the images that they download there. Personally, we don't really use Docker Hub.
For how long have I used the solution?
We have been using this for many years, maybe five years.
What do I think about the stability of the solution?
In combination with Kubernetes, we don't see any limitations. There is now a composer, so sometimes people use composer, and many now use image composer images.
What do I think about the scalability of the solution?
In combination with Kubernetes, we don't see any limitations.
How are customer service and support?
I don't have something special to report, but I can tell you that it passed our internal CISO review. We are working with top secret data, and we have a Common Criteria regulation that we need to comply with. From a security specification standpoint, it was accepted.
Which solution did I use previously and why did I switch?
I am not sure of its competitors. I switched from working at Intel to a new company. At Intel, we had another solution; I don't remember the exact name, but it was more legacy, and everybody wanted to switch to Docker. It was something parallel to Docker, but eventually it was considered legacy.
How was the initial setup?
It is very easy; it is one of the easiest setups.
What was our ROI?
For us it is a small tool; it is not a big investment, so we are not tracking the ROI of the product directly, but I can tell you that it gives a lot of useful features and overall the ROI is worth it. Especially, now they have this MCP integration and all management of all MCP servers is in this new feature, and it basically allows you to deploy MCP servers securely because each MCP server is running in a separate Docker. In combination with all those features, the ROI is good.
What's my experience with pricing, setup cost, and licensing?
I am not paying for it, but I know that there was no issue. I don't remember the exact number, but comparing it to other costs that we have in other tools and especially in AI, it is reasonable. It is not something that is preventing the purchase.
Which other solutions did I evaluate?
At Intel, we had another solution; I don't remember the exact name, but it was more legacy, and everybody wanted to switch to Docker.
What other advice do I have?
We have a very high bar because we are developing a security product, so it is the highest bar that can be.
Basically, we have here two types of environments. One environment is top secret data that cannot leave a special network that is only inside the organization; we cannot use any cloud provider for it, so all this setup is running locally. We have the same images from an infrastructure perspective that is handling other projects that do not have such secure data; their data is less secure. It is still secure, but it is at a level that allows us to use cloud. It is not external cloud; it can be AWS or Azure, but still, it is allowed. The fact that we are using this hybrid environment means we are reusing the same infrastructure for different data type classifications.
We never reached the point that we need to search in community forums for help. My overall rating for this product is 9 out of 10.
Containerization has streamlined deployments and supports diverse monitoring and web workloads
What is our primary use case?
My main use case for Docker on Ubuntu 20.04 LTS is to run Docker containers.
A quick specific example of how I use Docker containers in my environment includes utilizing them for all kinds of applications, everything from Nginx to ForgeRock, and various tooling and monitoring solutions such as Prometheus and Grafana.
What is most valuable?
The best features Docker on Ubuntu 20.04 LTS offers are excellent for using official Docker repos.
Docker on Ubuntu 20.04 LTS has positively impacted my organization as it provides a good way to run our toolsets and applications.
The positive impact of Docker on Ubuntu 20.04 LTS definitely makes deployments easier and improves efficiency, which aligns with the main business case for the product.
What needs improvement?
Docker on Ubuntu 20.04 LTS can be improved, particularly as security features can always be enhanced, and the configuration is somewhat fragmented with different configuration files that can sometimes be cumbersome.
For how long have I used the solution?
I have been using Docker on Ubuntu 20.04 LTS for seven to eight years.
What do I think about the stability of the solution?
Docker on Ubuntu 20.04 LTS is stable.
What do I think about the scalability of the solution?
The question of how Docker on Ubuntu 20.04 LTS's scalability applies does not seem relevant when we are talking about a single Docker instance.
How are customer service and support?
I have never had to use customer support for Docker on Ubuntu 20.04 LTS.
Which solution did I use previously and why did I switch?
I did not previously use a different solution before Docker on Ubuntu 20.04 LTS.
How was the initial setup?
My experience with pricing, setup cost, and licensing for Docker on Ubuntu 20.04 LTS is quite good as it is all official on Docker.
What was our ROI?
I cannot say I have seen a return on investment while using Docker on Ubuntu 20.04 LTS, as it is the usual use case for Docker and containerization, which is already a standard way of working.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing for Docker on Ubuntu 20.04 LTS is quite good as it is all official on Docker.
Which other solutions did I evaluate?
I did not evaluate other options before choosing Docker on Ubuntu 20.04 LTS.
What other advice do I have?
I would rate Docker on Ubuntu 20.04 LTS a nine out of ten.
I give it a nine because there is always room for improvement, so I would not give any product a perfect ten.
Regarding Docker on Ubuntu 20.04 LTS's AI capabilities, I think its governance and security work quite well in terms of namespace isolation; the security is quite strong, but if you want something like image vulnerability scanning, it does not have anything built in, so you have to rely on third-party toolsets, and secret management is a bit of a downside.
Docker on Ubuntu 20.04 LTS is pretty accurate regarding its AI capabilities and the accuracy and reliability of output.
My advice to others looking into using Docker on Ubuntu 20.04 LTS is that if you are not using it, then try it. My overall review rating for Docker on Ubuntu 20.04 LTS is nine.