Pomerium on Ubuntu 24.04

Pomerium is the open source identity aware access proxy: a single Go binary that gates access to your internal applications by authenticating every request against your own identity provider and enforcing per route authorization policy. You grant access by identity and context rather than by network location, the foundation of a zero trust posture. This cloudimg image installs the latest stable Pomerium Core release on Ubuntu 24.04 LTS, baked reproducibly with its version recorded on the VM, and runs it under systemd as an unprivileged user granted only the capability to bind port 443.

HTTPS is intrinsic: Pomerium terminates its own TLS on port 443. On first boot each VM generates a fresh self signed certificate and the two secrets Pomerium needs, a shared secret and a cookie secret, directly into its configuration. Those secrets are unique to the VM and are generated from the kernel random source; the shipped image carries only placeholders, so no two instances share a secret and no default login ever ships. A tiny nginx serves an unauthenticated health probe on port 80 and a redirect to HTTPS.

You bring your own identity provider. Pomerium authenticates users against any OIDC provider (Google, Microsoft Entra ID, Okta, Auth0, Authelia, Keycloak and others). The image ships a placeholder provider block you replace after launch, and because Pomerium discovers your provider lazily the service starts and serves public routes immediately. A working public demo route and a gated demo route are configured out of the box so you can see the proxy and the identity aware sign in redirect the moment it boots.

Pomerium Core is Apache 2.0 licensed, free and open source with no per user or per deployment fee; the separate commercial Pomerium Enterprise Console is not included. cloudimg provides packaging, per instance secret and TLS automation, the working demo routes, security patching and 24/7 support with a guaranteed 24 hour response SLA. Pomerium is an independent open source project and this image is not affiliated with or endorsed by Pomerium, Inc.