Tengine on Ubuntu 24.04 by cloudimg

Tengine on Ubuntu 24.04 by cloudimg

Tengine is a high-performance web server and reverse proxy that originated at Taobao (Alibaba Group) as a feature-enhanced fork of nginx. It stays 100% compatible with the nginx configuration language and behaviour, so your existing server and location blocks work unchanged.

This cloudimg image ships Tengine 3.1.0 (base nginx 1.24.0) compiled from the official source tarball with the SSL, HTTP/2, real-IP, gzip-static, stub-status and sub-filter modules and hardened compiler flags. Rather than a bare default, it boots with a production configuration: the server version is hidden (server_tokens off), only TLS 1.2 and 1.3 are accepted, HTTP/2 is enabled, gzip is on and common security headers are set.

HTTPS works out of the box because each VM generates its own self-signed certificate, private key and Diffie-Hellman parameters at first boot in /etc/tengine/ssl/, so nothing secret is baked into the image and no two instances share a key. A local-only stub_status health endpoint and a commented reverse-proxy location block are included to build on.

The image is fully patched at build time with unattended-upgrades left enabled, and comes with a paired step-by-step deploy guide and 24/7 cloudimg support with a 24 hour response SLA.

What is included

• Tengine 3.1.0 compiled from source to /usr/sbin/tengine, running as the tengine system user
• Hardened /etc/tengine/tengine.conf and default site serving the landing page on TCP 80 and 443
• Per-VM self-signed TLS certificate, key and DH parameters generated at first boot
• Local-only stub_status health endpoint bound to 127.0.0.1
• tengine.service and tengine-firstboot.service systemd units auto-starting on boot
• Ubuntu 24.04 LTS base with latest security patches applied at build time

Support

• Documentation: https://www.cloudimg.co.uk/guides/tengine-on-ubuntu-24-04-azure/
• Email support: support@cloudimg.co.uk (24/7, 24 hour response SLA)