Sold by: Lynxroute
Deployed on AWS
Free Trial
This product has charges associated with it for hardening, security configuration, and support.
Odoo Community Edition is an open-source ERP and CRM business suite (Python application backed by PostgreSQL) covering CRM, Sales, Invoicing, Inventory, Accounting, Project and more as installable apps. This Lynxroute build is hardened and ready out of the box: a master password and an admin password generated at first boot, an initial database created for you, Odoo and PostgreSQL bound to loopback with host nginx terminating TLS on port 443, the database manager locked down, one-command HTTPS via Certbot, UFW firewall pre-configured, and a CIS Level 1 hardened Ubuntu 24.04 LTS base.
LGPL-3.0 license - fully auditable, no vendor lock-in.
Overview
This is a repackaged software product wherein additional charges apply for hardening, security configuration, and support.
WHAT IS ODOO
Odoo Community Edition is an open-source, all-in-one ERP and CRM business suite. It runs as a Python application backed by a PostgreSQL database and is organised into integrated apps you install on demand: CRM, Sales, Invoicing, Inventory, Purchase, Accounting, Project, Manufacturing, Website and many more, all sharing one data model so a lead can flow through to a quotation, a delivery and an invoice without re-keying. Reports render to PDF via wkhtmltopdf. The web client and websocket bus bind to loopback and are fronted by nginx for TLS. The database and the file attachment store persist on the instance disk. LGPL-3.0 license, no vendor lock-in. Self-hosted on your own EC2 instance, your business data never leaves your AWS account.
WHAT THIS AMI ADDS
Security hardening:
- A master (database-management) password and an application admin password generated at first boot (written to /root/odoo-credentials.txt)
- An initial database created at first boot - log in and start, no web installer step exposed to the internet
- The database manager disabled (list_db off) so the database list and management screens are not reachable
- Odoo bound to 127.0.0.1 (web and websocket); PostgreSQL bound to 127.0.0.1 only; host nginx terminates TLS on port 443
- One-command HTTPS: certbot --nginx (Certbot and the nginx plugin are pre-installed)
- The PostgreSQL role uses a unique password generated at first boot
- UFW firewall pre-configured (ports 22 and 443 only)
- fail2ban, auditd, AppArmor pre-configured
- CVE scan - every image is scanned for vulnerabilities before release
OS hardening (CIS Level 1):
- CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
- auditd, SSH hardening, Kernel hardening, IMDSv2 enforced
Compliance artifacts:
- SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
- CIS Conformance Report at /etc/lynxroute/cis-report.html
- CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Highlights
- Odoo security baked in: a master password and an admin password generated at first boot, an initial database created for you, the database manager disabled, Odoo and PostgreSQL bound to 127.0.0.1, and host nginx terminating TLS on port 443.
- CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced. CVE-scanned before every release. SBOM (CycloneDX) and CIS Conformance Report included.
- A complete ERP and CRM out of the box: install CRM, Sales, Invoicing, Inventory, Accounting and Project as apps on one shared data model, with PDF reports and one-command HTTPS via Certbot. LGPL-3.0 license - fully auditable, no vendor lock-in.
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.large Recommended | $0.05 |
m6i.large | $0.05 |
m6i.xlarge | $0.05 |
t3.medium | $0.05 |
Dimensions summary
You pay by the hour for a hardened Odoo ERP and CRM image, billed based on the AWS EC2 instance type you choose. The four options are compute sizes, not feature tiers. The t3.medium and t3.large are burstable instances suited to variable workloads. The m6i.large and m6i.xlarge offer steady general-purpose compute, with the xlarge providing more vCPU and memory. You select the size that fits your workload, and the hourly rate scales with the instance's capacity. All sizes ship the same hardened, compliant image.
Top-of-mind questions for buyers
Each label maps to an AWS EC2 instance size that runs the hardened image. The t3.medium and t3.large are burstable instances for variable load. The m6i.large and m6i.xlarge give steady general-purpose compute. The xlarge sizes carry more vCPU and memory than the large sizes.
You pay the hourly software rate only while the instance runs. A fully stopped instance stops accruing software charges. Underlying AWS storage fees for the attached volume may still apply while the instance is stopped. Metering resumes when you start the instance again.
They differ only in compute capacity. Every size ships the same hardened Ubuntu 24.04 image with CIS Level 1 benchmarks applied, CVE scanning, a bundled software bill of materials, and unique credentials generated at first boot. You choose the size for your workload, not for different capabilities.
lynxroute.com
Helpful?
Vendor refund policy
We do not offer refunds for this product. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS and are not refundable by us.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Odoo 18.0 - Initial release (June 2026)
- Odoo 18.0 Community Edition on Ubuntu 24.04 LTS
- CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)
- CVE-scanned before every release
- Master password and admin password generated at first boot; initial database created
- PostgreSQL 16 backing store; database manager disabled (list_db off)
- Odoo bound to 127.0.0.1:8069/8072 (loopback); host nginx terminates TLS on port 443
- One-command HTTPS via Certbot (certbot --nginx)
- UFW firewall pre-configured (ports 22, 443 only)
- fail2ban, auditd, AppArmor pre-configured
- SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json
- CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html
- IMDSv2 enforced
Additional details
Usage instructions
- Launch instance (t3.large recommended; t3.medium minimum)
- Open Security Group - allow TCP 443 from your IP/CIDR (and TCP 22 for SSH)
- SSH: ssh -i key.pem ubuntu@<PUBLIC_IP>
- Read credentials: sudo cat /root/odoo-credentials.txt
- Open https://<PUBLIC_IP>/ in your browser - accept the self-signed certificate warning. Odoo shows its login page; an initial database is already created.
- Log in as 'admin' with the generated password from step 4. The master (database management) password is in the same file - keep it private.
The admin and master passwords are generated at first boot and stored in /root/odoo-credentials.txt. Odoo binds 127.0.0.1:8069 (web) and 127.0.0.1:8072 (websocket); PostgreSQL binds 127.0.0.1 only; host nginx terminates TLS on port 443. Replace the self-signed TLS certificate with a CA-signed one for production use: sudo certbot --nginx -d yourdomain.com
Resources
Vendor resources
Support
Vendor support
Visit us online: https://lynxroute.com/#contact
For Odoo documentation:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Experience the power of Odoo, the ultimate suite of business applications. This pre-configured and hardened Odoo 18 image on Alma Linux, offered by Elyxia Global Limited, with any additional charges clearly specified in the pricing information section, delivers a comprehensive ERP solution that integrates seamlessly with your business processes, enhancing efficiency and productivity.
Experience the power of Odoo, the ultimate suite of business applications. This pre-configured and hardened Odoo 17 image on Alma Linux, offered by Elyxia Global Limited, with any additional charges clearly specified in the pricing information section, delivers a comprehensive ERP solution that integrates seamlessly with your business processes, enhancing efficiency and productivity.
This product has charges associated with it for automated deployment, security hardening, first-boot credential generation, system optimization, and support services provided by Nehir Software LLC.
This product has charges associated with it for Websoft9 support. Pre-configured, web-based, cloud-native, secure, one-click to deploy Odoo 19/18/17 Community Edition with Websoft9 Applications Hosting Platform on AWS. Odoo is a suite of web based open source business apps.
Experience the power of Odoo 19, the ultimate suite of business applications. This pre-configured and hardened Odoo 19 image on Alma Linux, offered by Elyxia Global Limited, with any additional charges clearly specified in the pricing information section, delivers a comprehensive ERP solution that integrates seamlessly with your business processes, enhancing efficiency and productivity.
This product has charges associated with it for automated deployment, security hardening, first-boot credential generation, system optimization, and support services provided by KBLT Software Group LLC.
This product has charges associated with it for seller support and a pre-configured stack (Webmin). Intuz Odoo is a pre-configured, ready-to-run image with Nginx, PostgreSQL, Webmin, Odoo, and Scripts that make it easy for you to use Odoo.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.