Hardened SeaweedFS 4.29 on Ubuntu 24.04 LTS

This product provides SeaweedFS 4.29 integrated with Ubuntu 24.04 LTS and delivered as an Amazon Machine Image (AMI) by Hanwei. The image configures the verified SeaweedFS topology as systemd-managed services under dedicated non-root accounts, applies Hanwei's versioned security-hardening baseline, initializes unique S3 credentials per deployment, and records persistent volume-data and Filer-metadata paths.

Marketplace software charges cover Hanwei's SeaweedFS, operating-system, and command-line tool integration; service and storage configuration; application of the security-hardening baseline; per-deployment S3 credential initialization; repeatable AMI construction; and bounded EC2, EBS, restart, authorization, S3 API, persistence, backup, and recovery testing. Hanwei support is supplementary and is not the sole basis for the software charges.

• Application and operating-system integration: Hanwei installs the verified SeaweedFS 4.29 binary and records its source, checksum, architecture, executable path, configuration files, and license.
• Documented service topology: Hanwei configures only the master, volume, Filer, S3 gateway, metadata store, reverse proxy, and supporting processes identified in the published topology. Each service has documented dependencies, startup ordering, restart policy, user, group, environment, ports, and storage paths.
• Non-root service execution: SeaweedFS services run under dedicated non-root accounts with recorded filesystem ownership and permissions. Any capability, privileged port, FUSE, device, or kernel access exception is separately documented and tested.
• Versioned security-hardening baseline: Hanwei applies a versioned Ubuntu profile and records service-required SSH, firewall, AppArmor, kernel, filesystem, account, package, and network exceptions verified on the final AMI.
• Per-deployment S3 credential initialization: Shared access keys and anonymous write access are removed. Each deployment initializes unique S3 credentials and policies through the documented one-time process before the S3 endpoint becomes available.
• Persistent-storage configuration: Hanwei identifies the volume-data directories, Filer metadata store, configuration, S3 identity data, logs, and backup scope and verifies their behavior across service and instance restarts on the stated EBS baseline.
• Repeatable construction and bounded testing: Final-image testing covers launch, restart, systemd dependencies, listeners, authentication, selected S3 operations, data and metadata persistence, snapshot/restore, update behavior, and secret scanning.
• Supplementary support: Hanwei provides support according to the offering terms. Support supplements the integrated and tested AMI and is not the sole basis for Marketplace software charges.