Rauthy on Ubuntu 24.04 LTS
by cloudimg
Self hosted OpenID Connect provider and identity server, from a single self contained binary.
Rauthy is a popular open source, self hosted OpenID Connect (OIDC) provider and identity and access management server. It lets you run your own single sign on for your applications: it issues signed OIDC and OAuth2 tokens, manages users, clients, roles, scopes and sessions, and supports passwords and passkeys, all from a clean admin console and an account self service interface. Rauthy is a single self contained Rust binary with an embedded database, so a full identity provider runs with no separate database to operate.
No known login
The image ships with no default or shared credential. Rauthy applies its bootstrap admin password only while initialising an empty database, and the captured image ships an empty database. On the first boot of every instance, a one shot service generates a unique admin password, unique encryption keys and unique internal secrets for that specific instance, boots Rauthy against the empty database so it creates the admin user with that per instance password, and writes it to a file that only the root user can read. No credentials or key material are ever shared between instances.
Hardened and ready on first boot
- Rauthy runs as a single binary under systemd as an unprivileged system user, bound to loopback only, backed by an embedded Hiqlite (SQLite and Raft) store.
- nginx terminates TLS on port 443 and reverse proxies to Rauthy so the OIDC issuer is served over HTTPS, with HSTS and sensible security headers. Port 80 redirects to HTTPS.
- A self signed certificate is regenerated per VM on first boot, with the VM public IP and hostname in its Subject Alternative Names. Replace it with your own CA signed certificate and domain for production.
- The admin console requires multi factor authentication (a passkey), and a built in self test proves the admin login round trip end to end over TLS.
Why cloudimg
cloudimg delivers Rauthy fully patched on a hardened Ubuntu 24.04 LTS base, serving on first boot, with a unique admin password per instance and no shared credentials. Every image is built at the latest stable release, passes an automated verification gate, and is backed by 24/7 support with a guaranteed 24 hour response SLA.
Licensing
Rauthy is open source software distributed under the Apache License 2.0, and is free. The cloudimg charge covers packaging, hardening, security patching, image maintenance and 24/7 support. A step by step deployment guide is provided.