
- AWSAvailable on Amazon Web Services
- Azure· soonComing soon on Microsoft Azure
- GCP· nextGoogle Cloud is next on the roadmap
GitLab Community Edition
GitLab Community Edition 19.5.1 with GitLab Runner 19.5.1, Docker CE and Webmin on Ubuntu 24.04 LTS. Host private Git repositories, review merge requests, track issues and wikis, and run CI/CD pipelines on your own server. A runner with the Docker executor is already registered, so a pipeline starts the moment you push a .gitlab-ci.yml file. The GitLab address follows the instance's public IP at every boot, so links and clone URLs stay correct.
- Version
- v19.5.1
- Operating system
- Ubuntu 24.04 LTS
- Architecture
- x86_64
- Support
- Email support
What's installed
Every package and version on the image. Nothing else is installed.
- GitLab CE 19.5.1 (omnibus, with bundled nginx, PostgreSQL and Redis)
- GitLab Runner 19.5.1 (Docker executor)
- Docker CE 29.9.2
- Webmin 2.670
LicensingOpen source (MIT), no licence key required
Deploy anywhere
GitLab Community Edition on AWS.
Google Cloud is next on the roadmap. One clean-room build, one first-boot credential model, one patch cadence — identical on every cloud you run. Every identifier below is the real one; copy it and launch.
- AWSAvailable
Amazon Web Services
AMI · v19.5.1
AWS AMI IDShown for your region on the AWS Marketplace launch page once you subscribe.
- Released
- Root volume
- gp3 · 40 GiB
Instance types- t3a.large
- t3.large
- t3a.xlarge
- m6a.large
Regions34 regions· show all· hide
- us-east-1
- af-south-1
- ap-east-1
- ap-east-2
- ap-northeast-1
- ap-northeast-2
- ap-northeast-3
- ap-south-1
- ap-south-2
- ap-southeast-1
- ap-southeast-2
- ap-southeast-3
- ap-southeast-4
- ap-southeast-5
- ap-southeast-6
- ap-southeast-7
- ca-central-1
- ca-west-1
- eu-central-1
- eu-central-2
- eu-north-1
- eu-south-1
- eu-south-2
- eu-west-1
- eu-west-2
- eu-west-3
- il-central-1
- me-central-1
- me-south-1
- mx-central-1
- sa-east-1
- us-east-2
- us-west-1
- us-west-2
5-day free trial, then from $0.05/hr software charge (larger instance sizes cost more) plus your own EC2 costs, billed by AWS.
Subscriptions are open to AWS India (AISPL) accounts. Outside India? Ask us for a private build.
Getting started
From launch to signed in, step by step.
Subscribe on AWS Marketplace and launch in your region with TCP
22,80and8000open; GitLab needs about 15 minutes for its first-time setup (until then the page may show 502).Open
http://<instance-public-ip>/and sign in with usernamerootand your EC2 Instance ID, lowercase exactly as the console shows it (for examplei-0123456789abcdef0). Webmin is on port8000with usernameadminand the same password.Pipelines run as soon as a project has a
.gitlab-ci.yml. To clone over SSH, add your public key under your user settings > SSH Keys, then usegit@<instance-public-ip>:<group>/<project>.git.SSH as
ubuntuwith your key pair. Change passwords withsudo bash /home/ubuntu/iscripts/pass_gitlab.shorpass_webmin.sh; check the server withsudo bash /home/ubuntu/iscripts/gitlab_status.sh.The image serves plain HTTP so it works on a bare IP; add your own domain and certificate, or a load balancer with HTTPS, for production. GitLab needs at least 8 GiB of memory; choose
t3a.xlargeor larger for bigger teams.
Security posture
What this image does and does not ship with, one fact per line.
Clean-room build on Canonical's official Ubuntu 24.04 LTS image: every component comes from its own official source, and nothing is copied from any third-party image.
GitLab CE and GitLab Runner come from GitLab's official package repositories and Docker CE from Docker's.
No credentials ship in the image: on first boot every instance sets its own GitLab root and Webmin passwords from EC2 instance metadata (IMDSv2) and generates new GitLab secrets, CI signing keys and a new runner token.
Public sign-up is turned off.
Docker's address pool is moved off the default-VPC range so job containers never collide with your VPC.
SSH is key-only, and build-time SSH keys, host keys, machine ID, shell history and logs were removed before imaging.
The bundled password tools enforce at least 10 characters with upper- and lower-case letters, a number and a symbol.
The image is HTTP-only by design: put TLS in front before exposing it publicly, and restrict port 8000 to trusted IP ranges in your security group.