Open Liberty, the open source Java application server for Jakarta EE and MicroProfile, assembled from exactly the features your application needs.
Open Liberty is IBM's open source Java application server. Unlike a monolithic runtime it is composed feature by feature: a single server.xml file declares which of the Jakarta EE and MicroProfile capabilities the server loads, so the same product can be a lean servlet host of a few tens of megabytes or a full enterprise platform with messaging, batch and persistence. That model keeps startup times in the low seconds and the memory footprint small, which is why Open Liberty is used both for long lived enterprise Java applications and for cloud native microservices. Applications are deployed by dropping a WAR or EAR into a directory the server watches, and the runtime picks them up without a restart. A browser based admin centre shows the running server, its configuration and its deployed applications, and MicroProfile adds health checks, metrics, OpenAPI documents and distributed tracing to every service without extra libraries.
Open Liberty writes a TLS keystore the first time it starts, so an image that carried one would hand every deployment the same private key. cloudimg ships no keystore at all: the keypair and its password are generated on the instance itself at first boot, and the shipped configuration holds a placeholder rather than a password, so no two instances share a certificate. The administrative account is generated per instance the same way and written to a root only file, and the server refuses to start at all while either value is still a placeholder, so there is no window in which a known credential works. The runtime listens only on loopback with a reverse proxy as the single public listener, and that listener stays closed until first boot has finished. Every Open Liberty feature is already on disk, so changing platform level is a one line edit with no download, and a small Jakarta EE application ships deployed so the server demonstrably works the moment it boots. The base is a hardened, fully patched Ubuntu 24.04 LTS image with a paired deployment guide and 24/7 support.
Real screenshots taken while testing this image against its deployment guide.