Orthanc on Ubuntu 24.04 LTS

Why the cloudimg image

cloudimg builds Orthanc from the official upstream release against the operating system's own libraries, rather than shipping the prebuilt binary that freezes its own private copies of OpenSSL and the DICOM toolkit inside it. That is the difference between an image whose cryptography and image parsing keep receiving security updates on your machine and one where they can never be patched at all. The release is current, so it carries the nine security fixes published in April 2026, and a full dependency vulnerability scan is gated at build time and recorded on the image.

Because this is a store of medical images, it is secure by default in a way that matters: no credential of any kind ships in the image. Orthanc's packaged builds are widely known for a default administrator login, and this image has none. A unique administrator password is generated on the first boot of every instance, and until that happens the server refuses every request rather than serving the archive openly. Orthanc runs behind a reverse proxy on the loopback interface with authentication explicitly enforced, there is an unauthenticated health endpoint for load balancer probes, and a synthetic phantom study ships so you can prove the DICOM protocol works end to end in one command. The base is fully patched, the complete corresponding source ships on the image to satisfy the licence, and every image is paired with a step by step deploy guide and 24/7 support.