base on ubuntu so only one port is exposed