Aa

Apache Allura on Ubuntu 24.04

Azure Developer Tools

Apache Allura, the open source forge that runs SourceForge, giving your team hosted repositories, tickets, wikis and discussions in one place.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Apache Allura is the open source project hosting platform, or forge, that powers SourceForge. It gives a team everything a software project needs in one application: hosted git, Subversion and Mercurial repositories with browsable history, a ticket tracker for bugs and features, a wiki for documentation, threaded discussion forums, project blogs and file release areas. Every project gets its own space with its own set of tools, its own membership and its own permissions, and an administrator manages users, projects and neighbourhoods from a web interface.

Because it is a forge rather than a single tool, Allura suits organisations that want the whole collaboration surface under one roof and under their own control: an engineering group consolidating scattered repositories and issue lists, a research institution or university hosting many student and departmental projects, a company that must keep source code and project history inside its own account, and anyone running a community of open projects who wants the model SourceForge itself uses.

Why the cloudimg image

cloudimg delivers the entire Allura stack, the web application, its background task worker, a search service, a document datastore and a relational database, installed and wired together behind a web server so the forge answers the moment the instance boots, with no source build, virtual environment or search schema to assemble by hand. The image is secure by default and ships with nothing in it: upstream's own bootstrap creates well known demonstration accounts with a published password, and this image never uses that path, so the captured image contains an initialised forge with zero users, zero projects and zero credentials. On the first boot of every instance a single administrator account is created with a unique, randomly generated password, and every secret the platform relies on is minted fresh for that instance, the session signing key, the database role and the field encryption key, so no two instances share a secret and no upstream default ever governs a running forge. Credentials are written to a root only file, the datastore, search service and database are bound to the instance only and never exposed, the base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.

Common uses

  • Host your team's repositories, tickets and wiki in one self run forge
  • Give many projects their own space under a single platform you control
  • Keep source code, issue history and documentation inside your own account

See it running

Real screenshots taken while testing this image against its deployment guide.

Apache Allura on Ubuntu 24.04 screenshot 1 Apache Allura on Ubuntu 24.04 screenshot 2 Apache Allura on Ubuntu 24.04 screenshot 3 Apache Allura on Ubuntu 24.04 screenshot 4