Base
Hardened build
minimal ports, security patches applied at build time
InfluxDB 2.9 on Ubuntu 24.04 LTS
Azure
Databases
InfluxDB, the open source time series database, with a built in web interface for exploring, dashboarding and alerting on the data you store in it.
Overview
InfluxDB is a purpose built time series database from InfluxData: it ingests timestamped measurements at high rate, stores them compactly, and serves them back over an HTTP API with a query language designed around time windows, downsampling and aggregation. It is the store most metrics, IoT sensor and application telemetry pipelines are built on, and it speaks the line protocol that collection agents and hundreds of client libraries already emit, so getting data in is usually a configuration change rather than an integration project. Alongside the database it ships a complete web interface for exploring data, building dashboards, scheduling background tasks and defining alert checks, which means a single deployment covers both storage and the day to day work of looking at what you stored. The 2.x line is the fully functional single node edition: one server process, one port, and no capability held back behind a paid tier.
Why the cloudimg image
cloudimg delivers InfluxDB installed from InfluxData's own signed package repository onto a hardened, fully patched base, with the API and the web interface published over TLS so the API token that authorises every request never crosses the network in plain text. The image is secure by default and ships with an empty data directory: there is no organisation, no bucket, no user and no API token inside it, so unlike most database images there is no default credential to rotate because none was ever created. On first boot each instance mints its own TLS certificate, its own administrator password and its own operator token, bootstraps itself through a private loopback only server that is never reachable from the network, and writes the credentials to a root only file. The service is gated so it physically cannot start before that has happened, which closes the window in which an unclaimed instance would otherwise offer its setup wizard to anyone who found the port. Every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.
Common uses
- Store and query infrastructure, application and IoT metrics in a database built for time series
- Give a team a metrics backend with its own web interface for dashboards, tasks and alerting
- Land data from collection agents and client libraries that already speak the line protocol
See it running
Real screenshots taken while testing this image against its deployment guide.
