Base
Hardened build
minimal ports, security patches applied at build time
Kanidm on Ubuntu 24.04 LTS
Azure
Security
A directory and an identity provider in one small binary, with no default password to change.
Overview
Kanidm is an open source identity management platform: the directory that holds your people, groups and service accounts, and the identity provider those accounts authenticate against. Most self hosted identity software is one or the other, so a working deployment usually means running a directory alongside a federation front end and keeping the two in step. Kanidm is both. One server gives you a web interface for administration and self service, a REST API, a read only LDAP endpoint for applications that only speak LDAP, an OAuth2 and OpenID Connect provider for applications that speak modern federation, RADIUS secrets for network authentication, and POSIX attributes for Unix login.
Why the cloudimg image
Kanidm ships its administrator accounts with no credential at all, and the cloudimg image keeps it that way rather than generating one for you. There is no vendor default to change and no password written to a file at first boot, so there is no window between an instance starting and being secured in which anyone could sign in: the first credential is one you mint yourself from a root shell, and it is printed once. Everything that must be unique to an instance is created on that instance at first boot, including its certificate authority and its TLS certificate, and two instances were compared before release with no key material or host identity in common. The server terminates TLS itself with no proxy in front of it, the open port set is asserted by equality against every socket the machine opens, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.
Common uses
- Run one directory that both LDAP and OpenID Connect applications can use
- Give staff self service control of their own passwords and passkeys
- Centralise Unix accounts, groups and RADIUS secrets in one place
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
2F
2FAuth on Ubuntu 24.04 LTS
Security
2FAuth is a free, open source, self hosted web app for managing your two factor authentication accounts.
Ad
acme-dns on Ubuntu 24.04 LTS
Security
The image installs acme-dns 2.0.2 from the official upstream release (github.com/acme-dns/acme-dns, the project formerly...
addy.io on Ubuntu 24.04
Security
Mail sent to an alias is forwarded to your real inbox, and you can reply from the alias so the other side never learns w...
AliasVault on Ubuntu 24.04
Security
AliasVault is an open source, end to end encrypted password manager combined with a private email alias service that you...
Apache SpamAssassin
Security
This image runs Apache SpamAssassin, the long established open source anti spam platform, fully configured and security ...
Apache Syncope on Ubuntu 24.04
Security
Apache Syncope is an open source identity management and identity governance platform.