Base
Hardened build
minimal ports, security patches applied at build time
a column store database built for analytics, where queries read only the columns they name
MonetDB is an open source relational database that stores each column separately instead of each row. A query that mentions two columns touches only those two, so aggregations, grouping and window functions over large tables run far faster than on a row store using the same hardware. It speaks standard SQL and ships with an interactive terminal, a dump utility and client libraries for Python, Java, R, PHP, Ruby, ODBC and JDBC.
MonetDB documents that every newly created database gets a well known default login, and the cloudimg image never creates it: no database exists in the image at all, and a password unique to your instance is set at the moment the database is created on first boot, into a root only file. MonetDB implements no encryption of its own, so the image terminates TLS in front of it with a certificate minted for your instance, keeps the database itself on the loopback interface, and leaves the administrative control channel disabled. Paired deployment guide and 24/7 cloudimg support.