openGemini Time-Series Database for Metrics & IoT

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## openGemini - High-Performance Open Source Time-Series Database

Deploy a fully configured, security-hardened openGemini node that accepts metrics over the InfluxDB-compatible HTTP line protocol within minutes of instance launch. openGemini is an Apache-2.0 licensed distributed time-series database purpose-built for metrics, monitoring, observability and IoT telemetry - the workloads where write throughput, on-disk compression and fast time-range queries matter most.

## Why This Image Over Alternatives

Unlike images that ship a database with a shared default password or no authentication at all, this image enforces HTTP authentication from the moment the service starts. openGemini ships with authentication disabled by default; this image turns it on and generates a unique, strong admin password per instance on first boot, written to a root-only credentials file - eliminating the credential-sharing risk that leads to unauthorized access. The internal meta, store and RPC ports bind to loopback only, and the recommended security group opens SSH alone, so the database is never exposed to the internet by default. The Apache-2.0 licence means no vendor lock-in and no licence ambiguity for commercial or SaaS deployments.

## Community and Adoption

openGemini is developed in the open on GitHub by an active community, with ongoing contributions and regular release cycles. This image packages the upstream release into a hardened, production-ready deployment so teams adopt openGemini on AWS without the overhead of manual installation and credential configuration.

## About cloudimg

cloudimg publishes production-ready, security-hardened open source AMIs on AWS Marketplace, each following a consistent methodology: no default credentials, loopback-only internal binding, automated credential generation at first boot, and a dedicated data volume for the datastore. Support engineers are available 24/7.

## What Is Included

• openGemini server (single-node ts-server) built from the official upstream release and verified by checksum before installation
• HTTP query and write API on the standard time-series port, with authentication enforced from first boot
• InfluxDB line-protocol compatibility, so existing metric writers, Telegraf outputs and Grafana InfluxQL data sources connect with minimal change
• Auto-starting service that comes up on boot with the datastore on a dedicated, independently resizable EBS data volume

## Secure First Boot Process

1. Launch your instance with this image

2. A one-shot systemd service creates the first admin user with a cryptographically strong, unique password

3. The password is written to a file readable only by root

4. The service verifies that anonymous and wrong-password requests are refused - authentication is enforced immediately

No shared or default database credential ever ships in the image.

## AWS Integration Points

This image runs on Amazon EC2 instances of any supported type. Pair it with:

• Amazon VPC for network isolation and security group rules controlling SSH access and any deliberately-scoped database ingress
• Amazon EBS for durable, resizable storage backing the time-series datastore
• Amazon CloudWatch for instance-level monitoring of CPU, memory and disk metrics
• AWS Systems Manager for patch management and remote session access without opening extra ports

Because the recommended security group opens SSH only, remote database access is via an SSH tunnel or a security group rule you add and scope yourself - the credentials file and user guide document both.

## Deployment Prerequisites

• Security groups: Allow inbound TCP on port 22 (SSH administration and tunnelling). The database port is not exposed publicly by default.
• Instance sizing: A general-purpose m5 instance is recommended; time-series ingest benefits from RAM and fast storage but runs comfortably for demos and moderate workloads on smaller types.
• Storage: A dedicated General Purpose SSD (gp3) data volume backs the datastore; size it to your retention and cardinality needs.

## Use Cases

• Metrics and monitoring backend: Store infrastructure and application metrics and query them behind Grafana over the InfluxDB API - a cost-efficient, self-hosted time-series store with authentication on from the first boot.
• IoT and sensor telemetry: Ingest high-volume time-stamped device data over the line protocol and run fast time-range queries against it.
• Self-hosted InfluxDB-style alternative: Teams wanting an Apache-2.0 time-series database with no licence ambiguity deploy this image as a drop-in HTTP line-protocol target.

## cloudimg Support

24/7 technical support by email and live chat with a one-hour average first response for critical issues.