SonarQube on Ubuntu 24.04 LTS by cloudimg

## SonarQube on Ubuntu 24.04 LTS

SonarQube Community Edition is the leading open-source platform for continuous code-quality and security analysis. It scans your codebase for bugs, security vulnerabilities, and maintainability issues across dozens of languages, enforcing quality gates in your CI/CD pipeline. This image is built and maintained by cloudimg on a hardened, fully patched Ubuntu 24.04 LTS base — with the fiddly Elasticsearch kernel tuning and mandatory PostgreSQL backend pre-configured.

### What's included

• SonarQube Community Edition on OpenJDK 17, with the required `vm.max_map_count`/`fs.file-max` kernel settings pre-applied
• A mandatory PostgreSQL backend (SonarQube's embedded H2 is not production-usable), managed by systemd
• The SonarQube web UI on port 80, protected by authentication
• A unique administrator credential generated on first boot (no shared default password)
• Analysis data and the database stored on a dedicated managed data disk
• Automatic security updates enabled

### Getting started

Retrieve the generated password with `sudo cat /root/sonarqube-credentials.txt`, then sign in at the VM's public IP. Point your CI scanner at the server with a project token. The deployment guide on cloudimg.co.uk covers scanners, quality gates, and integrations.