Base
Hardened build
minimal ports, security patches applied at build time
Sonarr on Ubuntu 24.04 LTS
Azure
Streaming & Messaging
Sonarr, an open source PVR and library manager for TV series that tracks the shows you follow, fetches the episodes you are missing through your own indexers and download client, then renames and files them into an organised library.
Overview
Sonarr is an open source PVR and library manager for TV series. It keeps a watchlist of the shows you follow, works out which episodes are missing or could be upgraded to a better quality, searches the indexers you configure, hands releases to your download client, and then renames and files the results into a consistently organised library. A clean web interface gives you a calendar of upcoming episodes, a full series and season view, quality profiles, and a rich activity and history view, while a documented version 3 REST API exposes the same capability for automation.
It suits anyone self hosting a media library: home media servers feeding a player such as Jellyfin or Plex, archives of episodic content, and teams that want an automated, auditable pipeline from indexer to organised library inside their own cloud account.
Why the cloudimg image
Sonarr normally starts with authentication switched off, which means anyone who can reach it gets full control of the application and of its API key. cloudimg closes that gap. Authentication is enforced, and a unique administrator password plus a unique API key are generated on the first boot of every instance and written to a root only file. The password is handed to Sonarr's own account creation path, so it is stored only as a salted, heavily iterated one way hash and is never left in plain text on disk. Nothing usable is baked into the image, so no two instances ever share a credential. Sonarr runs as a dedicated unprivileged system user inside a hardened systemd sandbox, the official release is verified against the checksum the project publishes before it is unpacked, and automatic updates are turned off so a running instance never silently drifts from the published image. An unauthenticated health endpoint is provided so load balancer probes need no credential. The base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.
Common uses
- Automating a TV series library from indexer to correctly named, organised files
- A self hosted PVR companion for an existing download client and media server
- An API driven episode pipeline running inside your own cloud account
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Streaming & Messaging
Aa
Apache ActiveMQ Artemis Message Broker
Streaming & Messaging
This image runs Apache ActiveMQ Artemis, the high performance, non blocking message broker from the Apache ActiveMQ proj...
RabbitMQ 4 Message Broker - Preconfigured
Streaming & Messaging
RabbitMQ is a widely-used open source message broker that implements the AMQP protocol. This image provides RabbitMQ 4.3...
Eclipse Mosquitto MQTT Broker - Secured
Streaming & Messaging
This image runs Eclipse Mosquitto, the open source MQTT broker, fully installed and configured from the official Mosquit...
Ex
ejabberd XMPP Messaging Server
Streaming & Messaging
This image runs ejabberd, a robust, massively scalable self-hosted XMPP (Jabber) real-time messaging server.
Gotify Self-Hosted Push Notification Server
Streaming & Messaging
This image runs Gotify, the open source, self-hosted push notification server - send messages from any script, server or...
NATS Server - High Performance Messaging
Streaming & Messaging
This image runs NATS Server, the open source high performance messaging system from Synadia, fully installed and configu...