Sonarr, an open source PVR and library manager for TV series, preinstalled and secured with per instance credentials
Sonarr is an open source PVR and library manager for TV series. It keeps a watchlist of the shows you follow, works out which episodes are missing or could be upgraded to a better quality, searches your configured indexers, hands releases to your download client, and then renames and files everything into a tidy, consistently organised library, all from a clean web interface with a calendar, quality profiles and a documented version 3 REST API.
The cloudimg image ships Sonarr installed from the checksum verified official build, running under a hardened systemd sandbox as a dedicated unprivileged user. Authentication is enforced and a unique administrator password and API key are generated on each instance's first boot, stored only as a salted one way hash plus a root only credentials file, so nothing usable is baked into the image. Automatic updates are disabled so the running system never drifts from the published image, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.
Real screenshots taken while testing this image against its deployment guide.
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
Sonarr is a popular open source PVR and library manager for TV series. It keeps a watchlist of the shows you follow, works out which episodes are missing or could be upgraded to a better quality, searches your configured indexers, hands the results to your download client, and then renames and files everything into a tidy, consistently organised library. A clean web interface gives you a calendar of upcoming episodes, a full view of your series and their per season status, quality profiles, and a rich activity and history view, while a documented version 3 REST API lets you automate any of it.
This image delivers Sonarr fully installed and running so a working library manager is operational within minutes of launch, with no package installation, no runtime version wrangling and no service configuration required. Sonarr is installed from the official self contained build, which is verified against the checksum the project publishes before it is unpacked, and it runs as a dedicated unprivileged system user under systemd with automatic restarts, clean logging and a hardened service sandbox. The current release available is Sonarr 4.0.19.2979.
Unlike a bare deployment, this image is secure by default. Sonarr normally starts with authentication switched off, which means anyone who can reach it gets full control of the application and its API key. This image enforces authentication instead, and generates a unique administrator password and a unique API key on each instance's first boot. The password is handed to Sonarr's own account creation path so it is stored only as a salted, heavily iterated one way hash, and the plain values are placed in a root only file for the administrator to read. Nothing usable is baked into the image, so no two deployments ever share a credential.
All application state lives under a single directory, with the series library and download folders laid out and owned correctly from the start. An unauthenticated health endpoint is provided for load balancer probes, so monitoring needs no credential even though the interface and API do. Automatic updates are turned off so the running system never silently drifts from the published image, and upgrades arrive as a new cloudimg image version. The base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.
This is a repackaged open source software product with additional charges for cloudimg support services. Sonarr is a trademark of its respective owner. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.