uTask on Ubuntu 24.04

Azure Application Infrastructure

uTask, the automation engine that turns a runbook into an auditable, resumable task your team can run themselves.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

uTask is an open source automation engine from OVH for turning operational procedures into repeatable, self service tasks. You describe a process once as a YAML task template, with typed and validated inputs, steps that declare their dependencies, conditions, loops and schema checks on each step's output, and uTask executes it as a task with a complete history: it retries what can be retried, pauses for human validation where you ask it to, and records every step, who requested it and what it returned. Because a task is resumable, an interrupted run continues from where it stopped instead of starting over.

Builtin actions drive real systems, with HTTP calls, SSH commands, scripts, email, notifications and subtasks, so a template can reach out to the services a procedure actually touches. A web dashboard and a REST API expose those templates to the people and pipelines that need them, which suits platform and operations teams replacing scripts on someone's laptop with governed, self service automation, and anyone who wants an audit trail for the routine work that keeps a system running.

Why the cloudimg image

uTask deliberately ships with no authentication of its own: upstream expects a trusted reverse proxy to authenticate callers and pass the username on, which means an unguarded deployment trusts whoever asks. cloudimg builds that proxy in. Every request is authenticated against a credential unique to your instance, the verified username is what uTask sees, anything a client tries to claim for itself is overwritten, and the engine is bound away from the network by a host firewall so the proxy cannot be sidestepped. The database password, the dashboard password and the storage encryption key that protects every task input and result at rest are all generated on the first boot of each instance and written to a root only file, and the image ships with no database at all, so no build time data and no shared key can follow you into production. Two self contained example templates are preloaded so the dashboard is useful at first login, the base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step deploy guide and 24/7 cloudimg support.

Common uses

  • Turn operational runbooks into governed, self service tasks
  • Automate multi step procedures with retries and human approval
  • Keep an auditable, encrypted history of every automated run

See it running

Real screenshots taken while testing this image against its deployment guide.

uTask on Ubuntu 24.04 screenshot 1 uTask on Ubuntu 24.04 screenshot 2 uTask on Ubuntu 24.04 screenshot 3 uTask on Ubuntu 24.04 screenshot 4