FOSSology on Ubuntu 24.04 LTS by cloudimg

FOSSology is a mature, open source license, copyright and export control compliance scanner and workflow system used by software teams and open source program offices worldwide. You upload source packages and FOSSology unpacks them and runs its license, copyright and export control scanners (nomos, monk, ojo and copyright) over every file, then presents the findings in a web interface where reviewers clear licenses, record decisions and generate SPDX and compliance reports. This image is built and maintained by cloudimg on a hardened, fully patched Ubuntu 24.04 LTS base, with FOSSology 4.7.1 served by Apache and PHP and a bundled local PostgreSQL server, with the full reference license knowledge base loaded, so the appliance is complete and useful on its own.

The platform is ready the moment the instance boots: the database is initialised, the scan scheduler is running, and the web interface answers on port 80 at the /repo path. The well known FOSSology default fossy login is never shipped: a unique administrator password and a unique database secret are generated on the first boot of every VM and written to a root only file, and the shipped image carries both secrets rotated to discarded random values, so no known or blank credential authenticates. Browse to FOSSology, sign in as the fossy administrator, upload a package and schedule a license and copyright scan.

The bundled PostgreSQL listens only on the loopback interface (127.0.0.1:5432) and is never exposed to the network. The PostgreSQL cluster and the FOSSology repository, where uploaded packages and unpacked file trees are stored, both live on a dedicated data disk kept separate from the operating system disk, so your scan data survives an operating system rebuild. For production, front port 80 with your own domain and TLS.

FOSSology is free and open source software licensed under the GNU General Public License version 2. This image is an independent packaging of the open source FOSSology software by cloudimg and is not affiliated with, sponsored by, or endorsed by the FOSSology project or the Linux Foundation. Backed by 24/7 cloudimg support.