InvenTree on Ubuntu 24.04 LTS by cloudimg
by cloudimg
Track parts, stock and bills of materials, with a unique admin password on every VM.
InvenTree is an open source inventory management system built for manufacturing and physical-product businesses. It keeps a structured catalogue of the parts you buy and make, tracks how much of each you hold and where, and records the bills of materials that say which components go into which assemblies. Purchase orders, sales orders and build orders sit on top of that, so stock figures move as the work happens rather than being maintained by hand. Everything the web interface can do is also available through a complete REST API, and a documented plugin interface lets you extend the system without forking it.
What you get. InvenTree 1.5.5 on Ubuntu 24.04 LTS, installed from the project's own pinned package. The application runs in a dedicated Python virtual environment under gunicorn as an unprivileged user bound to the loopback interface, with a django-q2 background worker for scheduled tasks, notifications and label printing. PostgreSQL 16 and Redis 7 are both bound to localhost, and nginx serves the React web interface over HTTPS.
No default login. No administrator account and no database exist in the image at all. On each VM's first boot a fresh empty database is created and migrated, and the administrator password, the database password, the Django secret key, the OIDC signing key and the HTTPS certificate are generated uniquely on that VM and written to a file only root can read. The application, its worker and the web server stay closed until that finishes, so there is no window in which the system is reachable with an uninitialised database.
Hardened by default. Only SSH and the two web ports are reachable from outside the VM, and port 80 issues a permanent redirect to HTTPS. The application server, the database and the cache are never exposed. The reverse proxy overwrites the client address headers it forwards, so a caller cannot forge the address InvenTree's failed-login rate limiting attributes attempts to, and uploaded files are served only behind authentication while static assets stay public. An on-VM self-test proves the whole posture at any time.
Licensing and trademarks. InvenTree is free software under the MIT licence, with no subscription or licence key. All product and company names are trademarks or registered trademarks of their respective holders; cloudimg is not affiliated with, endorsed by or sponsored by the InvenTree project, and packages the unmodified open source software. The cloudimg charge of $0.04 per vCPU/hour covers packaging, hardening and 24/7 support.