Komodo on Ubuntu 24.04 LTS

Komodo is an open source build and deployment platform for Docker hosts. From one web interface you define stacks and deployments, build images from your own git repositories, run scheduled procedures, and watch the state of everything you have deployed as it changes. It replaces the habit of keeping compose files on a server and driving them over SSH, and it keeps a record of what was deployed, when, and by whom.

What you get. Komodo 2.3.3 fully assembled on Ubuntu 24.04 LTS: the API and web interface, the agent that manages containers on this instance, and the database beneath them. Every component image is pinned to exact content rather than to a moving tag, and none is ever fetched at runtime. The container engine and the encrypted front door both come from the Ubuntu archive, so they keep receiving security updates for the life of the instance instead of being frozen on the day the image was built.

It ships with no shared password, and that is deliberate. An image carrying a fixed administrator credential gives every deployment the same key to a machine that runs containers. On first boot this instance mints its own administrator password, database password, session signing key and certificate, writes them to a file only root can read, and refuses to start Komodo until it has. Self registration is switched off, and the instance re-checks that on every boot: if the administrator account is ever missing it closes the front door rather than leaving an open sign-up on a container host.

The boundaries around what you deploy are set, not left at their defaults. Containers deployed here cannot reach the Azure instance metadata service, where a virtual machine's own cloud credentials are issued, while ordinary internet access and name resolution keep working. Only secure shell and the encrypted web interface listen on the network; the database and the agent are unreachable from it. The data layer avoids the Server Side Public License entirely, using FerretDB over a PostgreSQL document engine, both openly licensed, and the image is checked for MongoDB components rather than assumed clean. An on-instance self test runs a real deployment and reads the container's own output back, and each of its checks is tested against a known-bad input first.

Please note that the agent managing containers here necessarily controls the container engine, which is equivalent to administrative access to the machine. That is inherent to what Komodo does: give it its own instance, which is exactly what this image is.

Licensing and trademarks. Komodo is free software under the GPL-3.0 licence, with no subscription or licence key. Komodo, Docker, FerretDB and PostgreSQL are trademarks of their respective owners; all product and company names are trademarks or registered trademarks of their respective holders, and cloudimg is not affiliated with, endorsed by or sponsored by any of them. The cloudimg charge of $0.04 per vCPU/hour covers packaging, hardening and 24/7 support.