PipeCD on Ubuntu 24.04 LTS by cloudimg

PipeCD GitOps continuous delivery on Ubuntu 24.04 LTS

PipeCD is an open source, unified continuous delivery platform that brings GitOps to Kubernetes, Terraform, Amazon ECS, AWS Lambda, Google Cloud Run and more. You declare the desired state of your applications in Git, and PipeCD progressively rolls it out with automated analysis, first class support for canary and blue/green strategies, automatic rollback on failure, and a single web console that shows every deployment, its live state and its full history across every platform.

PipeCD has two parts. The Control Plane provides the web console, the deployment history, the audit trail and the project and role management. Lightweight agents called piped run next to your workloads, pull the desired state from Git, and carry out the deployments. This image runs the complete Control Plane and one ready registered piped agent on a single VM, so you have a working GitOps control plane the moment the instance boots.

What cloudimg delivers

This image runs the pinned upstream PipeCD Control Plane as a systemd managed Docker Compose stack, backed by a local MySQL datastore, a local MinIO object store and a Redis cache on the same VM. An Envoy gateway serves the web console, the agent channel and the API on a single port, 8080. A piped agent is generated and registered against the local control plane on first boot, so it shows online in the console straight away.

• Secure by default — no administrator, database, object store or agent credential is baked into the image; on the first boot of every instance a unique administrator password, database password, object store keys, control plane encryption key and agent key are generated, and the administrator password is written to a root only file
• A piped agent registered to the local control plane on first boot and shown online in the console, so the GitOps control plane is functional out of the box
• The web console, the agent gRPC channel and the pipectl API multiplexed onto a single port so only one port needs opening
• MySQL, MinIO and Redis bound to the internal container network only; the base fully patched with unattended security upgrades enabled
• A paired step by step deployment guide and 24/7 cloudimg support

Licensing — Apache 2.0, free. The cloudimg charge of $0.04 per vCPU hour covers packaging, security patching, image maintenance and 24/7 support. Recommended size: Standard_B2s to start, scaling up for heavier use. Prerequisites: an Azure subscription, a VNet and an SSH key; the network security group should permit ports 22 and 8080.