SuiteCRM 8 on Ubuntu 24.04 LTS by cloudimg

SuiteCRM is a full featured open source customer relationship management platform. It covers the whole commercial lifecycle: accounts, contacts, leads and opportunities with a configurable sales pipeline; quotes, products and invoices; cases with a customer self service portal; campaigns, target lists and email marketing; projects with Gantt charts; a workflow engine for automating routine actions; a reporting module with charts and scheduled delivery; and a documented REST version 8 API for integration with the rest of your stack.

What you get. The official SuiteCRM 8.10.2 release, fully installed on Ubuntu 24.04 LTS. Apache 2.4 serves the application over HTTPS with PHP 8.3 running through PHP-FPM on a local UNIX socket, backed by a MariaDB 10.11 LTS database bound to localhost. SuiteCRM's scheduler runs on a systemd timer every five minutes rather than through a public web endpoint.

No installer left exposed. SuiteCRM ships a web based installation wizard. On this image the installation is completed during the image build using the product's own command line installer, and both installer entry points are then removed from the image and blocked at the web server, so there is no unauthenticated setup page on your VM and nothing to configure before you can sign in.

No default credential. The image ships no default, shared or published password. On each VM's first boot it generates its own administrator password, database password, session salt, application secret, REST API signing key pair and HTTPS certificate, and writes the credentials to a file readable only by root. The web server is held closed until that first boot completes, so a VM is never reachable in a half configured state.

Hardened by default. Only SSH and HTTPS are reachable from outside the VM; port 80 issues a permanent redirect to HTTPS and serves nothing else. The database and PHP-FPM are not network services. The password policy is stronger than upstream's, SuiteCRM's login throttling remains enabled, root SSH login is refused and password authentication is disabled. The platform learns the address it is reached on at every boot, so an Azure public IP that changes across a stop and start is picked up automatically with nothing to edit.

Licensing and trademarks. SuiteCRM is free software published under the GNU Affero General Public License version 3 — there is no subscription or licence key. In accordance with section 7(b) of that licence the Appropriate Legal Notices are retained: the "Supercharged by SuiteCRM" and "Powered By SugarCRM" notices remain displayed in the application, and this image is not white labelled or re-skinned. SuiteCRM is a trademark of SuiteCRM Ltd and SugarCRM is a trademark of SugarCRM Inc; cloudimg is not affiliated with, endorsed by, or sponsored by either. This image packages the upstream open source release with cloudimg's provisioning, hardening and 24/7 support. The cloudimg charge of $0.04 per vCPU/hour covers packaging, hardening and support.