Relational database: PostgreSQL on AlmaLinux 9, hardened, initdb at first boot, 5432 closed.
PostgreSQL on AlmaLinux 9
A production-ready PostgreSQL database server on AlmaLinux 9, built and hardened for the Azure Marketplace. PostgreSQL is installed from the AlmaLinux AppStream and enabled as a service; the data directory is initialized and a unique superuser password is generated on first boot.
Who this is for: Developers, database administrators, and platform teams who want a self-managed PostgreSQL on Azure on an enterprise RHEL-compatible base.
Target industries: Software and SaaS, financial services, healthcare, retail, and public sector — any organization needing a relational database in its own Azure subscription.
Value proposition: Standing up a secure PostgreSQL on an enterprise Linux base means installing it, running initdb safely, and setting credentials. This image does that for you:
- PostgreSQL server from the AlmaLinux 9 AppStream — installed and enabled as a managed systemd service under the permissive PostgreSQL License
- Per-VM credentials on first boot — the cluster is initialized with initdb and a unique superuser password is generated and stored root-readable, so no shared secret is baked into the image
- Monthly patched & hardened — rebuilt each month from the upstream base with the latest OS security updates; hardened to Microsoft's Azure Marketplace certification standards before any version is published
- Ready to run — the service is installed, enabled, and configured to start on boot, so the VM is productive minutes after deployment instead of after a manual install
- Audit trail per release — build and certification evidence retained for every published image version, available for compliance audits and change-management documentation
Plans available:
- PostgreSQL on AlmaLinux 9 — Gen2 — Trusted Launch-capable Gen2 VM image; free image (standard Azure compute and storage rates apply). PostgreSQL is open-source software under the PostgreSQL License.
Supported software and integrations: psql and any PostgreSQL client or driver, pgAdmin; Azure Monitor, Azure Backup, Azure Virtual Network, Azure Key Vault.
Recommended deployment: Standard_D4as_v5 or larger; Premium SSD or Ultra Disk for the data volume. PostgreSQL listens on localhost by default (listen_addresses = 'localhost') and TLS is off. To accept network clients, set listen_addresses, add a scram-sha-256 rule for your clients’ subnet to pg_hba.conf and restart PostgreSQL (the VM’s login message lists the exact commands). Restrict port 5432 to your virtual network, turn on TLS before production traffic, and schedule backups of the data directory.
Support: support@dcassociatesgroup.com · www.dcassociatesgroup.com/support — business hours, 24-hour initial response SLA.