Dashboards and alerting with a pre-wired Prometheus metrics backend
CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside
| Cloud | Version | Software price | Last build | |
|---|---|---|---|---|
| AWS Marketplace EC2 AMI · all commercial regions | 13.2.4 | $0.05/hr Recommended instance: m6i.xlarge · 5-day free trial | 2026-10-23 | Listing ↗ |
| Azure Marketplace VM image · plan payg-gen2 · Gen2 | 13.2.3 | $0.028/vCPU/hr Recommended VM: Standard_D4s_v3 | 2026-10-02 | Listing ↗ |
Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.
| Base OS | Ubuntu 24.04 LTS |
| Hardening | CIS Level 1, Ubuntu 24.04 LTS (tailored) |
| License | AGPL-3.0-only |
| Upstream | Grafana Labs |
| Machine-readable | product.json · catalog.json |
Grafana is a Go-based analytics and visualization platform that turns time-series metrics into interactive dashboards, panels, and alerts; Prometheus is a Go-based monitoring system and time-series database that scrapes and stores metrics over HTTP. In this bundle Grafana is the front door and Prometheus is the metrics backend - the two are pre-connected, with Prometheus added to Grafana as the default data source so you can open Explore and run PromQL queries (for example, "up") immediately. Prometheus scrapes itself and Grafana out of the box and is sized with a 15-day local retention window; add your own scrape targets to monitor application and infrastructure metrics. Grafana persists dashboards, users, and settings in an embedded SQLite database; Prometheus stores samples in its on-disk TSDB. Grafana OSS is AGPL-3.0 and Prometheus is Apache-2.0, so the entire stack is auditable with no vendor lock-in. Running your own stack keeps all metrics and dashboards inside your AWS account.
Security hardening:
OS hardening (CIS Level 1):
Compliance artifacts:
Credentials are generated at first boot and written to /root/grafana-credentials.txt.
# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
--image-id resolve:ssm:/aws/service/marketplace/prod-uzalxhg6vxugi/latest \
--instance-type m6i.xlarge --key-name my-key --security-group-ids sg-xxxxxxxx# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer grafana --plan payg-gen2
az vm create -g my-rg -n grafana --size Standard_D4s_v3 \
--image lynxroute:grafana:payg-gen2:latest --admin-username azureuser --generate-ssh-keys
The most recent release with notes; the full release history is in product.json.