Catalog / Databases & caches

InfluxDB

Time-series database for metrics, events and IoT telemetry

CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside

Availability and pricing
CloudVersionSoftware priceLast build
AWS Marketplace
EC2 AMI · all commercial regions
2.9.1$0.05/hr
Recommended instance: t3.medium · 5-day free trial
2026-09-02Listing ↗
Azure Marketplace
VM image · plan payg-gen2 · Gen2
2.9.1$0.028/vCPU/hr
Recommended VM: Standard_D2s_v3
2026-09-03Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts
Base OSUbuntu 24.04 LTS
HardeningCIS Level 1, Ubuntu 24.04 LTS (tailored)
LicenseMIT
UpstreamInfluxData
Machine-readableproduct.json · catalog.json
What is InfluxDB

InfluxDB is an open-source time series database purpose-built for high write and query loads on timestamped data - infrastructure and application metrics, application events, IoT and sensor telemetry, and real-time analytics. This image ships the 2.x line: a single Go server (influxd) with a built-in web UI, a token-authenticated HTTP API on port 8086, and two query languages - Flux and InfluxQL. Features include unbounded retention policies, downsampling tasks, dashboards, alerting checks, and the line-protocol write API compatible with Telegraf and the broad InfluxData client ecosystem (Go, Python, JavaScript, Java, and more). Data persists to a local bolt metadata store and TSM storage engine under a dedicated data directory. MIT license, no vendor lock-in - distinct from the managed InfluxDB Cloud service.

What the Lynxroute image adds

Security hardening:

  • Native TLS on port 8086 - a per-instance self-signed certificate is generated at first boot (no shared key baked into the image); swap in your own CA certificate anytime
  • Admin user, password, and an all-access operator token generated at first boot - written to /root/influxdb-credentials.txt (readable only by root)
  • Usage telemetry disabled
  • HTTP API and web UI require token / login authentication; unauthenticated API calls are refused
  • UFW firewall - SSH on 22 and InfluxDB on 8086 only
  • fail2ban, AppArmor
  • CVE scan - every image is scanned for vulnerabilities before release

OS hardening (CIS Level 1):

  • CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
  • auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

  • SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
  • CIS Conformance Report at /etc/lynxroute/cis-report.html
  • CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Deploy

Launch in one command

Credentials are generated at first boot and written to /root/influxdb-credentials.txt.

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-ervny2lqfxpjg/latest \
  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx
# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer influxdb --plan payg-gen2
az vm create -g my-rg -n influxdb --size Standard_D2s_v3 \
  --image lynxroute:influxdb:payg-gen2:latest --admin-username azureuser --generate-ssh-keys
Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Influxdb 2.9.1

AWS · 2026-09-02Azure · 2026-09-03

InfluxDB 2.9.1 - upgraded from 2.7.12, moving onto the maintained 2.x line (2.7.12 dated 2025-05-29; 2.8.0 and 2.9.x superseded it). MIT licence unchanged. Brings the 2.8 and 2.9 series: optional API token hashing (NOT enabled in this image, so tokens remain downgrade-safe), a BoltDB index bucket added on first start, compaction and purger fixes, InfluxQL JSON marshaling and CSV output corrections, and Flux 0.200.0. The influx CLI moves to 2.8.0. Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base.