{
 "slug": "nagios",
 "name": "Nagios",
 "tagline": "Host and service monitoring with plugins and notifications",
 "category": "observability",
 "use_cases": [
  "infrastructure-monitoring",
  "alerting",
  "service-checks"
 ],
 "aliases": [
  "nagios core"
 ],
 "status": "live",
 "upstream": {
  "vendor": "Nagios Core Development Team",
  "url": "https://github.com/NagiosEnterprises/nagioscore",
  "license": "GPL-2.0",
  "license_url": "https://github.com/NagiosEnterprises/nagioscore/blob/master/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "4.5.14",
   "last_build": "2026-10-23",
   "entity_id": "prod-jm7yiikvcovbu",
   "ami_alias": "/aws/service/marketplace/prod-jm7yiikvcovbu/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-gxnk3jhb2kp6g",
   "recommended_instance_type": "t3.medium",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "4.5.14",
   "last_build": "2026-10-24",
   "offer_id": "nagios",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:nagios:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.nagios?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/nagios/",
  "json": "https://lynxroute.com/products/nagios/product.json"
 },
 "release_notes": [
  {
   "version": "4.5.14",
   "title": "Nagios Core 4.5.14 r2",
   "notes": "* Security: fixes PHP2Shell (CVE-2026-109618, CVE-2026-109619), an unauthenticated remote code execution flaw in PHP, by shipping Ubuntu php8.3 8.3.6-0ubuntu0.24.04.13 (USN-8948-1). Every earlier image of this product carries the vulnerable PHP; replace running instances or run: sudo apt-get update && sudo apt-get install --only-upgrade \"php8.3*\"\n* The application version is unchanged (Nagios Core 4.5.14); this is a security rebuild\n* The Nagios web interface runs its PHP pages through Apache mod_php, which this rebuild patches\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23",
    "azure": "2026-10-24"
   }
  },
  {
   "version": "4.5.14",
   "title": "Nagios Core v4.5.14",
   "notes": "* Re-release of Nagios Core 4.5.14. The application version is unchanged; this build refreshes the underlying operating system image\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23",
    "azure": "2026-10-24"
   }
  },
  {
   "version": "4.5.14",
   "title": "Nagios Core 4.5.14 - Initial release (August 2026)",
   "notes": "* Nagios Core 4.5.14 with Nagios Plugins 2.5 on Ubuntu 24.04 LTS\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Web password generated at first boot, unique per instance, stored as a bcrypt hash\n* Web interface bound to 127.0.0.1 behind an nginx TLS perimeter on 443\n* Self-signed certificate plus Certbot for one-command CA-signed TLS\n* Vendor update checks disabled - no phone-home from the instance\n* UFW firewall pre-configured (SSH 22, HTTPS 443, and port 80 for the HTTPS redirect and certificate issuance)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23",
    "azure": "2026-10-24"
   }
  }
 ],
 "release_history": [
  {
   "version": "4.5.14",
   "aws": "2026-10-23",
   "azure": "2026-10-24"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-jm7yiikvcovbu/latest \\\n  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer nagios --plan payg-gen2\naz vm create -g my-rg -n nagios --size Standard_D2s_v3 \\\n  --image lynxroute:nagios:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Nagios Core is one of the longest-established open source monitoring servers for hosts, services and network devices. It is a set of compiled C daemons with an Apache CGI and PHP web interface, and it deliberately keeps no SQL database: current state, retention and the event log live in flat files, which is what makes it light enough to watch hundreds of hosts from a small instance. Monitoring is done by check plugins, small executables that return a status and a line of output, so anything you can write a script for can be monitored. This image ships Nagios Core 4.5.14 with Nagios Plugins 2.5, covering ping, disk, load, users, processes, SSH, HTTP, SMTP, SNMP, DNS, NTP and many more. Scheduling, state flapping detection, dependencies, escalations, notification commands and an external command pipe are all part of the core. GPL-2.0 license, no vendor lock-in.",
  "image_adds": "Security hardening:\n* Web password generated at first boot, unique per instance, stored only as a bcrypt hash - the image itself ships a locked account with no usable credential\n* Web interface served by Apache bound to 127.0.0.1 only, with nginx terminating TLS on 443 in front of it\n* Self-signed certificate out of the box and Certbot pre-installed, so a CA-signed certificate is one command away\n* Vendor update checks disabled - the instance does not report its version to any third party\n* The monitoring daemon runs unprivileged with a restricted umask, and the compiler toolchain is removed from the shipped image\n* UFW firewall pre-configured - SSH 22 and HTTPS 443; port 80 only redirects to HTTPS and carries the certificate-issuance challenge\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}