MariaDB Server on Ubuntu 24.04 LTS

You get MariaDB Server 11.4, a long-term-support release of the open-source relational database, on Ubuntu 24.04 LTS, with a root password generated and tested on your VM at first boot. The server accepts connections only from inside the VM until you choose to open it, so nothing is exposed by default.

Who it's for

• Developers and DBAs (database administrators) who want a self-managed MariaDB server in their own Azure subscription
• Teams running web applications that need a MySQL-compatible database
• Teams moving a database off shared hosting or an older server

What's included

• MariaDB Server 11.4 and its client tools from MariaDB's own package repository, running as a system service that starts with the VM
• Root can sign in only from the VM itself; there are no anonymous accounts and no test database
• TLS (encrypted connections) available by default: MariaDB 11.4 creates its own certificate when it starts
• UFW (Ubuntu's host firewall) on, allowing SSH and 3306, while the server itself listens only on 127.0.0.1 (the VM's own loopback address)

After deployment

• First boot generates the root password, enables password sign-in for root alongside MariaDB's local socket sign-in, proves the password against the running server, and saves it to a root-only file named in the login message.
• SSH in, read the file with sudo and connect locally as root with that password. MariaDB makes you set a new root password with SET PASSWORD before it runs anything else, while root's socket sign-in through sudo on the VM keeps working without a password. Then create your application database and user.
• To accept clients from other machines: set the bind address so the server listens on the network, create a user limited to your clients' addresses (root stays local), and allow 3306 in your network security group from those addresses only. The support guide lists the exact commands, and newer images also print them in the login message.

Why this image

• No shared password: the root password is created on your VM, and first boot does not finish until it works
• Closed by default: no network listener, no anonymous users, no remote root
• The 11.4 line is supported upstream until 2029 and checked weekly against the OSV.dev vulnerability database; Ubuntu security updates applied at build time
• Each week an automated test deploys this image in Azure and checks the root sign-in, the loopback-only listener and TLS
• Get started with the guide at www.dcassociatesgroup.com/support (MariaDB page)

How it runs on Azure

A Generation 2 VM image that runs in your own subscription and VNet (virtual network), so your data stays on disks you control; recommended sizes start at Standard_D2as_v5. Pay-as-you-go: an hourly per-vCPU software charge plus your compute and storage, billed through your Azure subscription.

This image is not affiliated with or endorsed by MariaDB plc or the MariaDB Foundation.