Netshot on Ubuntu 24.04 LTS by cloudimg

Netshot is an open source network configuration, inventory and compliance management platform by NetFishers. It periodically connects to your network devices to back up their running configurations, keeps a full change history so you can diff and audit every modification, maintains a live inventory of hardware and software, and continuously checks each device against configuration and software version compliance rules. Netshot ships more than a hundred device drivers covering Cisco IOS, NX-OS, IOS-XR and ASA, Juniper, Arista, Fortinet, HPE, Nokia and many other vendors, and detects changes in near real time from Syslog messages and SNMP traps. This image delivers Netshot 0.24 fully installed and configured on Ubuntu 24.04 LTS, hardened and fully patched, so a working management console is answering over HTTPS within minutes of launch.

Application stack: Netshot runs as a dedicated non root systemd service on the Oracle GraalVM Java runtime it requires to execute its polyglot device drivers, backed by a local PostgreSQL database that stores the inventory, configuration snapshots, compliance results and users. Its embedded web server serves the web UI and the full REST API over HTTPS on port 443. Change detection listeners for Syslog and SNMP traps are enabled out of the box.

Secure by default: because Netshot holds privileged access to your network devices, this image ships with no known secret of any kind. On the first boot of your instance a one shot service rotates the built in administrator password to a unique per instance value, rotates the PostgreSQL database password, rotates the credential encryption key that protects device secrets at rest, and regenerates a fresh per instance self signed TLS certificate, all before the web port accepts traffic. The default login is neutralised and the per instance administrator password is written to a root only credentials file. The database starts empty on first boot with no prior data.

Key capabilities: scheduled multi vendor configuration backups with full history and diffing; near real time change detection from Syslog and SNMP traps; a live hardware and software inventory; software version and configuration compliance rules with reporting for audits; and a complete REST API for automation and change workflows.

Get started: sign in to the web UI over HTTPS with the per instance administrator credential from the credentials file, add your device credentials and domains, and schedule your first configuration snapshot. Replace the self signed certificate with your own trusted certificate when you are ready. cloudimg engineers can help with device driver selection, compliance rule authoring, HTTPS and certificate options and version upgrades after purchase.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.