Qdrant on Ubuntu 24.04 LTS
by cloudimg
Qdrant vector search engine on Ubuntu 24.04, REST and gRPC over nginx TLS, per-VM API key and built-in dashboard
Qdrant is a high performance open source vector similarity search engine and vector database, written in Rust for speed and reliability under heavy load. It stores points made of a vector and a JSON payload, indexes them with HNSW, and answers nearest neighbour, filtered and hybrid search queries in milliseconds through a clean REST and gRPC API, with official client libraries for Python, JavaScript, Rust, Go and more. It is a strong foundation for semantic search, recommendations, retrieval augmented generation and anomaly detection. This cloudimg image runs the official prebuilt Qdrant release on Ubuntu 24.04 LTS.
The image delivers Qdrant fully installed and reverse proxied behind nginx with TLS, so a production ready vector search service is operational within minutes of launch, with no manual package installation, no dependency troubleshooting and no proxy configuration required. The Qdrant process binds only to loopback and is exposed through nginx, which terminates TLS for the REST API and the built in dashboard on port 443 and for gRPC on port 6334. Vector data lives on a dedicated data disk, and systemd manages the service for automatic restarts and clean logging.
Security is built in. Qdrant serves an open, unauthenticated API when no key is set; this image never does. On the first boot of every VM a unique API key is generated, written to a root only file and the service environment, and a per instance self signed TLS certificate is generated. The service is configured to require the first boot unit, so it can never start open before a key is set. No two instances share a credential, and no known credential is ever baked into the image.
Qdrant is distributed under the Apache 2.0 License, free and open source with no per CPU or per deployment fee. cloudimg is not affiliated with or endorsed by the Qdrant project; Qdrant is a mark of its owner. cloudimg provides packaging, nginx TLS and systemd hardening, per instance API key and TLS automation, security patching, and 24/7 support with a guaranteed 24 hour response SLA.