Harness Open Source on Ubuntu 24.04 LTS by cloudimg

Harness Open Source, formerly Gitness and built by the team behind Drone, is an all in one, self hosted software delivery platform. It brings together Git repository hosting, pull requests and code review, CI and CD pipelines, and a built in artifact registry inside a single web application, so a small team can host code and ship it without stitching together several separate services. This image delivers Harness Open Source fully installed and configured on Ubuntu 24.04 LTS, running as a hardened container behind an nginx front end, so a working DevOps platform is answering on port 80 within minutes of launch.

Harness Open Source is delivered as a single self contained service with an embedded SQLite database, so there is no separate database server to provision, tune or back up. Your repositories, pull requests, pipeline definitions and registry blobs all live in one persistent data directory on the instance disk. That keeps the moving parts to a minimum for a proof of concept, an internal team, or an air gapped environment, while still giving you a real Git server with a modern web interface.

Application stack: the Harness service runs as a container on this instance, with nginx in front on port 80 handling the web UI and Git over HTTP, and the built in Harness SSH server on port 3022 handling Git over SSH. The local Docker engine is installed and the Harness service is pointed at it, so CI and CD pipeline steps run as containers on the instance. The web UI, Git hosting, pull requests and artifact registry all work out of the box; you add your own pipelines when you are ready.

Secure by default: Harness Open Source makes the first account that registers an administrator, which on an exposed instance is a real risk. This image closes that. On the first boot of your instance a one shot service generates a unique administrator password for this specific virtual machine, seeds the admin account with it through the supported startup mechanism, and switches off open self registration so no one can create a second account from the sign in page. The password is written only to a root owned credentials file on the instance, and the database is created fresh per instance with no baked users, tokens or secrets. No two instances share a credential and no published or default credential can sign in.

Key capabilities: host unlimited Git repositories with a fast modern web UI; open pull requests with code review, comments and status checks; define CI and CD pipelines as code and run their steps as containers through the local Docker engine; store build outputs and container images in the built in artifact registry; and manage everything, users, repositories, pipelines and settings, from one interface with no external database to operate.

Get started: retrieve the generated administrator password from the credentials file, sign in to the web UI on port 80, create your first repository and push code over HTTP or SSH, then open a pull request and wire up a pipeline. cloudimg engineers can help with repository and access design, pipeline authoring, adding your own TLS certificate for HTTPS, backups of the data directory, and upgrades after purchase.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.