MySQL Server on Ubuntu 24.04 LTS

You get MySQL 8.0, the relational database server, on Ubuntu 24.04 LTS. At first boot the VM gives the root account its own generated password, replacing Ubuntu's default where root signs in through sudo with no password, and tests that password against the running server before setup is marked complete.

Who it's for

• Developers and database administrators (DBAs) who want a MySQL server with full control over its configuration
• Application teams that need a relational database inside their own Azure virtual network
• Teams replacing a hand-built MySQL VM

What's included

• MySQL 8.0 server and client from the Ubuntu 24.04 package archive, running as a systemd service (starts automatically with the VM)
• Root signs in with a password: root uses caching_sha2_password (MySQL 8's default password method), so a blank password and plain sudo sign-in are refused
• Local-only by default: MySQL listens on 127.0.0.1 (the VM itself), port 3306, Ubuntu's default bind-address
• Host firewall (ufw) that blocks inbound traffic except SSH and port 3306

After you deploy

• Sign in over SSH. The generated root password is in a root-only file that sudo cat /etc/motd names; read it with sudo. The password keeps working after reboots.
• Connect with the MySQL client as root, create your application database and user, then change the root password (ALTER USER) and delete the file.
• Root can sign in only from the VM itself. For remote clients, create a user for their addresses, set bind-address in mysqld.cnf and restart MySQL, then allow port 3306 in your Azure network security group (NSG) only from your application subnets.
• MySQL's TLS certificate and keys (for encrypted connections) are generated on your VM at first boot, so they are unique to it. Create remote users with REQUIRE SSL so their connections must be encrypted. The certificate is issued by a private CA that MySQL creates on your VM, so install a CA-issued certificate if clients must verify the server's name.

Why this image

• Unique root password on every VM, tested through a network connection to the running server before it is recorded
• MySQL's TLS keys, its password-exchange RSA keys, its server UUID (its unique ID) and the password of Ubuntu's MySQL maintenance account are also created on your VM at first boot and checked before setup is marked complete, so no two VMs share them; the build fails if any key or credential would be captured into the image
• Saves the manual work of replacing Ubuntu's password-less root sign-in and checking the result
• A weekly verification job boots the newest image version and checks the root sign-in, the refused blank password and the listening address
• Ubuntu updates applied when each image version is built

How it runs on Azure

A virtual machine in your own subscription and virtual network (VNet), so your data stays on disks you control. The software charge is pay-as-you-go on your Azure invoice, alongside compute and storage. Recommended size: Standard_D2as_v5 or larger.

License and support: MySQL is open-source software under the GNU General Public License, version 2 (GPLv2). MySQL® is a registered trademark of Oracle and/or its affiliates. Packaged by Derek Coleman & Associates Inc; not affiliated with or endorsed by Oracle. Get started with the setup guide at www.dcassociatesgroup.com/support