Coroot Community Edition on Ubuntu 24.04 LTS

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Coroot Community Edition - eBPF Observability and APM, by cloudimg

Deploy a private, self-hosted observability platform on your own Azure infrastructure in minutes - no manual installation, no default credentials, no third-party service. This image delivers Coroot Community Edition 1.23.3 fully installed, hardened, and reverse-proxied behind nginx, so your team can watch their services the moment the VM boots.

Why This Image Instead of Manual Installation

Standing up Coroot by hand means running its server, a Prometheus metrics store, a ClickHouse telemetry store and the eBPF node agent together, wiring them up, fronting the dashboard with a reverse proxy, and seeding an admin account. This image eliminates that operational burden:

• The full stack (Coroot server, Prometheus, ClickHouse and the eBPF node agent) preconfigured and running under one service
• Secure by default: a unique admin password is generated on the first boot of every VM, so no default login ever ships
• Immediate time-to-value: the service map and dashboards fill with your host and process telemetry within minutes of boot
• Ongoing expert support: 24/7 cloudimg engineers handle upgrades, storage tuning, reverse proxy and TLS termination

Use Case: Zero Instrumentation Observability in Your Own Cloud

Teams want to understand how their services behave - latency, errors, resource use, dependencies - without adding tracing libraries to every application or shipping telemetry to a third-party service. With this image they launch a VM and the eBPF node agent immediately begins collecting metrics, traces, logs and CPU profiles from the kernel, which Coroot correlates into service maps, SLOs and automatic incident detection, all within their own VNet with full control of the data.

Application Stack

Coroot Community Edition runs as official upstream containers under one service: the Coroot server and web dashboard bound to loopback and fronted by nginx on port 80, a bundled Prometheus for metrics and a bundled ClickHouse for traces, logs and profiles on a private network with no host port, and a privileged eBPF node agent that ships host and process telemetry with zero instrumentation.

Secure By Default

Coroot has a built-in admin login but ships with no default password. Rather than leaving the admin unset, this image generates a unique admin password on the first boot of every VM, seeds the admin account with it before the port is public, and records it in a protected file readable only by root, so no shared or default credential is baked in. The dashboard sits behind nginx, the metrics and telemetry datastores are never exposed on a host port, and an unauthenticated health endpoint is provided for load balancer probes.

Features

Collect metrics, distributed traces, logs and continuous CPU profiles over eBPF with no instrumentation; explore an automatically built service map of your applications and their dependencies; track health and latency SLOs; and get automatic incident and root cause detection, all from a single web dashboard backed by a bundled Prometheus and ClickHouse.

Getting Started

1. Launch the image on your chosen Azure VM size (Standard_B4ms or larger recommended) 2. Read the per-VM admin password from /root/coroot-credentials.txt 3. Browse to the VM public IP and sign in as admin to explore the service map and dashboards 4. Point additional Coroot agents at the VM to observe more hosts or a Kubernetes cluster

Licensing and Pricing

Coroot Community Edition, Prometheus and ClickHouse are all licensed under Apache-2.0 and are free; there is no per-seat or per-host fee, and no enterprise licence key is required. The cloudimg charge of 0.04 US dollars per vCPU hour covers packaging, security patching, image maintenance, and 24/7 expert support. Coroot serves plain HTTP on port 80; terminate TLS in front of it with your own domain before production.

cloudimg Support

24/7 technical support by email covers deployment, upgrades, storage tuning, reverse proxy configuration, and TLS termination. Critical issues receive a one-hour average response time.

Coroot is a trademark of Coroot, Inc. This image is provided by cloudimg and is not affiliated with, endorsed by, or sponsored by Coroot, Inc. Use of the name does not imply any affiliation with or endorsement by them.