MySQL 8 on Ubuntu 24.04 LTS

What's included

• MySQL 8.0 community server (Ubuntu 24.04 package), production configuration
• Ubuntu 24.04 LTS base with unattended security updates
• Trusted Launch: Secure Boot + vTPM supported
• Unique per-VM root password generated at first boot — no shared password in the image
• Bound to localhost until you create users and change bind-address
• Works with Azure Key Vault + Managed Identity for credential rotation

Quick start

1. SSH into the VM with the username and key you chose at deploy.
2. MySQL 8 runs as the `mysql` systemd service on port 3306, bound to 127.0.0.1 (Ubuntu default); the in-image ufw allows 3306, the NSG does not until you open it.
3. Connect locally with `mysql -u root -p` using the generated password (command below), create your application user and schema, then set bind-address in /etc/mysql/mysql.conf.d/mysqld.cnf and open 3306 to your app tier only.

Get your admin password (one time)

ssh <your-username>@<VM-IP>
sudo cat /root/.mysql-initial-password

This is the MySQL root password set at first boot (root@localhost uses caching_sha2_password, so plain `sudo mysql` is refused). Connect with `mysql -u root -p`, change it with ALTER USER, and delete the file once stored securely.