MySQL 8 on Ubuntu 24.04 LTS

What's included

• MySQL 8.0 community server (Ubuntu 24.04 package), production configuration
• Ubuntu 24.04 LTS base with unattended security updates
• Trusted Launch: Secure Boot + vTPM supported
• Unique per-VM root password generated at first boot — no shared password in the image
• Bound to localhost until you create users and change bind-address
• Works with Azure Key Vault + Managed Identity for credential rotation

Quick start

1. SSH into the VM with the username and key you chose at deploy.
2. MySQL 8 runs as the `mysql` systemd service on port 3306, bound to 127.0.0.1 (Ubuntu default); the in-image ufw allows 3306, the NSG does not until you open it.
3. Connect locally with `mysql -h 127.0.0.1 -u root -p` using the generated password (command below; images from 21 October 2026 onward make you set a new root password first, see First login), create your application user and schema, then set bind-address in /etc/mysql/mysql.conf.d/mysqld.cnf and open 3306 to your app tier only.

Get your admin password (one time)

ssh <your-username>@<VM-IP>
sudo cat /root/.mysql-initial-password

This is the MySQL root password set at first boot (root@localhost uses caching_sha2_password, so plain `sudo mysql` is refused). Connect with `mysql -h 127.0.0.1 -u root -p`. Images from 21 October 2026 onward make you set a new root password before anything else (`ALTER USER USER() IDENTIFIED BY …`); on older images change it with ALTER USER yourself. Delete the file once the new password is stored securely.