truebyteinnovationllp/influxdb repository overview

⁠InfluxDB — hardened, built from source

Minimal, security-hardened InfluxDB OSS v2 for time-series data (metrics, events, IoT, monitoring). Compiled from source on Alpine with a patched dependency graph, runs non-root, statically linked, multi-arch (amd64 + arm64), and scans clean (0 HIGH/CRITICAL) on Docker Scout and Trivy.

Ships in two flavors — minimal (API-only) and with the embedded web UI — selected purely by which tag you pull.

⁠Which tag should I use?

• Plain version = no UI. -ui suffix = with UI. Same server either way; the only difference is whether the web UI is compiled in.
• Pin 2.9.1 / 2.9.1-ui for reproducible deploys; latest / latest-ui track the newest build.

⁠Ports

⁠Data & config (persist these)

Runs as non-root uid/gid 1500; make mounted dirs writable by that uid.

⁠Quick start

With the web UI (easiest to explore):

docker run -d --name influxdb \
  -p 8086:8086 \
  -v influxdb-data:/var/lib/influxdb2 \
  truebyteinnovationllp/influxdb:2.9.1-ui

Then open http://localhost:8086/⁠ and complete the setup wizard.

Headless / API-only (production):

docker run -d --name influxdb \
  -p 8086:8086 \
  -v influxdb-data:/var/lib/influxdb2 \
  truebyteinnovationllp/influxdb:2.9.1

First-time setup via the API (no UI needed):

curl -s -XPOST http://localhost:8086/api/v2/setup \
  -H 'Content-Type: application/json' \
  -d '{"username":"admin","password":"<strong-password>",
       "org":"my-org","bucket":"default","retentionPeriodSeconds":0}'

Check it's up:

curl -s http://localhost:8086/health
# {"name":"influxdb","status":"pass",...}

⁠Configuration

All InfluxDB v2 options are settable via INFLUXD_* env vars. Common ones:

Full reference: https://docs.influxdata.com/influxdb/v2/reference/config-options/⁠

⁠Hardened deployment

Read-only root filesystem (only the data volume stays writable):

docker run -d --name influxdb \
  --read-only \
  --cap-drop ALL \
  --security-opt no-new-privileges \
  -p 8086:8086 \
  -v influxdb-data:/var/lib/influxdb2 \
  truebyteinnovationllp/influxdb:2.9.1

Notes

• Non-root (uid 1500), compatible with restricted PodSecurity / read-only rootfs.
• Server only — the separate influx CLI is not bundled; use the UI, the HTTP API, Grafana, or Terraform.

⁠Security & CVE scope

The server (Go binary) and Alpine layer are rebuilt with Go 1.26 and patched dependencies, so both flavors report 0 HIGH/CRITICAL on Docker Scout and Trivy. Honest caveat: the UI flavor embeds a prebuilt front-end (JS/CSS) bundle inside the binary — image scanners don't inspect bundled JS, so its npm dependencies are a detection gap, tracked upstream in influxdata/ui, not a guarantee. The minimal (no-UI) flavor has no such surface.

Images are published multi-arch with SBOM + provenance attestations.

⁠Facts

Docs: https://docs.influxdata.com/influxdb/v2/⁠ · Maintained by TrueByte Innovation.