ArcadeDB 26.7

Search Azure Marketplace for ArcadeDB, select the SecureAnyCloud publisher entry, and click Create.

Configure the network security group (NSG) to allow TCP 22 from your management IP and TCP 80 from your client IPs. The ArcadeDB HTTP listener is bound to loopback, so only nginx on port 80 is exposed. Do not expose port 80 to the public internet without a TLS-terminating reverse proxy in front.

RG="arcadedb-prod"; LOCATION="eastus"; VM_NAME="arcadedb-01" IMAGE_URN="sac1647283583153:arcadedb-ubuntu-24-04:default:latest" SSH_KEY="$(cat ~/.ssh/id_rsa.pub)" az group create --name "$RG" --location "$LOCATION" az network vnet create -g "$RG" --name arc-vnet --address-prefix 10.80.0.0/16 --subnet-name arc-subnet --subnet-prefix 10.80.1.0/24 az network nsg create -g "$RG" --name arc-nsg az network nsg rule create -g "$RG" --nsg-name arc-nsg --name allow-ssh --priority 100 \
  --source-address-prefixes "<your-mgmt-cidr>" --destination-port-ranges 22 --access Allow --protocol Tcp az network nsg rule create -g "$RG" --nsg-name arc-nsg --name allow-http --priority 110 \
  --source-address-prefixes "<your-client-cidr>" --destination-port-ranges 80 --access Allow --protocol Tcp
# Accept the Marketplace terms once per subscription (required before the first CLI deploy)
az vm image terms accept --urn sac1647283583153:arcadedb-ubuntu-24-04:default:latest
az vm create -g "$RG" --name "$VM_NAME" --image "$IMAGE_URN" \
  --size Standard_B2s --storage-sku StandardSSD_LRS \
  --admin-username azureuser --ssh-key-values "$SSH_KEY" \
  --vnet-name arc-vnet --subnet arc-subnet --nsg arc-nsg --public-ip-sku Standard

ssh azureuser@<vm-ip>

On first boot, arcadedb-firstboot.service generates the root password for the VM. Once it finishes, arcadedb.service and nginx.service start automatically.

sudo systemctl is-active arcadedb.service nginx.service
sudo test -f /var/lib/sac/data/arcadedb-firstboot.done && echo FIRSTBOOT_DONE
sudo systemctl status arcadedb.service --no-pager | head -8

Both services should report active, and the first-boot sentinel file should be present.

The ArcadeDB HTTP listener is bound to 127.0.0.1:2480 and nginx serves it on port 80. There is no open JMX or management port.

sudo journalctl -u arcadedb.service --no-pager | grep -E 'ArcadeDB Server started|Available query languages' | tail -2 sudo ss -tln | grep -E ':2480|:80 '

The root password for the VM is generated at first boot and stored in a root-only file. Display it with sudo:

sudo cat /root/arcadedb-credentials.txt

The file lists the root user, the password for the VM, and the endpoint URLs:

ARCADEDB_ROOT_USER=root ARCADEDB_ROOT_PASSWORD=<ARCADEDB_PASSWORD> ARCADEDB_STUDIO_URL=http://<vm-ip>/ ARCADEDB_HTTP_API_URL=http://<vm-ip>/api/v1/ ARCADEDB_DEMO_DATABASE=Demo

ArcadeDB exposes a full REST API. Extract the password into a shell variable, then run an authenticated query against the seeded Demo database:

PW=$(sudo grep '^ARCADEDB_ROOT_PASSWORD=' /root/arcadedb-credentials.txt | cut -d= -f2-)
curl -s -u "root:$PW" http://127.0.0.1/api/v1/databases
curl -s -u "root:$PW" -H 'Content-Type: application/json' -X POST http://127.0.0.1/api/v1/command/Demo \
  -d '{"language":"sql","command":"SELECT name, role FROM Person ORDER BY name"}'

The first call lists the databases (Demo). The second returns the three Person records from the sample graph.

ArcadeDB Studio is the built-in web workbench. From your workstation, open http://<vm-ip>/. This works when the NSG allows TCP 80. The sign-in page shows the multi-model overview and asks for a username and password:

Sign in with user root and the password for the VM from /root/arcadedb-credentials.txt. Studio connects to the Demo database and shows the Database Info panel with the seeded schema, Person vertices and Knows edges:

Type a query into the editor, choose a language (SQL, Cypher, Gremlin, GraphQL and more are available), and press Run. The Table view shows the returned records:

Switch the result view to Graph to explore vertices and their relationships visually. The Demo graph shows the Person vertices connected by directed Knows edges:

ArcadeDB runs several query languages against the same data. Create your own database and try a few of them. Extract the password first:

PW=$(sudo grep '^ARCADEDB_ROOT_PASSWORD=' /root/arcadedb-credentials.txt | cut -d= -f2-)
curl -s -u "root:$PW" -H 'Content-Type: application/json' -X POST http://127.0.0.1/api/v1/command/Demo \
  -d '{"language":"cypher","command":"MATCH (p:Person)-[:Knows]->(f:Person) RETURN p.name, f.name"}'

The same graph can be traversed with Cypher (as above), with SQL (SELECT expand(out('Knows')) FROM Person), or with Gremlin (g.V().hasLabel('Person').out('Knows').values('name')). ArcadeDB also speaks the MongoDB and Redis wire protocols for document and key-value access.

Component Path

Server home /opt/arcadedb

Start script /opt/arcadedb/bin/server.sh

Server environment /etc/default/arcadedb

Databases directory /var/lib/arcadedb/databases (dedicated data disk)

Server users file /opt/arcadedb/config/server-users.jsonl

Systemd unit /etc/systemd/system/arcadedb.service

Firstboot script /usr/local/sbin/arcadedb-firstboot.sh

Firstboot service /etc/systemd/system/arcadedb-firstboot.service

Credentials file /root/arcadedb-credentials.txt (mode 0600)

Firstboot sentinel /var/lib/sac/data/arcadedb-firstboot.done

nginx site /etc/nginx/sites-available/sac-arcadedb

sudo systemctl status arcadedb.service --no-pager | head -6 sudo journalctl -u arcadedb.service --no-pager | tail -5

To restart the service after a configuration change, run sudo systemctl restart arcadedb.service.

• Rotate the root password. Change it in Studio (Security tab) or through the API, and store it in your secrets manager.
• Keep the HTTP listener on loopback. Leave it as shipped, expose only nginx on port 80, and put TLS in front of it with Azure Application Gateway or nginx with a real certificate.
• Restrict the NSG. Allow port 80 only from trusted client networks, and never expose it to the public internet without TLS.
• Create per-application users and roles. Use the Security tab rather than the root account for application traffic.
• Back up the databases directory. Back up /var/lib/arcadedb/databases, or use ArcadeDB's built-in backup command.
• Patch the OS monthly. Run sudo apt-get update && sudo apt-get upgrade && sudo reboot.

ArcadeDB is licensed under the Apache License 2.0. There are no per-node, per-CPU or per-GB fees. This image is produced by SecureAnyCloud and is not affiliated with, endorsed by, or sponsored by Arcade Data Ltd. ArcadeDB is a trademark of its respective owner and is used here only to describe the software included in the image.

SecureAnyCloud provides commercial support for this image, separate from the upstream project.

Email: sales@secureanycloud.com

Website: secureanycloud.com

Support hours: 24/7, with a guaranteed 24-hour response SLA

Deploy on Azure

Launch ArcadeDB 26.7 Multi-Model Database on Ubuntu 24.04 with 24/7 support from SecureAnyCloud.

View on Marketplace

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on Azure

Launch ArcadeDB 26.7 Multi-Model Database on Ubuntu 24.04 LTS on Azure with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com