/
Dockerfile
72 lines (71 loc) · 2.38 KB
/
Dockerfile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
FROM openjdk:8-jre-alpine as build
ENV ES_TMPDIR "/tmp"
ENV ES_VERSION 6.7.1
ENV SG_VERSION "25.0"
ENV DOWNLOAD_URL "https://artifacts.elastic.co/downloads/elasticsearch"
ENV ES_TARBAL "${DOWNLOAD_URL}/elasticsearch-${ES_VERSION}.tar.gz"
# Install Elasticsearch.
RUN apk add --no-cache --update bash ca-certificates su-exec util-linux curl openssl rsync tar
RUN apk add --no-cache -t .build-deps gnupg
RUN mkdir /install \
&& cd /install
RUN echo "${ES_TARBAL}"
RUN curl -o elasticsearch.tar.gz -Lkj "${ES_TARBAL}";
RUN tar -xzvf elasticsearch.tar.gz
RUN mv elasticsearch-$ES_VERSION /elasticsearch
# Install searchguard
RUN /elasticsearch/bin/elasticsearch-plugin install -b "com.floragunn:search-guard-6:$ES_VERSION-$SG_VERSION"
# Cleanup install
RUN rm -rf /install \
&& rm /elasticsearch/config/elasticsearch.yml \
&& rm -rf /elasticsearch/modules/x-pack-ml \
&& rm -rf /elasticsearch/modules/x-pack-security \
&& apk del --purge .build-deps
# Copy default config
RUN mkdir -p /.backup/elasticsearch/
COPY config /.backup/elasticsearch/config
COPY ./src/ /run/
RUN chmod +x -R /run/
FROM openjdk:8-jre-alpine
LABEL maintainer="Guillaume Simonneau <simonneaug@gmail.com>"
LABEL description="elasticsearch search-guard"
RUN apk add --no-cache --update bash ca-certificates su-exec openssl rsync curl
COPY --from=build /elasticsearch /elasticsearch
COPY --from=build /run /run
COPY --from=build /.backup/elasticsearch/config /.backup/elasticsearch/config
# set user
RUN adduser -DH -s /sbin/nologin elasticsearch \
&& for path in \
/elasticsearch/config \
/elasticsearch/config/scripts \
/elasticsearch/plugins \
; do \
mkdir -p "$path"; \
chown -R elasticsearch:elasticsearch "$path"; \
done
ENV PATH="/elasticsearch/bin:$PATH" \
CLUSTER_NAME="elasticsearch-default" \
MINIMUM_MASTER_NODES=1 \
HOSTS="127.0.0.1, [::1]" \
NODE_NAME=NODE-1 \
NODE_MASTER=true \
NODE_DATA=true \
NODE_INGEST=true \
HTTP_CORS_ENABLE=true \
HTTP_CORS_ALLOW_ORIGIN=* \
NETWORK_HOST="0.0.0.0" \
ELASTIC_PWD="changeme" \
KIBANA_PWD="changeme" \
LOGSTASH_PWD="changeme" \
BEATS_PWD="changeme" \
CA_PWD="changeme" \
TS_PWD="changeme" \
KS_PWD="changeme" \
HTTP_SSL=true \
LOG_LEVEL=INFO \
SG_ENTERPRISE_ENABLED=false
VOLUME /elasticsearch/config
VOLUME /elasticsearch/data
EXPOSE 9200 9300
ENTRYPOINT ["/run/entrypoint.sh"]
CMD ["elasticsearch"]