Bitnami/containers
2
0
Fork 0
mirror of https://github.com/bitnami/containers.git synced 2026-02-12 23:27:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/opensearch] Release 1.3.13-debian-11-r14 (#55103)

Browse Source 
Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>
This commit is contained in:
Bitnami Bot
2024-01-20 03:06:13 +01:00
committed by GitHub
parent 27c0810c3c
commit ac0e0096a7
4 changed files with 89 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
bitnami/opensearch/1/debian-11/Dockerfile
View File

@@ -9,10 +9,10 @@ ARG TARGETARCH
LABEL com.vmware.cp.artifact.flavor="sha256:1e1b4657a77f0d47e9220f0c37b9bf7802581b93214fff7d1bd2364c8bf22e8e" \
org.opencontainers.image.base.name="docker.io/bitnami/minideb:bullseye" \
org.opencontainers.image.created="2023-12-24T09:36:28Z" \
org.opencontainers.image.created="2024-01-20T01:15:02Z" \
org.opencontainers.image.description="Application packaged by VMware, Inc" \
org.opencontainers.image.licenses="Apache-2.0" \
org.opencontainers.image.ref.name="1.3.13-debian-11-r13" \
org.opencontainers.image.ref.name="1.3.13-debian-11-r14" \
org.opencontainers.image.title="opensearch" \
org.opencontainers.image.vendor="VMware, Inc." \
org.opencontainers.image.version="1.3.13"
@@ -29,8 +29,8 @@ SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]
RUN install_packages ca-certificates curl libgcc-s1 libgomp1 libstdc++6 procps zlib1g
RUN mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ ; \
COMPONENTS=( \
"yq-4.40.5-0-linux-${OS_ARCH}-debian-11" \
"java-17.0.9-11-6-linux-${OS_ARCH}-debian-11" \
"yq-4.40.5-1-linux-${OS_ARCH}-debian-11" \
"java-17.0.10-13-0-linux-${OS_ARCH}-debian-11" \
"opensearch-1.3.13-0-linux-${OS_ARCH}-debian-11" \
) ; \
for COMPONENT in "${COMPONENTS[@]}"; do \
@@ -45,6 +45,7 @@ RUN mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ ; \
RUN apt-get update && apt-get upgrade -y && \
apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives
RUN chmod g+rwX /opt/bitnami
RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true
COPY rootfs /
RUN /opt/bitnami/scripts/opensearch/postunpack.sh

4
bitnami/opensearch/1/debian-11/prebuildfs/opt/bitnami/.bitnami_components.json
View File

@@ -3,7 +3,7 @@
"arch": "amd64",
"distro": "debian-11",
"type": "NAMI",
"version": "17.0.9-11-6"
"version": "17.0.10-13-0"
},
"opensearch": {
"arch": "amd64",
@@ -15,6 +15,6 @@
"arch": "amd64",
"distro": "debian-11",
"type": "NAMI",
"version": "4.40.5-0"
"version": "4.40.5-1"
}
}

2
bitnami/opensearch/1/debian-11/prebuildfs/usr/sbin/run-script
View File

@@ -10,7 +10,7 @@ fi
script=$1
exit_code="${2:-96}"
fail_if_not_present="${3:-y}"
fail_if_not_present="${3:-n}"
if test -f "$script"; then
sh $script

108
bitnami/opensearch/README.md
View File

@@ -13,13 +13,6 @@ Trademarks: This software listing is packaged by Bitnami. The respective tradema
docker run --name opensearch bitnami/opensearch:latest
```
### Docker Compose
```console
curl -sSL https://raw.githubusercontent.com/bitnami/containers/main/bitnami/opensearch/docker-compose.yml > docker-compose.yml
docker-compose up -d
```
You can find the available configuration options in the [Environment Variables](#environment-variables) section.
## Why use Bitnami Images?
@@ -184,6 +177,80 @@ docker-compose up -d
### Environment variables
#### Customizable environment variables
| Name | Description | Default Value |
|------------------------------------------------|---------------------------------------------------------------------------------------------------------------------|---------------------------------------------|
| `OPENSEARCH_CERTS_DIR` | Path to certificates folder. | `${DB_CONF_DIR}/certs` |
| `OPENSEARCH_HEAP_SIZE` | Opensearch heap size | `1024m` |
| `OPENSEARCH_MAX_ALLOWED_MEMORY_PERCENTAGE` | Opensearch maximum allowed memory percentage | `100` |
| `OPENSEARCH_MAX_TIMEOUT` | Opensearch maximum init timeout | `60` |
| `OPENSEARCH_LOCK_ALL_MEMORY` | Sets bootstrap.memory_lock parameter | `no` |
| `OPENSEARCH_DISABLE_JVM_HEAP_DUMP` | Disable JVM Heap dump | `no` |
| `OPENSEARCH_DISABLE_GC_LOGS` | Disable GC logs | `no` |
| `OPENSEARCH_IS_DEDICATED_NODE` | If false, Opensearch will be configured with all the roles, deploy as dedicated node using DB_NODE_ROLES. | `no` |
| `OPENSEARCH_TRANSPORT_PORT_NUMBER` | Opensearch node port number | `9300` |
| `OPENSEARCH_HTTP_PORT_NUMBER` | Opensearch port | `9200` |
| `OPENSEARCH_ENABLE_SECURITY` | Enable Opensearch security settings. | `false` |
| `OPENSEARCH_PASSWORD` | Password for "admin" user. | `bitnami` |
| `OPENSEARCH_TLS_VERIFICATION_MODE` | Opensearch TLS verification mode in transport layer. | `full` |
| `OPENSEARCH_TLS_USE_PEM` | Configure Security settings using PEM certificates. | `false` |
| `OPENSEARCH_KEYSTORE_LOCATION` | Path to Keystore | `${DB_CERTS_DIR}/opensearch.keystore.jks` |
| `OPENSEARCH_TRUSTSTORE_LOCATION` | Path to Truststore. | `${DB_CERTS_DIR}/opensearch.truststore.jks` |
| `OPENSEARCH_NODE_CERT_LOCATION` | Path to PEM node certificate. | `${DB_CERTS_DIR}/tls.crt` |
| `OPENSEARCH_NODE_KEY_LOCATION` | Path to PEM node key. | `${DB_CERTS_DIR}/tls.key` |
| `OPENSEARCH_CA_CERT_LOCATION` | Path to CA certificate. | `${DB_CERTS_DIR}/ca.crt` |
| `OPENSEARCH_SKIP_TRANSPORT_TLS` | Skips transport layer TLS configuration. Useful when deploying single-node clusters. | `false` |
| `OPENSEARCH_TRANSPORT_TLS_USE_PEM` | Configure transport layer TLS settings using PEM certificates. | `$DB_TLS_USE_PEM` |
| `OPENSEARCH_TRANSPORT_TLS_KEYSTORE_PASSWORD` | Password for the Opensearch transport layer TLS keystore containing the certificates or password-protected PEM key. | `$DB_KEYSTORE_PASSWORD` |
| `OPENSEARCH_TRANSPORT_TLS_TRUSTSTORE_PASSWORD` | Password for the Opensearch transport layer TLS truststore. | `$DB_TRUSTSTORE_PASSWORD` |
| `OPENSEARCH_TRANSPORT_TLS_KEY_PASSWORD` | Password for the Opensearch transport layer TLS node PEM key. | `$DB_KEY_PASSWORD` |
| `OPENSEARCH_TRANSPORT_TLS_KEYSTORE_LOCATION` | Path to Keystore for transport layer TLS. | `$DB_KEYSTORE_LOCATION` |
| `OPENSEARCH_TRANSPORT_TLS_TRUSTSTORE_LOCATION` | Path to Truststore for transport layer TLS. | `$DB_TRUSTSTORE_LOCATION` |
| `OPENSEARCH_TRANSPORT_TLS_NODE_CERT_LOCATION` | Path to PEM node certificate for transport layer TLS. | `$DB_NODE_CERT_LOCATION` |
| `OPENSEARCH_TRANSPORT_TLS_NODE_KEY_LOCATION` | Path to PEM node key for transport layer TLS. | `$DB_NODE_KEY_LOCATION` |
| `OPENSEARCH_TRANSPORT_TLS_CA_CERT_LOCATION` | Path to CA certificate for transport layer TLS. | `$DB_CA_CERT_LOCATION` |
| `OPENSEARCH_ENABLE_REST_TLS` | Enable TLS encryption for REST API communications. | `true` |
| `OPENSEARCH_HTTP_TLS_USE_PEM` | Configure HTTP TLS settings using PEM certificates. | `$DB_TLS_USE_PEM` |
| `OPENSEARCH_HTTP_TLS_KEYSTORE_PASSWORD` | Password for the Opensearch HTTP TLS keystore containing the certificates or password-protected PEM key. | `$DB_KEYSTORE_PASSWORD` |
| `OPENSEARCH_HTTP_TLS_TRUSTSTORE_PASSWORD` | Password for the Opensearch HTTP TLS truststore. | `$DB_TRUSTSTORE_PASSWORD` |
| `OPENSEARCH_HTTP_TLS_KEY_PASSWORD` | Password for the Opensearch HTTP TLS node PEM key. | `$DB_KEY_PASSWORD` |
| `OPENSEARCH_HTTP_TLS_KEYSTORE_LOCATION` | Path to Keystore for HTTP TLS. | `$DB_KEYSTORE_LOCATION` |
| `OPENSEARCH_HTTP_TLS_TRUSTSTORE_LOCATION` | Path to Truststore for HTTP TLS. | `$DB_TRUSTSTORE_LOCATION` |
| `OPENSEARCH_HTTP_TLS_NODE_CERT_LOCATION` | Path to PEM node certificate for HTTP TLS. | `$DB_NODE_CERT_LOCATION` |
| `OPENSEARCH_HTTP_TLS_NODE_KEY_LOCATION` | Path to PEM node key for HTTP TLS. | `$DB_NODE_KEY_LOCATION` |
| `OPENSEARCH_HTTP_TLS_CA_CERT_LOCATION` | Path to CA certificate for HTTP TLS. | `$DB_CA_CERT_LOCATION` |
| `OPENSEARCH_SECURITY_DIR` | Root directory of the Opensearch Security plugin. | `${DB_PLUGINS_DIR}/opensearch-security` |
| `OPENSEARCH_SECURITY_CONF_DIR` | Configuration directory of the Opensearch Security plugin. | `${DB_CONF_DIR}/opensearch-security` |
| `OPENSEARCH_DASHBOARDS_PASSWORD` | Password for the Opensearch-dashboards user. | `bitnami` |
| `LOGSTASH_PASSWORD` | Password for the Logstash user. | `bitnami` |
| `OPENSEARCH_SET_CGROUP` | Configure Opensearch java opts with cgroup hierarchy override, so cgroup statistics are available in the container. | `true` |
| `OPENSEARCH_SECURITY_BOOTSTRAP` | If set to true, this node will be configured with instructions to bootstrap the Opensearch security config. | `false` |
| `OPENSEARCH_SECURITY_ADMIN_CERT_LOCATION` | Path to the Opensearch Admin PEM certificate. | `${DB_CERTS_DIR}/admin.crt` |
| `OPENSEARCH_SECURITY_ADMIN_KEY_LOCATION` | Path to the Opensearch Admin PEM key. | `${DB_CERTS_DIR}/admin.key` |
#### Read-only environment variables
| Name | Description | Value |
|----------------------------------|-----------------------------------------------------------------|---------------------------------|
| `DB_FLAVOR` | Database flavor. Valid values: `elasticsearch` or `opensearch`. | `opensearch` |
| `OPENSEARCH_VOLUME_DIR` | Persistence base directory | `/bitnami/opensearch` |
| `OPENSEARCH_BASE_DIR` | Opensearch installation directory | `/opt/bitnami/opensearch` |
| `OPENSEARCH_CONF_DIR` | Opensearch configuration directory | `${DB_BASE_DIR}/config` |
| `OPENSEARCH_LOGS_DIR` | Opensearch logs directory | `${DB_BASE_DIR}/logs` |
| `OPENSEARCH_PLUGINS_DIR` | Opensearch plugins directory | `${DB_BASE_DIR}/plugins` |
| `OPENSEARCH_DATA_DIR` | Opensearch data directory | `${DB_VOLUME_DIR}/data` |
| `OPENSEARCH_TMP_DIR` | Opensearch temporary directory | `${DB_BASE_DIR}/tmp` |
| `OPENSEARCH_BIN_DIR` | Opensearch executables directory | `${DB_BASE_DIR}/bin` |
| `OPENSEARCH_MOUNTED_PLUGINS_DIR` | Directory where plugins are mounted | `${DB_VOLUME_DIR}/plugins` |
| `OPENSEARCH_CONF_FILE` | Path to Opensearch configuration file | `${DB_CONF_DIR}/opensearch.yml` |
| `OPENSEARCH_LOG_FILE` | Path to the Opensearch log file | `${DB_LOGS_DIR}/opensearch.log` |
| `OPENSEARCH_PID_FILE` | Path to the Opensearch pid file | `${DB_TMP_DIR}/opensearch.pid` |
| `OPENSEARCH_INITSCRIPTS_DIR` | Path to the Opensearch container init scripts directory | `/docker-entrypoint-initdb.d` |
| `OPENSEARCH_DAEMON_USER` | Opensearch system user | `opensearch` |
| `OPENSEARCH_DAEMON_GROUP` | Opensearch system group | `opensearch` |
| `OPENSEARCH_USERNAME` | Username of the Opensearch superuser. | `admin` |
When you start the opensearch image, you can adjust the configuration of the instance by passing one or more environment variables either on the docker-compose file or on the `docker run` command line. If you want to add a new environment variable:
* For Docker Compose, add the variable name and value under the application section:
@@ -206,25 +273,6 @@ opensearch:
bitnami/opensearch
```
Available variables:
* `BITNAMI_DEBUG`: Increase verbosity on initialization logs. Default **false**
* `OPENSEARCH_EXTRA_FLAGS`: Extra command-line arguments for the `opensearch` daemon
* `OPENSEARCH_CLUSTER_NAME`: The OpenSearch Cluster Name. Default: **opensearch-cluster**
* `OPENSEARCH_CLUSTER_HOSTS`: List of opensearch hosts to set the cluster. Available separators are ' ', ',' and ';'. No defaults.
* `OPENSEARCH_CLUSTER_MASTER_HOSTS`: List of opensearch master-eligible hosts. Available separators are ' ', ',' and ';'. If no values are provided, it will have the same value as `OPENSEARCH_CLUSTER_HOSTS`.
* `OPENSEARCH_IS_DEDICATED_NODE`: OpenSearch node to behave as a 'dedicated node'. Default: **no**
* `OPENSEARCH_NODE_TYPE`: OpenSearch node type when behaving as a 'dedicated node'. Valid values: *master*, *data*, *coordinating* or *ingest*.
* `OPENSEARCH_NODE_NAME`: OpenSearch node name. No defaults.
* `OPENSEARCH_BIND_ADDRESS`: Address/interface to bind by OpenSearch. Default: **0.0.0.0**
* `OPENSEARCH_PORT_NUMBER`: OpenSearch port. Default: **9200**
* `OPENSEARCH_NODE_PORT_NUMBER`: OpenSearch Node to Node port. Default: **9300**
* `OPENSEARCH_PLUGINS`: Comma, semi-colon or space separated list of plugins to install at initialization. No defaults.
* `OPENSEARCH_KEYS`: Comma, semi-colon or space separated list of key-value pairs (key=value) to store. No defaults.
* `OPENSEARCH_HEAP_SIZE`: Memory used for the Xmx and Xms java heap values. Default: **1024m**
* `OPENSEARCH_FS_SNAPSHOT_REPO_PATH`: OpenSearch file system snapshot repository path. No defaults.
* `OPENSEARCH_DATA_DIR_LIST`: Comma, semi-colon or space separated list of directories to use for data storage. No defaults.
### Setting up a cluster
A cluster can easily be setup with the Bitnami OpenSearch Docker Image using the following environment variables:
@@ -442,6 +490,12 @@ or using Docker Compose:
docker-compose up opensearch
```
## Using `docker-compose.yaml`
Please be aware this file has not undergone internal testing. Consequently, we advise its use exclusively for development or testing purposes. For production-ready deployments, we highly recommend utilizing its associated [Bitnami Helm chart](https://github.com/bitnami/charts/tree/main/bitnami/opensearch).
If you detect any issue in the `docker-compose.yaml` file, feel free to report it or contribute with a fix by following our [Contributing Guidelines](https://github.com/bitnami/containers/blob/main/CONTRIBUTING.md).
## Contributing
We'd love for you to contribute to this Docker image. You can request new features by creating an [issue], or submitting a [pull request](https://github.com/bitnami/containers/pulls) with your contribution.
@@ -458,7 +512,7 @@ If you encountered a problem running this container, you can file an [issue](htt
## License
Copyright &copy; 2023 Bitnami
Copyright &copy; 2024 Bitnami
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.