46 lines
1.4 KiB
Django/Jinja
46 lines
1.4 KiB
Django/Jinja
FROM {{ namespace }}/{{ image_prefix }}base:{{ tag }}
|
|
MAINTAINER {{ maintainer }}
|
|
|
|
{% block elasticsearch_header %}{% endblock %}
|
|
|
|
{% import "macros.j2" as macros with context %}
|
|
|
|
{% if base_distro in ['centos', 'oraclelinux', 'rhel'] %}
|
|
{% set elasticsearch_packages = [
|
|
'java-1.7.0-openjdk',
|
|
'elasticsearch'
|
|
] %}
|
|
|
|
ENV JAVA_HOME /usr/lib/jvm/jre-1.7.0-openjdk/
|
|
|
|
{% elif base_distro in ['ubuntu', 'debian'] %}
|
|
{% set elasticsearch_packages = [
|
|
'openjdk-8-jre',
|
|
'elasticsearch'
|
|
] %}
|
|
|
|
ENV JAVA_HOME /usr/lib/jvm/java-8-openjdk-amd64/
|
|
|
|
{% endif %}
|
|
|
|
{{ macros.install_packages(elasticsearch_packages | customizable("packages")) }}
|
|
COPY elasticsearch_sudoers /etc/sudoers.d/kolla_elasticsearch_sudoers
|
|
COPY extend_start.sh /usr/local/bin/kolla_extend_start
|
|
|
|
# NOTE: By default the shell of the elasticsearch user is /bin/false. We have to
|
|
# change the shell to /bin/bash to be able to run elasticsearch as a non-root user.
|
|
#
|
|
# https://discuss.elastic.co/t/running-as-non-root-user-service-wrapper-has-changed/7863
|
|
|
|
RUN chmod 755 /usr/local/bin/kolla_extend_start \
|
|
&& chmod 750 /etc/sudoers.d \
|
|
&& chmod 440 /etc/sudoers.d/kolla_elasticsearch_sudoers \
|
|
&& usermod -a -G kolla elasticsearch \
|
|
&& usermod -s /bin/bash elasticsearch -d /usr/share/elasticsearch
|
|
|
|
{% block elasticsearch_footer %}{% endblock %}
|
|
{% block footer %}{% endblock %}
|
|
{{ include_footer }}
|
|
|
|
USER elasticsearch
|