yahoo_1999/fk-wazuh
1
0
Fork 0
forked from wazuh/wazuh-docker
Code Pull Requests Activity

Add Wazuh indexer cluster configuration

Browse Source
This commit is contained in:
vcerenu
2022-02-04 17:37:58 -03:00
parent d0476d3f35
commit efed32f997
23 changed files with 484 additions and 416 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wazuh-indexer/Dockerfile_new
+46 -11
View File
@@ -1,8 +1,8 @@
FROM centos:7 AS builder
FROM ubuntu:focal AS builder
ENV tini_bin="tini-amd64"
RUN yum install initscripts curl -y
RUN apt-get update -y && apt-get install curl -y
RUN curl --retry 8 -S -L -O https://github.com/krallin/tini/releases/download/v0.19.0/${tini_bin}
RUN curl --retry 8 -S -L -O https://github.com/krallin/tini/releases/download/v0.19.0/${tini_bin}.sha256sum
@@ -19,8 +19,10 @@ RUN sha256sum -c ${tini_bin}.sha256sum && \
#RUN chmod 0775 config config/jvm.options.d data logs
#COPY config/opensearch.yml config/log4j2.properties config/
#RUN chmod 0660 config/opensearch.yml config/log4j2.properties
COPY config/config.sh .
RUN bash config.sh
COPY config/unattended_installer.tar.gz /
COPY config/config2.sh .
RUN tar -xzvf /unattended_installer.tar.gz
RUN bash config2.sh
################################################################################
# Build stage 1 (the actual OpenSearch image):
@@ -28,15 +30,48 @@ RUN bash config.sh
# Copy opensearch from stage 0
# Add entrypoint
################################################################################
FROM alpine
FROM ubuntu:focal
ENV USER="wazuh-indexer" \
GROUP="wazuh-indexer" \
NAME="wazuh-indexer" \
INSTALL_DIR="/usr/share/wazuh-indexer"
RUN addgroup --system --gid 1000 $GROUP && \
adduser -u 1000 -G $GROUP -D -h $INSTALL_DIR $USER && \
chmod 0775 $INSTALL_DIR
#chown -R 1000:0 $INSTALL_DIR
RUN getent group $GROUP || groupadd -r -g 1000 $GROUP
RUN useradd --system \
--uid 1000 \
--no-create-home \
--home-dir $INSTALL_DIR \
--gid $GROUP \
--shell /sbin/nologin \
--comment "$USER user" \
$USER
WORKDIR $INSTALL_DIR
COPY --from=builder --chown=1000:0 /usr/share/wazuh-indexer /usr/share/wazuh-indexer
COPY --from=builder --chown=0:0 /tini /tini
COPY config/entrypoint_OS.sh /
RUN chmod 700 /entrypoint_OS.sh
COPY --from=builder --chown=1000:1000 /debian/wazuh-indexer/usr/share/wazuh-indexer /usr/share/wazuh-indexer
COPY --from=builder --chown=0:0 /tini /tini
COPY --from=builder --chown=0:0 /debian/wazuh-indexer/etc/init.d/wazuh-indexer /etc/init.d/wazuh-indexer
COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/systemd /usr/lib/systemd
COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/sysctl.d /usr/lib/sysctl.d
COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/tmpfiles.d /usr/lib/tmpfiles.d
COPY --from=builder --chown=1000:10000 /debian/wazuh-indexer/etc/wazuh-indexer /etc/wazuh-indexer
RUN mkdir -p /var/lib/wazuh-indexer && chown 1000:1000 /var/lib/wazuh-indexer && \
mkdir -p /usr/share/wazuh-indexer/logs && chown 1000:1000 /usr/share/wazuh-indexer/logs && \
mkdir -p /run/wazuh-indexer && chown 1000:1000 /run/wazuh-indexer && \
mkdir -p /var/log/wazuh-indexer && chown 1000:1000 /var/log/wazuh-indexer
# Services ports
EXPOSE 9700
#ENTRYPOINT [ "/entrypoint.sh" ]
ENTRYPOINT ["/tini", "--", "/entrypoint_OS.sh"]
# Dummy overridable parameter parsed by entrypoint
CMD ["opensearchwrapper"]