mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-04-29 11:48:52 +00:00
de38e5e86f
Setting static limits for Elasticsearch / Logstash on Xms, Xmx and Container RAM results in unwanted side effects for some installations. With Elastic supporting dynamic heap management for Java 14+ we now use OpenJDK 16 JRE and as such remove limitations. This should improve stability for T-Pot, provided the minimum requirements will be met.
48 lines
1.5 KiB
Docker
48 lines
1.5 KiB
Docker
FROM alpine:3.13
|
|
#
|
|
# VARS
|
|
ENV ES_VER=7.12.1 \
|
|
ES_JAVA_HOME=/usr/lib/jvm/java-16-openjdk
|
|
# Include dist
|
|
ADD dist/ /root/dist/
|
|
#
|
|
# Setup env and apt
|
|
#RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
|
|
RUN apk -U --no-cache add \
|
|
aria2 \
|
|
bash \
|
|
curl \
|
|
nss && \
|
|
# openjdk16-jre && \
|
|
apk add --no-cache -X http://dl-cdn.alpinelinux.org/alpine/edge/testing openjdk16-jre && \
|
|
#
|
|
# Get and install packages
|
|
cd /root/dist/ && \
|
|
mkdir -p /usr/share/elasticsearch/ && \
|
|
aria2c -s 16 -x 16 https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-$ES_VER-linux-x86_64.tar.gz && \
|
|
tar xvfz elasticsearch-$ES_VER-linux-x86_64.tar.gz --strip-components=1 -C /usr/share/elasticsearch/ && \
|
|
#
|
|
# Add and move files
|
|
cd /root/dist/ && \
|
|
mkdir -p /usr/share/elasticsearch/config && \
|
|
cp elasticsearch.yml /usr/share/elasticsearch/config/ && \
|
|
#
|
|
# Setup user, groups and configs
|
|
addgroup -g 2000 elasticsearch && \
|
|
adduser -S -H -s /bin/ash -u 2000 -D -g 2000 elasticsearch && \
|
|
chown -R elasticsearch:elasticsearch /usr/share/elasticsearch/ && \
|
|
rm -rf /usr/share/elasticsearch/jdk && \
|
|
rm -rf /usr/share/elasticsearch/modules/x-pack-ml && \
|
|
#
|
|
# Clean up
|
|
apk del --purge aria2 && \
|
|
rm -rf /root/* && \
|
|
rm -rf /tmp/* && \
|
|
rm -rf /var/cache/apk/*
|
|
#
|
|
# Healthcheck
|
|
HEALTHCHECK --retries=10 CMD curl -s -XGET 'http://127.0.0.1:9200/_cat/health'
|
|
#
|
|
# Start ELK
|
|
USER elasticsearch:elasticsearch
|
|
CMD ["/usr/share/elasticsearch/bin/elasticsearch"]
|