-
Notifications
You must be signed in to change notification settings - Fork 216
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #516 from sandushi/add-rocky-linux-for-is-km
[IS-KM 5.10] Add rocky linux for IS km 5.10
- Loading branch information
Showing
3 changed files
with
260 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,153 @@ | ||
# ------------------------------------------------------------------------ | ||
# Copyright 2024 WSO2, LLC. (http://wso2.com) | ||
# | ||
# Licensed under the Apache License, Version 2.0 (the "License"); | ||
# you may not use this file except in compliance with the License. | ||
# You may obtain a copy of the License at | ||
# | ||
# http://www.apache.org/licenses/LICENSE-2.0 | ||
# | ||
# Unless required by applicable law or agreed to in writing, software | ||
# distributed under the License is distributed on an "AS IS" BASIS, | ||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
# See the License for the specific language governing permissions and | ||
# limitations under the License | ||
# ------------------------------------------------------------------------ | ||
|
||
# set base Docker image to CentOS Docker image | ||
FROM rockylinux:8 | ||
|
||
# Update the system to the specific 8.10 version | ||
RUN dnf -y update && \ | ||
dnf -y distro-sync && \ | ||
dnf clean all | ||
|
||
# Install necessary locale packages | ||
RUN yum install -y glibc-langpack-en && \ | ||
yum install -y langpacks-en glibc-locale-source && \ | ||
localedef -c -f UTF-8 -i en_US en_US.UTF-8 | ||
|
||
ENV LANG='en_US.UTF-8' LANGUAGE='en_US:en' LC_ALL='en_US.UTF-8' | ||
# install JDK Dependencies | ||
RUN yum install -y tzdata openssl curl ca-certificates fontconfig gzip tar \ | ||
&& yum clean all | ||
|
||
ENV JAVA_VERSION jdk-11.0.18+10 | ||
|
||
# install Temurin OpenJDK 11 | ||
RUN set -eux; \ | ||
ARCH="$(objdump="$(command -v objdump)" && objdump --file-headers "$objdump" | awk -F '[:,]+[[:space:]]+' '$1 == "architecture" { print $2 }')"; \ | ||
case "${ARCH}" in \ | ||
aarch64|arm64) \ | ||
ESUM='04d5eeff6a6449bcdca0f52cd97bafd43ce09d40ef1e73fa0e1add63bea4a9c8'; \ | ||
BINARY_URL='https://github.com/adoptium/temurin11-binaries/releases/download/jdk-11.0.18%2B10/OpenJDK11U-jdk_aarch64_linux_hotspot_11.0.18_10.tar.gz'; \ | ||
;; \ | ||
ppc64el|powerpc:common64) \ | ||
ESUM='459148d489b08ceec2d901e950ac36722b4c55e907e979291ddfc954ebdcea47'; \ | ||
BINARY_URL='https://github.com/adoptium/temurin11-binaries/releases/download/jdk-11.0.18%2B10/OpenJDK11U-jdk_ppc64le_linux_hotspot_11.0.18_10.tar.gz'; \ | ||
;; \ | ||
amd64|i386:x86-64) \ | ||
ESUM='4a29efda1d702b8ff38e554cf932051f40ec70006caed5c4857a8cbc7a0b7db7'; \ | ||
BINARY_URL='https://github.com/adoptium/temurin11-binaries/releases/download/jdk-11.0.18%2B10/OpenJDK11U-jdk_x64_linux_hotspot_11.0.18_10.tar.gz'; \ | ||
;; \ | ||
*) \ | ||
echo "Unsupported arch: ${ARCH}"; \ | ||
exit 1; \ | ||
;; \ | ||
esac; \ | ||
curl -LfsSo /tmp/openjdk.tar.gz ${BINARY_URL}; \ | ||
echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -; \ | ||
mkdir -p /opt/java/openjdk; \ | ||
cd /opt/java/openjdk; \ | ||
tar -xf /tmp/openjdk.tar.gz --strip-components=1; \ | ||
rm -rf /tmp/openjdk.tar.gz; | ||
|
||
ENV JAVA_HOME=/opt/java/openjdk \ | ||
PATH="/opt/java/openjdk/bin:$PATH" | ||
|
||
LABEL maintainer="WSO2 Docker Maintainers <dev@wso2.org>" \ | ||
com.wso2.docker.source="https://github.com/wso2/docker-apim/releases/tag/v3.1.0.7" | ||
|
||
# set Docker image build arguments | ||
# build arguments for user/group configurations | ||
ARG USER=wso2carbon | ||
ARG USER_ID=802 | ||
ARG USER_GROUP=wso2 | ||
ARG USER_GROUP_ID=802 | ||
ARG USER_HOME=/home/${USER} | ||
# build arguments for WSO2 product installation | ||
ARG WSO2_SERVER_NAME=wso2is-km | ||
ARG WSO2_SERVER_VERSION=5.10.0 | ||
ARG WSO2_SERVER_REPOSITORY=product-apim | ||
ARG WSO2_APIM_RELEASE_VERSION=3.1.0 | ||
ARG WSO2_SERVER=${WSO2_SERVER_NAME}-${WSO2_SERVER_VERSION} | ||
ARG WSO2_SERVER_HOME=${USER_HOME}/${WSO2_SERVER} | ||
ARG WSO2_SERVER_DIST_URL=https://github.com/wso2/${WSO2_SERVER_REPOSITORY}/releases/download/v${WSO2_APIM_RELEASE_VERSION}/${WSO2_SERVER}.zip | ||
# build arguments for external artifacts | ||
ARG DNS_JAVA_VERSION=3.6.1 | ||
ARG K8S_MEMBERSHIP_SCHEME_VERSION=1.0.7 | ||
ARG MYSQL_CONNECTOR_VERSION=8.0.17 | ||
# build argument for MOTD | ||
ARG MOTD='printf "\n\ | ||
Welcome to WSO2 Docker resources.\n\ | ||
------------------------------------ \n\ | ||
This Docker container comprises of a WSO2 product, running with its latest GA release \n\ | ||
which is under the Apache License, Version 2.0. \n\ | ||
Read more about Apache License, Version 2.0 here @ http://www.apache.org/licenses/LICENSE-2.0.\n\n"' | ||
|
||
# create the non-root user and group and set MOTD login message | ||
RUN \ | ||
groupadd --system -g ${USER_GROUP_ID} ${USER_GROUP} \ | ||
&& useradd --system --create-home --home-dir ${USER_HOME} --no-log-init -g ${USER_GROUP_ID} -u ${USER_ID} ${USER} \ | ||
&& echo ${MOTD} > /etc/profile.d/motd.sh | ||
|
||
# create Java prefs dir | ||
# this is to avoid warning logs printed by FileSystemPreferences class | ||
RUN \ | ||
mkdir -p ${USER_HOME}/.java/.systemPrefs \ | ||
&& mkdir -p ${USER_HOME}/.java/.userPrefs \ | ||
&& chmod -R 755 ${USER_HOME}/.java \ | ||
&& chown -R ${USER}:${USER_GROUP} ${USER_HOME}/.java | ||
|
||
# copy init script to user home | ||
COPY --chown=wso2carbon:wso2 docker-entrypoint.sh ${USER_HOME}/ | ||
# install required packages | ||
RUN \ | ||
yum -y update \ | ||
&& yum install -y \ | ||
nc \ | ||
unzip \ | ||
wget \ | ||
&& rm -rf /var/cache/yum/* | ||
|
||
# add the WSO2 product distribution to user's home directory | ||
RUN \ | ||
wget -O ${WSO2_SERVER}.zip "${WSO2_SERVER_DIST_URL}" \ | ||
&& unzip -d ${USER_HOME} ${WSO2_SERVER}.zip \ | ||
&& chown wso2carbon:wso2 -R ${WSO2_SERVER_HOME} \ | ||
&& rm -f ${WSO2_SERVER}.zip | ||
|
||
# add libraries for Kubernetes membership scheme based clustering | ||
ADD --chown=wso2carbon:wso2 https://repo1.maven.org/maven2/dnsjava/dnsjava/${DNS_JAVA_VERSION}/dnsjava-${DNS_JAVA_VERSION}.jar ${WSO2_SERVER_HOME}/repository/components/lib | ||
ADD --chown=wso2carbon:wso2 http://maven.wso2.org/nexus/content/repositories/releases/org/wso2/carbon/kubernetes/artifacts/kubernetes-membership-scheme/${K8S_MEMBERSHIP_SCHEME_VERSION}/kubernetes-membership-scheme-${K8S_MEMBERSHIP_SCHEME_VERSION}.jar ${WSO2_SERVER_HOME}/repository/components/dropins/ | ||
# add MySQL JDBC connector to server home as a third party library | ||
ADD --chown=wso2carbon:wso2 https://repo1.maven.org/maven2/mysql/mysql-connector-java/${MYSQL_CONNECTOR_VERSION}/mysql-connector-java-${MYSQL_CONNECTOR_VERSION}.jar ${WSO2_SERVER_HOME}/repository/components/dropins/ | ||
|
||
# set the user and work directory | ||
USER ${USER_ID} | ||
WORKDIR ${USER_HOME} | ||
|
||
# set environment variables | ||
ENV JAVA_OPTS="-Djava.util.prefs.systemRoot=${USER_HOME}/.java -Djava.util.prefs.userRoot=${USER_HOME}/.java/.userPrefs" \ | ||
WORKING_DIRECTORY=${USER_HOME} \ | ||
WSO2_SERVER_HOME=${WSO2_SERVER_HOME} | ||
|
||
# set environment variables | ||
ENV WORKING_DIRECTORY=${USER_HOME} \ | ||
WSO2_SERVER_HOME=${WSO2_SERVER_HOME} | ||
|
||
# expose ports | ||
EXPOSE 9763 9443 | ||
|
||
# initiate container and start WSO2 Carbon server | ||
ENTRYPOINT ["/home/wso2carbon/docker-entrypoint.sh"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,71 @@ | ||
# Dockerfile for WSO2 Identity Server deployed as the API Key Manager # | ||
|
||
This section defines the step-by-step instructions to build an [Rocky Linux](https://hub.docker.com/_/rockylinux/) Linux based Docker image for WSO2 IS deployed as API Key Manager. | ||
|
||
## Prerequisites | ||
|
||
* [Docker](https://www.docker.com/get-docker) v17.09.0 or above | ||
* [Git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git) client | ||
|
||
## How to build an image and run | ||
|
||
##### 1. Checkout this repository into your local machine using the following Git client command. | ||
|
||
``` | ||
git clone https://github.com/wso2/docker-apim.git | ||
``` | ||
|
||
> The local copy of the `dockerfiles/rocky/is-as-km` directory will be referred to as `IS_KM_DOCKERFILE_HOME` from this point onwards. | ||
##### 2. Build the Docker image. | ||
|
||
- Navigate to `<IS_KM_DOCKERFILE_HOME>` directory. <br> | ||
Execute `docker build` command as shown below. | ||
+ `docker build -t wso2is-km:5.10.0-rocky .` | ||
|
||
> By default, the Docker image will prepackage the General Availability (GA) release version of the relevant WSO2 product. | ||
##### 3. Running the Docker image. | ||
|
||
- `docker run -it -p 9443:9443 wso2is-km:5.10.0-rocky` | ||
|
||
##### 4. Accessing management console. | ||
|
||
- To access the management console, use the docker host IP and port 9443. | ||
+ `https:<DOCKER_HOST>:9443/carbon` | ||
|
||
> In here, <DOCKER_HOST> refers to hostname or IP of the host machine on top of which containers are spawned. | ||
## How to update configurations | ||
|
||
Configurations would lie on the Docker host machine and they can be volume mounted to the container. <br> | ||
As an example, steps required to change the port offset using `deployment.toml` is as follows: | ||
|
||
##### 1. Stop the Identity Server as Key Manager container if it's already running. | ||
|
||
In WSO2 Identity Server as Key Manager 5.10.0 product distribution, `deployment.toml` configuration file <br> | ||
can be found at `<DISTRIBUTION_HOME>/repository/conf`. Copy the file to some suitable location of the host machine, <br> | ||
referred to as `<SOURCE_CONFIGS>/deployment.toml` and change the offset value (`[server]->offset`) to 1. | ||
|
||
##### 2. Grant read permission to `other` users for `<SOURCE_CONFIGS>/deployment.toml`. | ||
|
||
``` | ||
chmod o+r <SOURCE_CONFIGS>/deployment.toml | ||
``` | ||
|
||
##### 3. Run the image by mounting the file to container as follows: | ||
|
||
``` | ||
docker run \ | ||
-p 9444:9444 \ | ||
--volume <SOURCE_CONFIGS>/deployment.toml:<TARGET_CONFIGS>/deployment.toml \ | ||
wso2is-km:5.10.0-rocky | ||
``` | ||
|
||
> In here, <TARGET_CONFIGS> refers to /home/wso2carbon/wso2is-km-5.10.0/repository/conf folder of the container. | ||
## Docker command usage references | ||
|
||
* [Docker build command reference](https://docs.docker.com/engine/reference/commandline/build/) | ||
* [Docker run command reference](https://docs.docker.com/engine/reference/run/) | ||
* [Dockerfile reference](https://docs.docker.com/engine/reference/builder/) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,36 @@ | ||
#!/bin/sh | ||
# ------------------------------------------------------------------------ | ||
# Copyright 2024 WSO2, Inc. (http://wso2.com) | ||
# | ||
# Licensed under the Apache License, Version 2.0 (the "License"); | ||
# you may not use this file except in compliance with the License. | ||
# You may obtain a copy of the License at | ||
# | ||
# http://www.apache.org/licenses/LICENSE-2.0 | ||
# | ||
# Unless required by applicable law or agreed to in writing, software | ||
# distributed under the License is distributed on an "AS IS" BASIS, | ||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
# See the License for the specific language governing permissions and | ||
# limitations under the License | ||
# ------------------------------------------------------------------------ | ||
|
||
set -e | ||
|
||
# volume mounts | ||
config_volume=${WORKING_DIRECTORY}/wso2-config-volume | ||
artifact_volume=${WORKING_DIRECTORY}/wso2-artifact-volume | ||
|
||
# check if the WSO2 non-root user home exists | ||
test ! -d ${WORKING_DIRECTORY} && echo "WSO2 Docker non-root user home does not exist" && exit 1 | ||
|
||
# check if the WSO2 product home exists | ||
test ! -d ${WSO2_SERVER_HOME} && echo "WSO2 Docker product home does not exist" && exit 1 | ||
|
||
# copy any configuration changes mounted to config_volume | ||
test -d ${config_volume} && [ "$(ls -A ${config_volume})" ] && cp -RL ${config_volume}/* ${WSO2_SERVER_HOME}/ | ||
# copy any artifact changes mounted to artifact_volume | ||
test -d ${artifact_volume} && [ "$(ls -A ${artifact_volume})" ] && cp -RL ${artifact_volume}/* ${WSO2_SERVER_HOME}/ | ||
|
||
# start WSO2 Carbon server | ||
sh ${WSO2_SERVER_HOME}/bin/wso2server.sh "$@" |