-
Notifications
You must be signed in to change notification settings - Fork 159
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Showing
3 changed files
with
248 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,131 @@ | ||
# ------------------------------------------------------------------------ | ||
# | ||
# Copyright 2022 WSO2, LLC. (http://wso2.com) | ||
# | ||
# Licensed under the Apache License, Version 2.0 (the "License"); | ||
# you may not use this file except in compliance with the License. | ||
# You may obtain a copy of the License at | ||
# | ||
# http://www.apache.org/licenses/LICENSE-2.0 | ||
# | ||
# Unless required by applicable law or agreed to in writing, software | ||
# distributed under the License is distributed on an "AS IS" BASIS, | ||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
# See the License for the specific language governing permissions and | ||
# limitations under the License | ||
# | ||
# ------------------------------------------------------------------------ | ||
|
||
# set base Docker image to CentOS Docker image | ||
FROM centos:7 | ||
LABEL maintainer="WSO2 Docker Maintainers <[email protected]>" \ | ||
com.wso2.docker.source="https://github.com/wso2/docker-is/releases/tag/v6.0.0.1" | ||
|
||
ENV LANG='en_US.UTF-8' LANGUAGE='en_US:en' LC_ALL='en_US.UTF-8' | ||
|
||
# Install JDK Dependencies | ||
RUN yum install -y tzdata openssl curl ca-certificates fontconfig gzip tar \ | ||
&& yum clean all | ||
|
||
ENV JAVA_VERSION jdk-11.0.13+8 | ||
|
||
# Install JDK11 | ||
RUN set -eux; \ | ||
ARCH="$(objdump="$(command -v objdump)" && objdump --file-headers "$objdump" | awk -F '[:,]+[[:space:]]+' '$1 == "architecture" { print $2 }')"; \ | ||
case "${ARCH}" in \ | ||
amd64|i386:x86-64) \ | ||
ESUM='3b1c0c34be4c894e64135a454f2d5aaa4bd10aea04ec2fa0c0efe6bb26528e30'; \ | ||
BINARY_URL='https://github.com/adoptium/temurin11-binaries/releases/download/jdk-11.0.13%2B8/OpenJDK11U-jdk_x64_linux_hotspot_11.0.13_8.tar.gz'; \ | ||
;; \ | ||
*) \ | ||
echo "Unsupported arch: ${ARCH}"; \ | ||
exit 1; \ | ||
;; \ | ||
esac; \ | ||
curl -LfsSo /tmp/openjdk.tar.gz ${BINARY_URL}; \ | ||
echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -; \ | ||
mkdir -p /opt/java/openjdk; \ | ||
cd /opt/java/openjdk; \ | ||
tar -xf /tmp/openjdk.tar.gz --strip-components=1; \ | ||
rm -rf /tmp/openjdk.tar.gz; | ||
|
||
ENV JAVA_HOME=/opt/java/openjdk \ | ||
PATH="/opt/java/openjdk/bin:$PATH" | ||
|
||
# set Docker image build arguments | ||
# build arguments for user/group configurations | ||
ARG USER=wso2carbon | ||
ARG USER_ID=802 | ||
ARG USER_GROUP=wso2 | ||
ARG USER_GROUP_ID=802 | ||
ARG USER_HOME=/home/${USER} | ||
# build arguments for WSO2 product installation | ||
ARG WSO2_SERVER_NAME=wso2is | ||
ARG WSO2_SERVER_VERSION=6.0.0 | ||
ARG WSO2_SERVER_REPOSITORY=product-is | ||
ARG WSO2_SERVER=${WSO2_SERVER_NAME}-${WSO2_SERVER_VERSION} | ||
ARG WSO2_SERVER_HOME=${USER_HOME}/${WSO2_SERVER} | ||
# build arguments for external artifacts | ||
ARG DNS_JAVA_VERSION=2.1.8 | ||
ARG K8S_MEMBERSHIP_SCHEME_VERSION=1.0.9 | ||
ARG MYSQL_CONNECTOR_VERSION=8.0.29 | ||
# build argument for MOTD | ||
ARG MOTD='printf "\n\ | ||
Welcome to WSO2 Docker resources.\n\ | ||
------------------------------------ \n\ | ||
This Docker container comprises of a WSO2 product, running with its latest GA release \n\ | ||
which is under the Apache License, Version 2.0. \n\ | ||
Read more about Apache License, Version 2.0 here @ http://www.apache.org/licenses/LICENSE-2.0.\n"' | ||
|
||
# create the non-root user and group and set MOTD login message | ||
RUN \ | ||
groupadd --system -g ${USER_GROUP_ID} ${USER_GROUP} \ | ||
&& useradd --system --create-home --home-dir ${USER_HOME} --no-log-init -g ${USER_GROUP_ID} -u ${USER_ID} ${USER} \ | ||
&& echo ${MOTD} > /etc/profile.d/motd.sh | ||
# create Java prefs dir | ||
# this is to avoid warning logs printed by FileSystemPreferences class | ||
RUN \ | ||
mkdir -p ${USER_HOME}/.java/.systemPrefs \ | ||
&& mkdir -p ${USER_HOME}/.java/.userPrefs \ | ||
&& chmod -R 755 ${USER_HOME}/.java \ | ||
&& chown -R ${USER}:${USER_GROUP} ${USER_HOME}/.java | ||
|
||
# copy init script to user home | ||
COPY --chown=wso2carbon:wso2 docker-entrypoint.sh ${USER_HOME}/ | ||
|
||
# install required packages | ||
RUN \ | ||
yum -y update \ | ||
&& yum install -y \ | ||
nc \ | ||
unzip \ | ||
wget \ | ||
&& rm -rf /var/cache/yum/* | ||
|
||
## set the user and work directory | ||
USER ${USER_ID} | ||
WORKDIR ${USER_HOME} | ||
|
||
COPY --chown=wso2carbon:wso2 ${WSO2_SERVER}.zip ${USER_HOME}/ | ||
|
||
RUN \ | ||
unzip -d ${USER_HOME} ${WSO2_SERVER}.zip \ | ||
&& chown wso2carbon:wso2 -R ${WSO2_SERVER_HOME} \ | ||
&& rm -f ${WSO2_SERVER}.zip | ||
|
||
# add libraries for Kubernetes membership scheme based clustering | ||
ADD --chown=wso2carbon:wso2 https://repo1.maven.org/maven2/dnsjava/dnsjava/${DNS_JAVA_VERSION}/dnsjava-${DNS_JAVA_VERSION}.jar ${WSO2_SERVER_HOME}/repository/components/lib | ||
ADD --chown=wso2carbon:wso2 http://maven.wso2.org/nexus/content/repositories/releases/org/wso2/carbon/kubernetes/artifacts/kubernetes-membership-scheme/${K8S_MEMBERSHIP_SCHEME_VERSION}/kubernetes-membership-scheme-${K8S_MEMBERSHIP_SCHEME_VERSION}.jar ${WSO2_SERVER_HOME}/repository/components/dropins | ||
# add MySQL JDBC connector to server home as a third party library | ||
ADD --chown=wso2carbon:wso2 https://repo1.maven.org/maven2/mysql/mysql-connector-java/${MYSQL_CONNECTOR_VERSION}/mysql-connector-java-${MYSQL_CONNECTOR_VERSION}.jar ${WSO2_SERVER_HOME}/repository/components/dropins/ | ||
|
||
|
||
# set environment variables | ||
ENV WORKING_DIRECTORY=${USER_HOME} \ | ||
WSO2_SERVER_HOME=${WSO2_SERVER_HOME} | ||
|
||
# expose ports | ||
EXPOSE 4000 9763 9443 | ||
|
||
# initiate container and start WSO2 Carbon server | ||
ENTRYPOINT ["/home/wso2carbon/docker-entrypoint.sh"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,81 @@ | ||
# Dockerfile for WSO2 Identity Server # | ||
|
||
This section defines the step-by-step instructions to build an [CentOS](https://hub.docker.com/_/centos/) Linux based Docker image for WSO2 Identity Server `5.11.0`. | ||
|
||
## Prerequisites | ||
|
||
* [Docker](https://www.docker.com/get-docker) `v17.09.0` or above | ||
* [Git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git) client | ||
|
||
## How to build an image and run | ||
|
||
##### 1. Checkout this repository into your local machine using the following Git client command. | ||
|
||
``` | ||
git clone https://github.com/wso2/docker-is.git | ||
``` | ||
|
||
>The local copy of the `dockerfiles/centos/is` directory will be referred to as `IS_DOCKERFILE_HOME` from this point onwards. | ||
##### 2. Copy the `wso2is-6.0.0.zip` to the `docker-is/dockerfiles/centos/is` directory | ||
|
||
##### 3. Build the Docker image. | ||
- Navigate to `<IS_DOCKERFILE_HOME>` directory. <br> | ||
Execute `docker build` command as shown below. | ||
+ `docker build -t wso2is:6.0.0-centos .` | ||
|
||
> By default, the Docker image will prepackage the General Availability (GA) release version of the relevant WSO2 product. | ||
> Tip - If you require the container to run with a different UID and GID, pass the preferred values of the UID and GID | ||
> as values for build arguments `USER_ID` and `USER_GROUP_ID` when building the image, as shown below. Note | ||
> that setting lower values for the UID and GID is not recommended. | ||
+ `docker build -t wso2is:5.11.0-centos --build-arg USER_ID=<UID> --build-arg USER_GROUP_ID=<GID> .` | ||
##### 4. Running the Docker image. | ||
|
||
- `docker run -it -p 9443:9443 wso2is:6.0.0-centos` | ||
|
||
>Here, only port 9443 (HTTPS servlet transport) has been mapped to a Docker host port. | ||
You may map other container service ports, which have been exposed to Docker host ports, as desired. | ||
|
||
##### 5. Accessing management consoles. | ||
|
||
- To access the user interfaces, use the docker host IP and port 9443. | ||
+ Management Console: `https://<DOCKER_HOST>:9443/console` | ||
+ User Portal: `https://<DOCKER_HOST>:9443/myaccount` | ||
|
||
>In here, <DOCKER_HOST> refers to hostname or IP of the host machine on top of which containers are spawned. | ||
## How to update configurations | ||
|
||
Configurations would lie on the Docker host machine and they can be volume mounted to the container. <br> | ||
As an example, steps required to change the port offset using `deployment.toml` is as follows: | ||
|
||
##### 1. Stop the Identity Server container if it's already running. | ||
|
||
In WSO2 Identity Server version `6.0.0` product distribution, `deployment.toml` configuration file <br> | ||
can be found at `<DISTRIBUTION_HOME>/repository/conf`. Copy the file to some suitable location of the host machine, <br> | ||
referred to as `<SOURCE_CONFIGS>/deployment.toml` and change the `[server] -> offset` value to 1. | ||
|
||
##### 2. Grant read permission to `other` users for `<SOURCE_CONFIGS>/deployment.toml`. | ||
|
||
``` | ||
chmod o+r <SOURCE_CONFIGS>/deployment.toml | ||
``` | ||
|
||
##### 3. Run the image by mounting the file to container as follows: | ||
|
||
``` | ||
docker run \ | ||
-p 9444:9444 \ | ||
--volume <SOURCE_CONFIGS>/deployment.toml:<TARGET_CONFIGS>/deployment.toml \ | ||
wso2is:6.0.0-centos | ||
``` | ||
|
||
>In here, <TARGET_CONFIGS> refers to /home/wso2carbon/wso2is-6.0.0/repository/conf folder of the container. | ||
## Docker command usage references | ||
|
||
* [Docker build command reference](https://docs.docker.com/engine/reference/commandline/build/) | ||
* [Docker run command reference](https://docs.docker.com/engine/reference/run/) | ||
* [Dockerfile reference](https://docs.docker.com/engine/reference/builder/) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,36 @@ | ||
#!/bin/sh | ||
# ------------------------------------------------------------------------ | ||
# Copyright 2022 WSO2, LLC. (http://wso2.com) | ||
# | ||
# Licensed under the Apache License, Version 2.0 (the "License"); | ||
# you may not use this file except in compliance with the License. | ||
# You may obtain a copy of the License at | ||
# | ||
# http://www.apache.org/licenses/LICENSE-2.0 | ||
# | ||
# Unless required by applicable law or agreed to in writing, software | ||
# distributed under the License is distributed on an "AS IS" BASIS, | ||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
# See the License for the specific language governing permissions and | ||
# limitations under the License | ||
# ------------------------------------------------------------------------ | ||
|
||
set -e | ||
|
||
# volume mounts | ||
config_volume=${WORKING_DIRECTORY}/wso2-config-volume | ||
artifact_volume=${WORKING_DIRECTORY}/wso2-artifact-volume | ||
|
||
# check if the WSO2 non-root user home exists | ||
test ! -d ${WORKING_DIRECTORY} && echo "WSO2 Docker non-root user home does not exist" && exit 1 | ||
|
||
# check if the WSO2 product home exists | ||
test ! -d ${WSO2_SERVER_HOME} && echo "WSO2 Docker product home does not exist" && exit 1 | ||
|
||
# copy any configuration changes mounted to config_volume | ||
test -d ${config_volume} && [ "$(ls -A ${config_volume})" ] && cp -RL ${config_volume}/* ${WSO2_SERVER_HOME}/ | ||
# copy any artifact changes mounted to artifact_volume | ||
test -d ${artifact_volume} && [ "$(ls -A ${artifact_volume})" ] && cp -RL ${artifact_volume}/* ${WSO2_SERVER_HOME}/ | ||
|
||
# start WSO2 Carbon server | ||
sh ${WSO2_SERVER_HOME}/bin/wso2server.sh "$@" |