|
|
|
|
@ -4,10 +4,8 @@ FROM debian:jessie
|
|
|
|
|
RUN groupadd -r mongodb && useradd -r -g mongodb mongodb
|
|
|
|
|
|
|
|
|
|
RUN apt-get update \
|
|
|
|
|
&& apt-get install -y --no-install-recommends \
|
|
|
|
|
numactl \
|
|
|
|
|
curl \
|
|
|
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
|
&& apt-get install -y --no-install-recommends numactl curl gnupg-curl
|
|
|
|
|
# && rm -rf /var/lib/apt/lists/*
|
|
|
|
|
|
|
|
|
|
# Set a timezone
|
|
|
|
|
ENV TZ=UTC
|
|
|
|
|
@ -16,30 +14,31 @@ RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
|
|
|
|
|
# grab gosu for easy step-down from root
|
|
|
|
|
ENV GOSU_VERSION 1.7
|
|
|
|
|
RUN set -x \
|
|
|
|
|
&& apt-get update && apt-get install -y --no-install-recommends ca-certificates wget && rm -rf /var/lib/apt/lists/* \
|
|
|
|
|
&& apt-get install -y --no-install-recommends ca-certificates wget && rm -rf /var/lib/apt/lists/* \
|
|
|
|
|
&& wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \
|
|
|
|
|
&& wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \
|
|
|
|
|
&& export GNUPGHOME="$(mktemp -d)" \
|
|
|
|
|
&& gpg --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \
|
|
|
|
|
&& gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \
|
|
|
|
|
&& rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \
|
|
|
|
|
&& chmod +x /usr/local/bin/gosu \
|
|
|
|
|
&& gosu nobody true \
|
|
|
|
|
&& apt-get purge -y --auto-remove ca-certificates wget
|
|
|
|
|
# && export GNUPGHOME="$(mktemp -d)" \
|
|
|
|
|
# && gpg --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \
|
|
|
|
|
# && gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \
|
|
|
|
|
# && rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \
|
|
|
|
|
# && chmod +x /usr/local/bin/gosu \
|
|
|
|
|
# && gosu nobody true \
|
|
|
|
|
# && apt-get purge -y --auto-remove ca-certificates wget
|
|
|
|
|
|
|
|
|
|
ENV GPG_KEYS \
|
|
|
|
|
#ENV GPG_KEYS \
|
|
|
|
|
# pub 4096R/A15703C6 2016-01-11 [expires: 2018-01-10]
|
|
|
|
|
# Key fingerprint = 0C49 F373 0359 A145 1858 5931 BC71 1F9B A157 03C6
|
|
|
|
|
# uid MongoDB 3.4 Release Signing Key <packaging@mongodb.com>
|
|
|
|
|
0C49F3730359A14518585931BC711F9BA15703C6
|
|
|
|
|
RUN set -ex; \
|
|
|
|
|
export GNUPGHOME="$(mktemp -d)"; \
|
|
|
|
|
for key in $GPG_KEYS; do \
|
|
|
|
|
gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key"; \
|
|
|
|
|
done; \
|
|
|
|
|
gpg --export $GPG_KEYS > /etc/apt/trusted.gpg.d/mongodb.gpg; \
|
|
|
|
|
rm -r "$GNUPGHOME"; \
|
|
|
|
|
apt-key list
|
|
|
|
|
# 0C49F3730359A14518585931BC711F9BA15703C6
|
|
|
|
|
#RUN set -ex; \
|
|
|
|
|
# export GNUPGHOME="$(mktemp -d)"; \
|
|
|
|
|
# for key in $GPG_KEYS; do \
|
|
|
|
|
# gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key"; \
|
|
|
|
|
# done; \
|
|
|
|
|
# gpg --export $GPG_KEYS > /etc/apt/trusted.gpg.d/mongodb.gpg; \
|
|
|
|
|
# rm -r "$GNUPGHOME"; \
|
|
|
|
|
# apt-key list
|
|
|
|
|
RUN wget -qO - https://www.mongodb.org/static/pgp/server-5.0.asc | apt-key add -
|
|
|
|
|
|
|
|
|
|
ENV MONGO_MAJOR 3.4
|
|
|
|
|
ENV MONGO_VERSION 3.4.2
|
|
|
|
|
@ -60,6 +59,7 @@ RUN set -x \
|
|
|
|
|
&& mv /etc/mongod.conf /etc/mongod.conf.orig \
|
|
|
|
|
&& touch /etc/mongod.conf \
|
|
|
|
|
&& chown mongodb:mongodb /etc/mongod.conf
|
|
|
|
|
&& apt-get purge -y --auto-remove ca-certificates wget
|
|
|
|
|
|
|
|
|
|
RUN mkdir -p /data/db /data/configdb \
|
|
|
|
|
&& chown -R mongodb:mongodb /data/db /data/configdb
|
|
|
|
|
|