9 changed files with 662 additions and 0 deletions
@ -0,0 +1,7 @@ |
|||
sudo docker build -t mongodb -f src/Dockerfile . |
|||
|
|||
echo "" |
|||
echo "run" |
|||
echo "docker tag <id> registry.vlabs.uniwa.gr:5043/<name>:<version>" |
|||
echo "" |
|||
echo "docker push registry.vlabs.uniwa.gr:5043/<name>:<version>" |
|||
@ -0,0 +1,2 @@ |
|||
openssl rand -base64 756 > mongo.key |
|||
chmod 400 mongo.key |
|||
@ -0,0 +1,107 @@ |
|||
FROM ubuntu:xenial |
|||
|
|||
# add our user and group first to make sure their IDs get assigned consistently, regardless of whatever dependencies get added |
|||
RUN groupadd -r mongodb && useradd -r -g mongodb mongodb |
|||
|
|||
RUN set -eux; \ |
|||
apt-get update; \ |
|||
apt-get install -y --no-install-recommends \ |
|||
ca-certificates \ |
|||
jq \ |
|||
numactl \ |
|||
; \ |
|||
if ! command -v ps > /dev/null; then \ |
|||
apt-get install -y --no-install-recommends procps; \ |
|||
fi; \ |
|||
rm -rf /var/lib/apt/lists/* |
|||
|
|||
# grab gosu for easy step-down from root (https://github.com/tianon/gosu/releases) |
|||
ENV GOSU_VERSION 1.11 |
|||
# grab "js-yaml" for parsing mongod's YAML config files (https://github.com/nodeca/js-yaml/releases) |
|||
ENV JSYAML_VERSION 3.13.0 |
|||
|
|||
RUN set -ex; \ |
|||
\ |
|||
savedAptMark="$(apt-mark showmanual)"; \ |
|||
apt-get update; \ |
|||
apt-get install -y --no-install-recommends \ |
|||
wget \ |
|||
; \ |
|||
if ! command -v gpg > /dev/null; then \ |
|||
apt-get install -y --no-install-recommends gnupg dirmngr; \ |
|||
savedAptMark="$savedAptMark gnupg dirmngr"; \ |
|||
elif gpg --version | grep -q '^gpg (GnuPG) 1\.'; then \ |
|||
# "This package provides support for HKPS keyservers." (GnuPG 1.x only) |
|||
apt-get install -y --no-install-recommends gnupg-curl; \ |
|||
fi; \ |
|||
rm -rf /var/lib/apt/lists/*; \ |
|||
\ |
|||
dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; \ |
|||
wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch"; \ |
|||
wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch.asc"; \ |
|||
export GNUPGHOME="$(mktemp -d)"; \ |
|||
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \ |
|||
gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; \ |
|||
command -v gpgconf && gpgconf --kill all || :; \ |
|||
rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc; \ |
|||
chmod +x /usr/local/bin/gosu; \ |
|||
gosu --version; \ |
|||
gosu nobody true; \ |
|||
\ |
|||
wget -O /js-yaml.js "https://github.com/nodeca/js-yaml/raw/${JSYAML_VERSION}/dist/js-yaml.js"; \ |
|||
# TODO some sort of download verification here |
|||
\ |
|||
apt-mark auto '.*' > /dev/null; \ |
|||
apt-mark manual $savedAptMark > /dev/null; \ |
|||
apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false |
|||
|
|||
RUN mkdir /docker-entrypoint-initdb.d |
|||
|
|||
ENV GPG_KEYS 9DA31620334BD75D9DCB49F368818C72E52529D4 |
|||
RUN set -ex; \ |
|||
export GNUPGHOME="$(mktemp -d)"; \ |
|||
for key in $GPG_KEYS; do \ |
|||
gpg --batch --keyserver ha.pool.sks-keyservers.net --recv-keys "$key"; \ |
|||
done; \ |
|||
gpg --batch --export $GPG_KEYS > /etc/apt/trusted.gpg.d/mongodb.gpg; \ |
|||
command -v gpgconf && gpgconf --kill all || :; \ |
|||
rm -r "$GNUPGHOME"; \ |
|||
apt-key list |
|||
|
|||
# Allow build-time overrides (eg. to build image with MongoDB Enterprise version) |
|||
# Options for MONGO_PACKAGE: mongodb-org OR mongodb-enterprise |
|||
# Options for MONGO_REPO: repo.mongodb.org OR repo.mongodb.com |
|||
# Example: docker build --build-arg MONGO_PACKAGE=mongodb-enterprise --build-arg MONGO_REPO=repo.mongodb.com . |
|||
ARG MONGO_PACKAGE=mongodb-org |
|||
ARG MONGO_REPO=repo.mongodb.org |
|||
ENV MONGO_PACKAGE=${MONGO_PACKAGE} MONGO_REPO=${MONGO_REPO} |
|||
|
|||
ENV MONGO_MAJOR 4.0 |
|||
ENV MONGO_VERSION 4.0.10 |
|||
# bashbrew-architectures:amd64 arm64v8 |
|||
RUN echo "deb http://$MONGO_REPO/apt/ubuntu xenial/${MONGO_PACKAGE%-unstable}/$MONGO_MAJOR multiverse" | tee "/etc/apt/sources.list.d/${MONGO_PACKAGE%-unstable}.list" |
|||
|
|||
RUN set -x \ |
|||
&& apt-get update \ |
|||
&& apt-get install -y \ |
|||
${MONGO_PACKAGE}=$MONGO_VERSION \ |
|||
${MONGO_PACKAGE}-server=$MONGO_VERSION \ |
|||
${MONGO_PACKAGE}-shell=$MONGO_VERSION \ |
|||
${MONGO_PACKAGE}-mongos=$MONGO_VERSION \ |
|||
${MONGO_PACKAGE}-tools=$MONGO_VERSION \ |
|||
&& rm -rf /var/lib/apt/lists/* \ |
|||
&& rm -rf /var/lib/mongodb \ |
|||
&& mv /etc/mongod.conf /etc/mongod.conf.orig |
|||
|
|||
RUN mkdir -p /data/db /data/configdb \ |
|||
&& chown -R mongodb:mongodb /data/db /data/configdb |
|||
VOLUME /data/db /data/configdb |
|||
RUN chown -R mongodb.mongodb /data/db |
|||
|
|||
ADD ./src/mongodb.conf /etc/mongodb.conf |
|||
ADD ./src/docker-entrypoint.sh /usr/local/bin/ |
|||
|
|||
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"] |
|||
|
|||
EXPOSE 27017 |
|||
CMD ["mongod"] |
|||
@ -0,0 +1,22 @@ |
|||
FROM ubuntu:16.04 |
|||
# add our user and group first to make sure their IDs get assigned consistently, regardless of whatever dependencies get added |
|||
RUN groupadd -r mongodb && useradd -r -g mongodb -u 999 mongodb |
|||
RUN apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 9DA31620334BD75D9DCB49F368818C72E52529D4 |
|||
RUN echo "deb [ arch=amd64,arm64 ] http://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/4.0 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-4.0.list |
|||
|
|||
RUN apt-get update && apt-get install -y --no-install-recommends mongodb-org |
|||
RUN mkdir -p /data/db |
|||
RUN chown -R mongodb:mongodb /data/db |
|||
ADD ./src/mongodb.conf /etc/mongodb.conf |
|||
|
|||
RUN set -x \ |
|||
&& apt-get autoremove \ |
|||
&& apt-get clean \ |
|||
&& rm -rf /var/lib/apt/lists/* \ |
|||
&& rm -rf /var/lib/mongodb |
|||
|
|||
VOLUME ["/data/db"] |
|||
COPY src/docker-entrypoint.sh /usr/local/bin/ |
|||
ENTRYPOINT ["docker-entrypoint.sh"] |
|||
EXPOSE 27017 |
|||
CMD ["/usr/bin/mongod", "--config", "/etc/mongodb.conf"] |
|||
@ -0,0 +1,354 @@ |
|||
#!/bin/bash |
|||
set -Eeuo pipefail |
|||
|
|||
if [ "${1:0:1}" = '-' ]; then |
|||
set -- mongod "$@" |
|||
fi |
|||
|
|||
originalArgOne="$1" |
|||
|
|||
# allow the container to be started with `--user` |
|||
# all mongo* commands should be dropped to the correct user |
|||
if [[ "$originalArgOne" == mongo* ]] && [ "$(id -u)" = '0' ]; then |
|||
if [ "$originalArgOne" = 'mongod' ]; then |
|||
find /data/configdb /data/db \! -user mongodb -exec chown mongodb '{}' + |
|||
fi |
|||
|
|||
# make sure we can write to stdout and stderr as "mongodb" |
|||
# (for our "initdb" code later; see "--logpath" below) |
|||
chown --dereference mongodb "/proc/$$/fd/1" "/proc/$$/fd/2" || : |
|||
# ignore errors thanks to https://github.com/docker-library/mongo/issues/149 |
|||
|
|||
exec gosu mongodb "$BASH_SOURCE" "$@" |
|||
fi |
|||
|
|||
# you should use numactl to start your mongod instances, including the config servers, mongos instances, and any clients. |
|||
# https://docs.mongodb.com/manual/administration/production-notes/#configuring-numa-on-linux |
|||
if [[ "$originalArgOne" == mongo* ]]; then |
|||
numa='numactl --interleave=all' |
|||
if $numa true &> /dev/null; then |
|||
set -- $numa "$@" |
|||
fi |
|||
fi |
|||
|
|||
# usage: file_env VAR [DEFAULT] |
|||
# ie: file_env 'XYZ_DB_PASSWORD' 'example' |
|||
# (will allow for "$XYZ_DB_PASSWORD_FILE" to fill in the value of |
|||
# "$XYZ_DB_PASSWORD" from a file, especially for Docker's secrets feature) |
|||
file_env() { |
|||
local var="$1" |
|||
local fileVar="${var}_FILE" |
|||
local def="${2:-}" |
|||
if [ "${!var:-}" ] && [ "${!fileVar:-}" ]; then |
|||
echo >&2 "error: both $var and $fileVar are set (but are exclusive)" |
|||
exit 1 |
|||
fi |
|||
local val="$def" |
|||
if [ "${!var:-}" ]; then |
|||
val="${!var}" |
|||
elif [ "${!fileVar:-}" ]; then |
|||
val="$(< "${!fileVar}")" |
|||
fi |
|||
export "$var"="$val" |
|||
unset "$fileVar" |
|||
} |
|||
|
|||
# see https://github.com/docker-library/mongo/issues/147 (mongod is picky about duplicated arguments) |
|||
_mongod_hack_have_arg() { |
|||
local checkArg="$1"; shift |
|||
local arg |
|||
for arg; do |
|||
case "$arg" in |
|||
"$checkArg"|"$checkArg"=*) |
|||
return 0 |
|||
;; |
|||
esac |
|||
done |
|||
return 1 |
|||
} |
|||
# _mongod_hack_get_arg_val '--some-arg' "$@" |
|||
_mongod_hack_get_arg_val() { |
|||
local checkArg="$1"; shift |
|||
while [ "$#" -gt 0 ]; do |
|||
local arg="$1"; shift |
|||
case "$arg" in |
|||
"$checkArg") |
|||
echo "$1" |
|||
return 0 |
|||
;; |
|||
"$checkArg"=*) |
|||
echo "${arg#$checkArg=}" |
|||
return 0 |
|||
;; |
|||
esac |
|||
done |
|||
return 1 |
|||
} |
|||
declare -a mongodHackedArgs |
|||
# _mongod_hack_ensure_arg '--some-arg' "$@" |
|||
# set -- "${mongodHackedArgs[@]}" |
|||
_mongod_hack_ensure_arg() { |
|||
local ensureArg="$1"; shift |
|||
mongodHackedArgs=( "$@" ) |
|||
if ! _mongod_hack_have_arg "$ensureArg" "$@"; then |
|||
mongodHackedArgs+=( "$ensureArg" ) |
|||
fi |
|||
} |
|||
# _mongod_hack_ensure_no_arg '--some-unwanted-arg' "$@" |
|||
# set -- "${mongodHackedArgs[@]}" |
|||
_mongod_hack_ensure_no_arg() { |
|||
local ensureNoArg="$1"; shift |
|||
mongodHackedArgs=() |
|||
while [ "$#" -gt 0 ]; do |
|||
local arg="$1"; shift |
|||
if [ "$arg" = "$ensureNoArg" ]; then |
|||
continue |
|||
fi |
|||
mongodHackedArgs+=( "$arg" ) |
|||
done |
|||
} |
|||
# _mongod_hack_ensure_no_arg '--some-unwanted-arg' "$@" |
|||
# set -- "${mongodHackedArgs[@]}" |
|||
_mongod_hack_ensure_no_arg_val() { |
|||
local ensureNoArg="$1"; shift |
|||
mongodHackedArgs=() |
|||
while [ "$#" -gt 0 ]; do |
|||
local arg="$1"; shift |
|||
case "$arg" in |
|||
"$ensureNoArg") |
|||
shift # also skip the value |
|||
continue |
|||
;; |
|||
"$ensureNoArg"=*) |
|||
# value is already included |
|||
continue |
|||
;; |
|||
esac |
|||
mongodHackedArgs+=( "$arg" ) |
|||
done |
|||
} |
|||
# _mongod_hack_ensure_arg_val '--some-arg' 'some-val' "$@" |
|||
# set -- "${mongodHackedArgs[@]}" |
|||
_mongod_hack_ensure_arg_val() { |
|||
local ensureArg="$1"; shift |
|||
local ensureVal="$1"; shift |
|||
_mongod_hack_ensure_no_arg_val "$ensureArg" "$@" |
|||
mongodHackedArgs+=( "$ensureArg" "$ensureVal" ) |
|||
} |
|||
|
|||
# _js_escape 'some "string" value' |
|||
_js_escape() { |
|||
jq --null-input --arg 'str' "$1" '$str' |
|||
} |
|||
|
|||
jsonConfigFile="${TMPDIR:-/tmp}/docker-entrypoint-config.json" |
|||
tempConfigFile="${TMPDIR:-/tmp}/docker-entrypoint-temp-config.json" |
|||
_parse_config() { |
|||
if [ -s "$tempConfigFile" ]; then |
|||
return 0 |
|||
fi |
|||
|
|||
local configPath |
|||
if configPath="$(_mongod_hack_get_arg_val --config "$@")"; then |
|||
# if --config is specified, parse it into a JSON file so we can remove a few problematic keys (especially SSL-related keys) |
|||
# see https://docs.mongodb.com/manual/reference/configuration-options/ |
|||
mongo --norc --nodb --quiet --eval "load('/js-yaml.js'); printjson(jsyaml.load(cat($(_js_escape "$configPath"))))" > "$jsonConfigFile" |
|||
jq 'del(.systemLog, .processManagement, .net, .security)' "$jsonConfigFile" > "$tempConfigFile" |
|||
return 0 |
|||
fi |
|||
|
|||
return 1 |
|||
} |
|||
dbPath= |
|||
_dbPath() { |
|||
if [ -n "$dbPath" ]; then |
|||
echo "$dbPath" |
|||
return |
|||
fi |
|||
|
|||
if ! dbPath="$(_mongod_hack_get_arg_val --dbpath "$@")"; then |
|||
if _parse_config "$@"; then |
|||
dbPath="$(jq -r '.storage.dbPath // empty' "$jsonConfigFile")" |
|||
fi |
|||
fi |
|||
|
|||
if [ -z "$dbPath" ]; then |
|||
if _mongod_hack_have_arg --configsvr "$@" || { |
|||
_parse_config "$@" \ |
|||
&& clusterRole="$(jq -r '.sharding.clusterRole // empty' "$jsonConfigFile")" \ |
|||
&& [ "$clusterRole" = 'configsvr' ] |
|||
}; then |
|||
# if running as config server, then the default dbpath is /data/configdb |
|||
# https://docs.mongodb.com/manual/reference/program/mongod/#cmdoption-mongod-configsvr |
|||
dbPath=/data/configdb |
|||
fi |
|||
fi |
|||
|
|||
: "${dbPath:=/data/db}" |
|||
|
|||
echo "$dbPath" |
|||
} |
|||
|
|||
if [ "$originalArgOne" = 'mongod' ]; then |
|||
file_env 'MONGO_INITDB_ROOT_USERNAME' |
|||
file_env 'MONGO_INITDB_ROOT_PASSWORD' |
|||
# pre-check a few factors to see if it's even worth bothering with initdb |
|||
shouldPerformInitdb= |
|||
if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then |
|||
# if we have a username/password, let's set "--auth" |
|||
_mongod_hack_ensure_arg '--auth' "$@" |
|||
set -- "${mongodHackedArgs[@]}" |
|||
shouldPerformInitdb='true' |
|||
elif [ "$MONGO_INITDB_ROOT_USERNAME" ] || [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then |
|||
cat >&2 <<-'EOF' |
|||
|
|||
error: missing 'MONGO_INITDB_ROOT_USERNAME' or 'MONGO_INITDB_ROOT_PASSWORD' |
|||
both must be specified for a user to be created |
|||
|
|||
EOF |
|||
exit 1 |
|||
fi |
|||
|
|||
if [ -z "$shouldPerformInitdb" ]; then |
|||
# if we've got any /docker-entrypoint-initdb.d/* files to parse later, we should initdb |
|||
for f in /docker-entrypoint-initdb.d/*; do |
|||
case "$f" in |
|||
*.sh|*.js) # this should match the set of files we check for below |
|||
shouldPerformInitdb="$f" |
|||
break |
|||
;; |
|||
esac |
|||
done |
|||
fi |
|||
|
|||
# check for a few known paths (to determine whether we've already initialized and should thus skip our initdb scripts) |
|||
if [ -n "$shouldPerformInitdb" ]; then |
|||
dbPath="$(_dbPath "$@")" |
|||
for path in \ |
|||
"$dbPath/WiredTiger" \ |
|||
"$dbPath/journal" \ |
|||
"$dbPath/local.0" \ |
|||
"$dbPath/storage.bson" \ |
|||
; do |
|||
if [ -e "$path" ]; then |
|||
shouldPerformInitdb= |
|||
break |
|||
fi |
|||
done |
|||
fi |
|||
|
|||
if [ -n "$shouldPerformInitdb" ]; then |
|||
mongodHackedArgs=( "$@" ) |
|||
if _parse_config "$@"; then |
|||
_mongod_hack_ensure_arg_val --config "$tempConfigFile" "${mongodHackedArgs[@]}" |
|||
fi |
|||
_mongod_hack_ensure_arg_val --bind_ip 127.0.0.1 "${mongodHackedArgs[@]}" |
|||
_mongod_hack_ensure_arg_val --port 27017 "${mongodHackedArgs[@]}" |
|||
_mongod_hack_ensure_no_arg --bind_ip_all "${mongodHackedArgs[@]}" |
|||
|
|||
# remove "--auth" and "--replSet" for our initial startup (see https://docs.mongodb.com/manual/tutorial/enable-authentication/#start-mongodb-without-access-control) |
|||
# https://github.com/docker-library/mongo/issues/211 |
|||
_mongod_hack_ensure_no_arg --auth "${mongodHackedArgs[@]}" |
|||
if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then |
|||
_mongod_hack_ensure_no_arg_val --replSet "${mongodHackedArgs[@]}" |
|||
fi |
|||
|
|||
sslMode="$(_mongod_hack_have_arg '--sslPEMKeyFile' "$@" && echo 'allowSSL' || echo 'disabled')" # "BadValue: need sslPEMKeyFile when SSL is enabled" vs "BadValue: need to enable SSL via the sslMode flag when using SSL configuration parameters" |
|||
_mongod_hack_ensure_arg_val --sslMode "$sslMode" "${mongodHackedArgs[@]}" |
|||
|
|||
if stat "/proc/$$/fd/1" > /dev/null && [ -w "/proc/$$/fd/1" ]; then |
|||
# https://github.com/mongodb/mongo/blob/38c0eb538d0fd390c6cb9ce9ae9894153f6e8ef5/src/mongo/db/initialize_server_global_state.cpp#L237-L251 |
|||
# https://github.com/docker-library/mongo/issues/164#issuecomment-293965668 |
|||
_mongod_hack_ensure_arg_val --logpath "/proc/$$/fd/1" "${mongodHackedArgs[@]}" |
|||
else |
|||
initdbLogPath="$(_dbPath "$@")/docker-initdb.log" |
|||
echo >&2 "warning: initdb logs cannot write to '/proc/$$/fd/1', so they are in '$initdbLogPath' instead" |
|||
_mongod_hack_ensure_arg_val --logpath "$initdbLogPath" "${mongodHackedArgs[@]}" |
|||
fi |
|||
_mongod_hack_ensure_arg --logappend "${mongodHackedArgs[@]}" |
|||
|
|||
pidfile="${TMPDIR:-/tmp}/docker-entrypoint-temp-mongod.pid" |
|||
rm -f "$pidfile" |
|||
_mongod_hack_ensure_arg_val --pidfilepath "$pidfile" "${mongodHackedArgs[@]}" |
|||
|
|||
"${mongodHackedArgs[@]}" --fork |
|||
|
|||
mongo=( mongo --host 127.0.0.1 --port 27017 --quiet ) |
|||
|
|||
# check to see that our "mongod" actually did start up (catches "--help", "--version", MongoDB 3.2 being silly, slow prealloc, etc) |
|||
# https://jira.mongodb.org/browse/SERVER-16292 |
|||
tries=30 |
|||
while true; do |
|||
if ! { [ -s "$pidfile" ] && ps "$(< "$pidfile")" &> /dev/null; }; then |
|||
# bail ASAP if "mongod" isn't even running |
|||
echo >&2 |
|||
echo >&2 "error: $originalArgOne does not appear to have stayed running -- perhaps it had an error?" |
|||
echo >&2 |
|||
exit 1 |
|||
fi |
|||
if "${mongo[@]}" 'admin' --eval 'quit(0)' &> /dev/null; then |
|||
# success! |
|||
break |
|||
fi |
|||
(( tries-- )) |
|||
if [ "$tries" -le 0 ]; then |
|||
echo >&2 |
|||
echo >&2 "error: $originalArgOne does not appear to have accepted connections quickly enough -- perhaps it had an error?" |
|||
echo >&2 |
|||
exit 1 |
|||
fi |
|||
sleep 1 |
|||
done |
|||
|
|||
if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then |
|||
rootAuthDatabase='admin' |
|||
|
|||
"${mongo[@]}" "$rootAuthDatabase" <<-EOJS |
|||
db.createUser({ |
|||
user: $(_js_escape "$MONGO_INITDB_ROOT_USERNAME"), |
|||
pwd: $(_js_escape "$MONGO_INITDB_ROOT_PASSWORD"), |
|||
roles: [ { role: 'root', db: $(_js_escape "$rootAuthDatabase") } ] |
|||
}) |
|||
EOJS |
|||
fi |
|||
|
|||
export MONGO_INITDB_DATABASE="${MONGO_INITDB_DATABASE:-test}" |
|||
|
|||
echo |
|||
for f in /docker-entrypoint-initdb.d/*; do |
|||
case "$f" in |
|||
*.sh) echo "$0: running $f"; . "$f" ;; |
|||
*.js) echo "$0: running $f"; "${mongo[@]}" "$MONGO_INITDB_DATABASE" "$f"; echo ;; |
|||
*) echo "$0: ignoring $f" ;; |
|||
esac |
|||
echo |
|||
done |
|||
|
|||
"${mongodHackedArgs[@]}" --shutdown |
|||
rm -f "$pidfile" |
|||
|
|||
echo |
|||
echo 'MongoDB init process complete; ready for start up.' |
|||
echo |
|||
fi |
|||
|
|||
# MongoDB 3.6+ defaults to localhost-only binding |
|||
if mongod --help 2>&1 | grep -q -- --bind_ip_all; then # TODO remove this conditional when 3.4 is no longer supported |
|||
haveBindIp= |
|||
if _mongod_hack_have_arg --bind_ip "$@" || _mongod_hack_have_arg --bind_ip_all "$@"; then |
|||
haveBindIp=1 |
|||
elif _parse_config "$@" && jq --exit-status '.net.bindIp // .net.bindIpAll' "$jsonConfigFile" > /dev/null; then |
|||
haveBindIp=1 |
|||
fi |
|||
if [ -z "$haveBindIp" ]; then |
|||
# so if no "--bind_ip" is specified, let's add "--bind_ip_all" |
|||
set -- "$@" --bind_ip_all |
|||
fi |
|||
fi |
|||
|
|||
unset "${!MONGO_INITDB_@}" |
|||
fi |
|||
|
|||
rm -f "$jsonConfigFile" "$tempConfigFile" |
|||
|
|||
exec "$@" |
|||
@ -0,0 +1,18 @@ |
|||
systemLog: |
|||
destination: file |
|||
path: "/var/log/mongodb/mongod.log" |
|||
logAppend: true |
|||
storage: |
|||
dbPath: "/data/db" |
|||
journal: |
|||
enabled: true |
|||
net: |
|||
port: 27017 |
|||
#bindIp: mongo_node1 |
|||
replication: |
|||
replSetName: replica01 |
|||
setParameter: |
|||
enableLocalhostAuthBypass: false |
|||
security: |
|||
authorization: enabled |
|||
keyFile: "/data/mongo.key" |
|||
@ -0,0 +1,11 @@ |
|||
sudo mkdir -p /var/lab/mongo_replica |
|||
sudo mkdir -p /var/lab/swarmexec |
|||
sudo touch /var/lab/mongo_replica.log |
|||
|
|||
env MONGOnode1=mtoje636wza8b0pxvhj7ewto3 \ |
|||
env MONGOnode2=teab4qgrb17mb5sv2a8ex599g \ |
|||
env MONGOnode3=st6ebl5y2kjvgjthq88v6r2fs \ |
|||
docker stack deploy -c stack.yml mongo |
|||
|
|||
|
|||
|
|||
@ -0,0 +1,21 @@ |
|||
systemLog: |
|||
destination: file |
|||
path: "/var/log/mongodb/mongod.log" |
|||
logAppend: true |
|||
storage: |
|||
dbPath: "/data/db" |
|||
journal: |
|||
enabled: true |
|||
#processManagement: |
|||
# fork: true |
|||
net: |
|||
port: 27017 |
|||
#bindIp: 127.0.0.1 # Listen to local interface only, comment to listen on all interfaces. |
|||
bindIpAll: true |
|||
replication: |
|||
replSetName: "replica01" |
|||
setParameter: |
|||
enableLocalhostAuthBypass: false |
|||
security: |
|||
authorization: enabled |
|||
keyFile: "/data/mongo.key" |
|||
@ -0,0 +1,120 @@ |
|||
version: "3.7" |
|||
|
|||
networks: |
|||
mongo-net: |
|||
external: true |
|||
|
|||
services: |
|||
|
|||
node1: |
|||
image: mongo:4.0 |
|||
command: /usr/bin/mongod --config /etc/mongod.conf |
|||
labels: |
|||
node1.description: "node1" |
|||
networks: |
|||
mongo-net: |
|||
ipv4_address: 192.168.1.11 |
|||
expose: |
|||
- "27017" |
|||
environment: |
|||
TERM: xterm |
|||
volumes: |
|||
- /etc/localtime:/etc/localtime:ro |
|||
- /var/lab/mongo_replica:/data/db |
|||
- /var/lab/swarmexec/mongo.key:/data/mongo.key |
|||
- /var/lab/swarmexec/mongod2.conf:/etc/mongod.conf |
|||
- /var/lab/mongo_replica.log:/var/log/mongodb/mongod.log |
|||
deploy: |
|||
mode: replicated |
|||
replicas: 1 |
|||
endpoint_mode: vip |
|||
restart_policy: |
|||
condition: on-failure |
|||
resources: |
|||
limits: |
|||
cpus: '1' |
|||
memory: 512M |
|||
reservations: |
|||
cpus: '0.50' |
|||
memory: 512M |
|||
placement: |
|||
constraints: |
|||
- node.id == ${MONGOnode1} |
|||
labels: |
|||
node1.description: "node1" |
|||
|
|||
|
|||
node2: |
|||
image: mongo:4.0 |
|||
command: /usr/bin/mongod --config /etc/mongod.conf |
|||
labels: |
|||
node2.description: "node2" |
|||
networks: |
|||
mongo-net: |
|||
ipv4_address: 192.168.1.12 |
|||
expose: |
|||
- "27017" |
|||
environment: |
|||
TERM: xterm |
|||
volumes: |
|||
- /etc/localtime:/etc/localtime:ro |
|||
- /var/lab/mongo_replica:/data/db |
|||
- /var/lab/swarmexec/mongo.key:/data/mongo.key |
|||
- /var/lab/swarmexec/mongod2.conf:/etc/mongod.conf |
|||
- /var/lab/mongo_replica.log:/var/log/mongodb/mongod.log |
|||
deploy: |
|||
mode: replicated |
|||
replicas: 1 |
|||
endpoint_mode: vip |
|||
restart_policy: |
|||
condition: on-failure |
|||
resources: |
|||
limits: |
|||
cpus: '1' |
|||
memory: 512M |
|||
reservations: |
|||
cpus: '0.50' |
|||
memory: 512M |
|||
placement: |
|||
constraints: |
|||
- node.id == ${MONGOnode2} |
|||
labels: |
|||
node2.description: "node2" |
|||
|
|||
node3: |
|||
image: mongo:4.0 |
|||
command: /usr/bin/mongod --config /etc/mongod.conf |
|||
labels: |
|||
node3.description: "node3" |
|||
networks: |
|||
mongo-net: |
|||
ipv4_address: 192.168.1.13 |
|||
expose: |
|||
- "27017" |
|||
environment: |
|||
TERM: xterm |
|||
volumes: |
|||
- /etc/localtime:/etc/localtime:ro |
|||
- /var/lab/mongo_replica:/data/db |
|||
- /var/lab/swarmexec/mongo.key:/data/mongo.key |
|||
- /var/lab/swarmexec/mongod2.conf:/etc/mongod.conf |
|||
- /var/lab/mongo_replica.log:/var/log/mongodb/mongod.log |
|||
deploy: |
|||
mode: replicated |
|||
replicas: 1 |
|||
endpoint_mode: vip |
|||
restart_policy: |
|||
condition: on-failure |
|||
resources: |
|||
limits: |
|||
cpus: '1' |
|||
memory: 512M |
|||
reservations: |
|||
cpus: '0.50' |
|||
memory: 512M |
|||
placement: |
|||
constraints: |
|||
- node.id == ${MONGOnode3} |
|||
labels: |
|||
node3.description: "node3" |
|||
|
|||
Loading…
Reference in new issue