78 lines
3.7 KiB
Docker
78 lines
3.7 KiB
Docker
# Postgres Container
|
|
#
|
|
# Copyright (c) 2021-2022 Cisco Systems, Inc. and others. All rights reserved.
|
|
#
|
|
# Build:
|
|
# DOCKER_BUILDKIT=1 docker build --platform linux/amd64 -t openbmp/postgres:2.1.0 .
|
|
#
|
|
# Run:
|
|
# docker run --rm -it -p 5432:5432 \
|
|
# -e POSTGRES_PASSWORD=openbmp \
|
|
# -e POSTGRES_USER=openbmp \
|
|
# -e POSTGRES_DB=openbmp \
|
|
# openbmp/postgres:2.1.0
|
|
|
|
# -----------------------------------------------
|
|
# stage: Build
|
|
# -----------------------------------------------
|
|
FROM timescale/timescaledb:2.5.1-pg14 AS build
|
|
|
|
ENV PG_CRON_VERSION 1.3.0
|
|
|
|
WORKDIR /ws
|
|
|
|
RUN apk update \
|
|
&& apk add --no-cache --virtual .build-deps build-base ca-certificates clang-dev llvm12 openssl
|
|
|
|
## Install pg_cron
|
|
RUN wget -O pg_cron.tgz https://github.com/citusdata/pg_cron/archive/v$PG_CRON_VERSION.tar.gz \
|
|
&& tar xvzf pg_cron.tgz && cd pg_cron-$PG_CRON_VERSION/ \
|
|
&& sed -i.bak -e 's/-Werror//g' Makefile \
|
|
&& sed -i.bak -e 's/-Wno-implicit-fallthrough//g' Makefile \
|
|
&& make
|
|
|
|
# -----------------------------------------------
|
|
# stage: Final container
|
|
# -----------------------------------------------
|
|
|
|
FROM timescale/timescaledb:2.5.1-pg14
|
|
|
|
ENV PG_CRON_VERSION 1.3.0
|
|
|
|
# Current/working dir
|
|
VOLUME ["/ws"]
|
|
WORKDIR /ws
|
|
|
|
# Expected data locations for base tables and timeseries
|
|
#
|
|
VOLUME ["/var/lib/postgresql/data"]
|
|
VOLUME ["/var/lib/postgresql/ts"]
|
|
|
|
|
|
RUN apk update \
|
|
&& apk add openssl\
|
|
&& openssl req -x509 -newkey rsa:4096 -nodes -subj "/C=US/ST=CA/L=Seattle/O=OpenBMP/CN=localhost" \
|
|
-keyout /psql_server.key -out /psql_server.crt -days 2048 \
|
|
&& chown postgres /psql_server.* \
|
|
&& mkdir -p /var/lib/postgresql/ts \
|
|
&& chown postgres /var/lib/postgresql/ts \
|
|
&& egrep -q -e '^hostssl( |\t)+all' /usr/local/share/postgresql/pg_hba.conf.sample || \
|
|
echo 'hostssl all all 0.0.0.0/0 md5' >> /usr/local/share/postgresql/pg_hba.conf.sample \
|
|
&& sed -i -e "s/^\#*listen_addresses.*=.*/listen_addresses = '*'/" /usr/local/share/postgresql/postgresql.conf.sample \
|
|
&& sed -i -e "s/^\#*max_wal_size.*=.*/max_wal_size = 10GB/" /usr/local/share/postgresql/postgresql.conf.sample \
|
|
&& sed -i -e "s/^\#*ssl[ ]*=.*/ssl = on/" /usr/local/share/postgresql/postgresql.conf.sample \
|
|
&& sed -i -e "s/^\#*ssl_cert_file.*=.*/ssl_cert_file = \'\/psql_server.crt\'/" /usr/local/share/postgresql/postgresql.conf.sample \
|
|
&& sed -i -e "s/^\#*ssl_key_file.*=.*/ssl_key_file = \'\/psql_server.key\'/" /usr/local/share/postgresql/postgresql.conf.sample \
|
|
&& sed -i -e "s/^shared_preload_libraries.*/shared_preload_libraries = 'timescaledb,pg_cron'/g" /usr/local/share/postgresql/postgresql.conf.sample
|
|
|
|
COPY --chmod=755 --from=build /ws/pg_cron-$PG_CRON_VERSION/pg_cron.so /usr/local/lib/postgresql/pg_cron.so
|
|
COPY --chmod=644 --from=build /ws/pg_cron-$PG_CRON_VERSION/pg_cron.control /usr/local/share/postgresql/extension/pg_cron.control
|
|
COPY --chmod=644 --from=build /ws/pg_cron-$PG_CRON_VERSION/pg_cron--1.0--1.1.sql /usr/local/share/postgresql/extension/pg_cron--1.0--1.1.sql
|
|
COPY --chmod=644 --from=build /ws/pg_cron-$PG_CRON_VERSION/pg_cron--1.1--1.2.sql /usr/local/share/postgresql/extension/pg_cron--1.1--1.2.sql
|
|
COPY --chmod=644 --from=build /ws/pg_cron-$PG_CRON_VERSION/pg_cron--1.2--1.3.sql /usr/local/share/postgresql/extension/pg_cron--1.2--1.3.sql
|
|
COPY --chmod=644 --from=build /ws/pg_cron-$PG_CRON_VERSION/pg_cron--1.0.sql /usr/local/share/postgresql/extension/pg_cron--1.0.sql
|
|
|
|
ADD --chmod=755 scripts/0_obmp_init.sh /docker-entrypoint-initdb.d/0_obmp_init.sh
|
|
## providing db name for cron metadata tables
|
|
RUN echo "cron.database_name = 'openbmp'" >> /usr/local/share/postgresql/postgresql.conf.sample
|