mirror of https://github.com/apache/kafka.git
91 lines
3.8 KiB
Docker
91 lines
3.8 KiB
Docker
|
# Licensed to the Apache Software Foundation (ASF) under one or more
|
||
|
|
# contributor license agreements. See the NOTICE file distributed with
|
||
|
|
# this work for additional information regarding copyright ownership.
|
||
|
|
# The ASF licenses this file to You under the Apache License, Version 2.0
|
||
|
|
# (the "License"); you may not use this file except in compliance with
|
||
|
|
# the License. You may obtain a copy of the License at
|
||
|
|
#
|
||
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
#
|
||
|
|
# Unless required by applicable law or agreed to in writing, software
|
||
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
# See the License for the specific language governing permissions and
|
||
|
|
# limitations under the License.
|
||
|
|
|
||
|
|
FROM ghcr.io/graalvm/graalvm-community:21 AS build-native-image
|
||
|
|
|
||
|
|
ARG kafka_url
|
||
|
|
|
||
|
|
WORKDIR /app
|
||
|
|
|
||
|
|
ENV KAFKA_URL=$kafka_url
|
||
|
|
COPY native-image-configs native-image-configs
|
||
|
|
|
||
|
|
RUN mkdir kafka; \
|
||
|
|
microdnf install wget; \
|
||
|
|
wget -nv -O kafka.tgz "$KAFKA_URL"; \
|
||
|
|
wget -nv -O kafka.tgz.asc "$kafka_url.asc"; \
|
||
|
|
tar xfz kafka.tgz -C kafka --strip-components 1; \
|
||
|
|
wget -nv -O KEYS https://downloads.apache.org/kafka/KEYS; \
|
||
|
|
gpg --import KEYS; \
|
||
|
|
gpg --batch --verify kafka.tgz.asc kafka.tgz; \
|
||
|
|
rm kafka.tgz ; \
|
||
|
|
cd kafka ; \
|
||
|
|
# Build the native-binary of the apache kafka using graalVM native-image.
|
||
|
|
native-image --no-fallback \
|
||
|
|
--enable-http \
|
||
|
|
--enable-https \
|
||
|
|
--allow-incomplete-classpath \
|
||
|
|
--report-unsupported-elements-at-runtime \
|
||
|
|
--install-exit-handlers \
|
||
|
|
--enable-monitoring=jmxserver,jmxclient,heapdump,jvmstat \
|
||
|
|
-H:+ReportExceptionStackTraces \
|
||
|
|
-H:+EnableAllSecurityServices \
|
||
|
|
-H:EnableURLProtocols=http,https \
|
||
|
|
-H:AdditionalSecurityProviders=sun.security.jgss.SunProvider \
|
||
|
|
-H:ReflectionConfigurationFiles=/app/native-image-configs/reflect-config.json \
|
||
|
|
-H:JNIConfigurationFiles=/app/native-image-configs/jni-config.json \
|
||
|
|
-H:ResourceConfigurationFiles=/app/native-image-configs/resource-config.json \
|
||
|
|
-H:SerializationConfigurationFiles=/app/native-image-configs/serialization-config.json \
|
||
|
|
-H:PredefinedClassesConfigurationFiles=/app/native-image-configs/predefined-classes-config.json \
|
||
|
|
-H:DynamicProxyConfigurationFiles=/app/native-image-configs/proxy-config.json \
|
||
|
|
--verbose \
|
||
|
|
-march=compatibility \
|
||
|
|
-cp "libs/*" kafka.docker.KafkaDockerWrapper \
|
||
|
|
-o kafka.Kafka
|
||
|
|
|
||
|
|
|
||
|
|
FROM alpine:latest
|
||
|
|
|
||
|
|
EXPOSE 9092
|
||
|
|
|
||
|
|
ARG build_date
|
||
|
|
|
||
|
|
LABEL org.label-schema.name="kafka" \
|
||
|
|
org.label-schema.description="Apache Kafka" \
|
||
|
|
org.label-schema.build-date="${build_date}" \
|
||
|
|
org.label-schema.vcs-url="https://github.com/apache/kafka" \
|
||
|
|
maintainer="Apache Kafka"
|
||
|
|
|
||
|
|
RUN apk update ; \
|
||
|
|
apk add --no-cache gcompat ; \
|
||
|
|
apk add --no-cache bash ; \
|
||
|
|
mkdir -p /etc/kafka/docker /mnt/shared/config /opt/kafka/config /etc/kafka/secrets ; \
|
||
|
|
adduser -h /home/appuser -D --shell /bin/bash appuser ; \
|
||
|
|
chown appuser:root -R /etc/kafka /opt/kafka /mnt/shared/config ; \
|
||
|
|
chmod -R ug+w /etc/kafka /opt/kafka /mnt/shared/config ;
|
||
|
|
|
||
|
|
COPY --chown=appuser:root --from=build-native-image /app/kafka/kafka.Kafka /opt/kafka/
|
||
|
|
COPY --chown=appuser:root --from=build-native-image /app/kafka/config/kraft/server.properties /etc/kafka/docker/
|
||
|
|
COPY --chown=appuser:root --from=build-native-image /app/kafka/config/log4j.properties /etc/kafka/docker/
|
||
|
|
COPY --chown=appuser:root --from=build-native-image /app/kafka/config/tools-log4j.properties /etc/kafka/docker/
|
||
|
|
COPY --chown=appuser:root resources/common-scripts /etc/kafka/docker/
|
||
|
|
COPY --chown=appuser:root launch /etc/kafka/docker/
|
||
|
|
|
||
|
|
USER appuser
|
||
|
|
|
||
|
|
VOLUME ["/etc/kafka/secrets", "/mnt/shared/config"]
|
||
|
|
|
||
|
|
CMD ["/etc/kafka/docker/run"]
|