Update percona library with fix for build failures and update latest tags #18023
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
The diff comment failing is fine, we can work around that. The other build failures still need to be fixed. |
@yosifkit We have removed the version tags for PS 5.7, 5.6 and PSMDB 4.2, 4.4 from the percona library which were based on centos:7 and are all eol now. |
|
Slight correction: the diff comment job failing is failing because of |
This comment has been minimized.
This comment has been minimized.
@tianon The issue seems to be fixed now. Thank you. |
Diff:diff --git a/_bashbrew-cat b/_bashbrew-cat
dissimilarity index 61%
index 35d4c8b..26b1d0a 100644
--- a/_bashbrew-cat
+++ b/_bashbrew-cat
@@ -?,? +1,23 @@
+Maintainers: Evgeniy Patlan <evgeniy.patlan@percona.com> (@EvgeniyPatlan), Viacheslav Sarzhan <slava.sarzhan@percona.com> (@hors), Oleksandr Miroshnychenko <alex.miroshnychenko@percona.com> (@vorsel), Vadim Yalovets <vadim.yalovets@percona.com> (@adivinho), Surabhi Bhat <surabhi.bhat@percona.com> (@surbhat1595)
+GitRepo: https://github.com/percona/percona-docker.git
+GitFetch: refs/heads/main
+
+Tags: 8.0.39-30-centos, 8.0-centos, 8-centos, 8.0.39-30, 8.0, 8, ps-8.0.39-30, ps-8.0, ps-8
+GitCommit: 6f343e2d8ad39d91ea6e6c7a7f02373b1f0ae866
+Directory: percona-server-8.0
+File: Dockerfile-dockerhub
+
+Tags: psmdb-5.0.29, psmdb-5.0
+GitCommit: 6f343e2d8ad39d91ea6e6c7a7f02373b1f0ae866
+Directory: percona-server-mongodb-5.0
+File: Dockerfile-dockerhub
+
+Tags: psmdb-6.0.19, psmdb-6.0
+GitCommit: 6f343e2d8ad39d91ea6e6c7a7f02373b1f0ae866
+Directory: percona-server-mongodb-6.0
+File: Dockerfile-dockerhub
+
+Tags: psmdb-7.0.15, psmdb-7.0
+GitCommit: 6f343e2d8ad39d91ea6e6c7a7f02373b1f0ae866
+Directory: percona-server-mongodb-7.0
+File: Dockerfile-dockerhub
diff --git a/_bashbrew-list b/_bashbrew-list
dissimilarity index 78%
index b19b65a..6727a23 100644
--- a/_bashbrew-list
+++ b/_bashbrew-list
@@ -?,? +1,15 @@
+percona:8
+percona:8-centos
+percona:8.0
+percona:8.0-centos
+percona:8.0.39-30
+percona:8.0.39-30-centos
+percona:psmdb-5.0
+percona:psmdb-5.0.29
+percona:psmdb-6.0
+percona:psmdb-6.0.19
+percona:psmdb-7.0
+percona:psmdb-7.0.15
+percona:ps-8
+percona:ps-8.0
+percona:ps-8.0.39-30
diff --git a/_bashbrew-list-build-order b/_bashbrew-list-build-order
index 0178e3c..f314b1b 100644
--- a/_bashbrew-list-build-order
+++ b/_bashbrew-list-build-order
@@ -1,7 +1,4 @@
-percona:psmdb-4.2
-percona:psmdb-4.4
percona:psmdb-5.0
percona:psmdb-6.0
-percona:ps-5
-percona:ps-5.6
+percona:psmdb-7.0
percona:ps-8
diff --git a/percona_5.6/Dockerfile-dockerhub b/percona_5.6/Dockerfile-dockerhub
deleted file mode 100644
index 3e5d9cd..0000000
diff --git a/percona_5.6/ps-entry.sh b/percona_5.6/ps-entry.sh
deleted file mode 100755
index cbe018c..0000000
diff --git a/percona_5/Dockerfile-dockerhub b/percona_5/Dockerfile-dockerhub
deleted file mode 100644
index cee20fe..0000000
diff --git a/percona_5/ps-entry.sh b/percona_5/ps-entry.sh
deleted file mode 100755
index e6f0908..0000000
diff --git a/percona_8/Dockerfile b/percona_8/Dockerfile-dockerhub
similarity index 83%
rename from percona_8/Dockerfile
rename to percona_8/Dockerfile-dockerhub
index 3ccf519..6948a8a 100644
--- a/percona_8/Dockerfile
+++ b/percona_8/Dockerfile-dockerhub
@@ -16,16 +16,15 @@ RUN set -ex; \
useradd -u 1001 -r -g 1001 -s /sbin/nologin \
-m -c "Default Application User" mysql
-ENV PS_VERSION 8.0.36-28.1
-ENV MYSQL_SHELL_VERSION 8.0.36-1
+ENV PS_VERSION 8.0.39-30.1
+ENV MYSQL_SHELL_VERSION 8.0.38-1
ENV OS_VER el9
ENV FULL_PERCONA_VERSION "$PS_VERSION.$OS_VER"
ENV FULL_MYSQL_SHELL_VERSION "$MYSQL_SHELL_VERSION.$OS_VER"
-ENV PS_REPO release
-ENV PS_TELEMETRY_VERSION 8.0.36-28-1
+ENV PS_REPO testing
+ENV PS_TELEMETRY_VERSION 8.0.39-30-1
ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
ENV CALL_HOME_VERSION 0.1
-
# Do not report during Docker image creation.
# Note that doing so, would create telemetry config file
# which would prevent reporting when new container is started.
@@ -36,10 +35,10 @@ ARG PERCONA_TELEMETRY_DISABLE=1
# check repository package signature in secure way
RUN set -ex; \
export GNUPGHOME="$(mktemp -d)"; \
- gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A 99DB70FAE1D7CE227FB6488205B555B38483C65D; \
- gpg --batch --export --armor 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A > ${GNUPGHOME}/RPM-GPG-KEY-Percona; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
- rpmkeys --import ${GNUPGHOME}/RPM-GPG-KEY-Percona ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
rpmkeys --checksig /tmp/percona-release.rpm; \
rpm -i /tmp/percona-release.rpm; \
@@ -64,6 +63,10 @@ RUN set -ex; \
curl \
glibc \
libnghttp2 \
+ openssh \
+ python3-setuptools-wheel \
+ krb5-libs \
+ pam \
python3; \
\
dnf -y install \
@@ -85,7 +88,7 @@ RUN set -ex; \
| xargs -rt -0 sed -Ei 's/^(bind-address|log|user)/#&/'; \
# don't reverse lookup hostnames, they are usually another container
echo '!includedir /etc/my.cnf.d' >> /etc/my.cnf; \
- printf '[mysqld]\nskip-host-cache\nskip-name-resolve\n' > /etc/my.cnf.d/docker.cnf; \
+ printf '[mysqld]\nhost_cache_size=0\nskip-name-resolve\n' > /etc/my.cnf.d/docker.cnf; \
# TokuDB modifications
/usr/bin/install -m 0664 -o mysql -g root /dev/null /etc/sysconfig/mysql; \
echo "LD_PRELOAD=/usr/lib64/libjemalloc.so.1" >> /etc/sysconfig/mysql; \
@@ -108,6 +111,9 @@ RUN set -eux; \
ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
COPY ps-entry.sh /docker-entrypoint.sh
+RUN sed -i '/^if \[\[ \${PERCONA_TELEMETRY_DISABLE}/,/^fi$/c \
+ /call-home.sh -f "PRODUCT_FAMILY_PS" -v "${PS_TELEMETRY_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :\
+ \nexec "$@"' /docker-entrypoint.sh
ENTRYPOINT ["/docker-entrypoint.sh"]
USER mysql
diff --git a/percona_8/ps-entry.sh b/percona_8/ps-entry.sh
index 8b92cf5..a7fe81b 100755
--- a/percona_8/ps-entry.sh
+++ b/percona_8/ps-entry.sh
@@ -248,7 +245,9 @@ else
CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
fi
-# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
-/call-home.sh -f "PRODUCT_FAMILY_PS" -v "${PS_TELEMETRY_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :
-
-exec "$@"
+if [[ ${PERCONA_TELEMETRY_DISABLE} -ne "0" ]]; then
+ exec "$@" --percona_telemetry_disable=1
+else
+ /usr/bin/telemetry-agent-supervisor.sh &
+ exec "$@"
+fi
diff --git a/percona_psmdb-4.2/Dockerfile b/percona_psmdb-4.2/Dockerfile
deleted file mode 100644
index b16bb25..0000000
diff --git a/percona_psmdb-4.2/ps-entry.sh b/percona_psmdb-4.2/ps-entry.sh
deleted file mode 100755
index a3ec16d..0000000
diff --git a/percona_psmdb-4.4/LICENSE b/percona_psmdb-4.4/LICENSE
deleted file mode 100644
index b5a2afb..0000000
diff --git a/percona_psmdb-5.0/Dockerfile b/percona_psmdb-5.0/Dockerfile-dockerhub
similarity index 66%
rename from percona_psmdb-5.0/Dockerfile
rename to percona_psmdb-5.0/Dockerfile-dockerhub
index 6163002..a634598 100644
--- a/percona_psmdb-5.0/Dockerfile
+++ b/percona_psmdb-5.0/Dockerfile-dockerhub
@@ -1,3 +1,4 @@
+# This Dockerfile should be used for docker official repo
FROM oraclelinux:8
LABEL org.opencontainers.image.authors="info@percona.com"
@@ -5,30 +6,39 @@ LABEL org.opencontainers.image.authors="info@percona.com"
# check repository package signature in secure way
RUN set -ex; \
export GNUPGHOME="$(mktemp -d)"; \
- gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
- gpg --batch --export --armor 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A > ${GNUPGHOME}/RPM-GPG-KEY-Percona; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
gpg --batch --export --armor 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1 > ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
- rpmkeys --import ${GNUPGHOME}/RPM-GPG-KEY-Percona ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
rpmkeys --checksig /tmp/percona-release.rpm; \
rpm -i /tmp/percona-release.rpm; \
rm -rf "$GNUPGHOME" /tmp/percona-release.rpm; \
rpm --import /etc/pki/rpm-gpg/PERCONA-PACKAGING-KEY
-ENV PSMDB_VERSION 5.0.18-15
+ENV PSMDB_VERSION 5.0.29-25
ENV OS_VER el8
ENV FULL_PERCONA_VERSION "$PSMDB_VERSION.$OS_VER"
ENV K8S_TOOLS_VERSION "0.5.0"
ENV PSMDB_REPO release
+ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
+ENV CALL_HOME_VERSION 0.1
+
+# Do not report during Docker image creation.
+ARG PERCONA_TELEMETRY_DISABLE=1
RUN set -ex; \
percona-release enable psmdb-50 ${PSMDB_REPO}; \
dnf config-manager --enable ol8_u4_security_validation; \
+ dnf -y update bind-export-libs; \
+ dnf -y update glibc; \
+ dnf -y update libgcrypt; \
dnf -y install \
percona-server-mongodb-mongos-${FULL_PERCONA_VERSION} \
percona-server-mongodb-shell-${FULL_PERCONA_VERSION} \
percona-server-mongodb-tools-${FULL_PERCONA_VERSION} \
+ numactl \
procps-ng \
jq \
tar \
@@ -66,24 +76,27 @@ RUN set -eux; \
chmod +x /usr/bin/gosu; \
curl -f -o /licenses/LICENSE.gosu https://raw.githubusercontent.com/tianon/gosu/${GOSU_VERSION}/LICENSE
-RUN set -ex; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/k8s-mongodb-initiator -o /usr/local/bin/k8s-mongodb-initiator; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/mongodb-healthcheck -o /usr/local/bin/mongodb-healthcheck; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/SHA256SUMS -o /tmp/SHA256SUMS; \
- echo "$(grep 'k8s-mongodb-initiator' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/k8s-mongodb-initiator | sha256sum -c -; \
- echo "$(grep 'mongodb-healthcheck' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/mongodb-healthcheck | sha256sum -c -; \
- rm -f /tmp/SHA256SUMS; \
- \
- chmod 0755 /usr/local/bin/k8s-mongodb-initiator /usr/local/bin/mongodb-healthcheck
-
VOLUME ["/data/db"]
RUN set -ex; \
curl -fSL https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js -o /js-yaml.js; \
echo "45dc3dd03dc07a06705a2c2989b8c7f709013f04bd5386e3279d4e447f07ebd7 /js-yaml.js" | sha256sum -c -
-COPY ps-entry.sh /entrypoint.sh
+RUN set -eux; \
+ curl -fL "https://github.com/percona/telemetry-agent/archive/refs/tags/phase-$CALL_HOME_VERSION.tar.gz" -o "phase-$CALL_HOME_VERSION.tar.gz"; \
+ echo "$CALL_HOME_DOWNLOAD_SHA256 phase-$CALL_HOME_VERSION.tar.gz" | sha256sum --strict --check; \
+ tar -xvf phase-$CALL_HOME_VERSION.tar.gz; \
+ cp telemetry-agent-phase-$CALL_HOME_VERSION/call-home.sh .;\
+ rm -rf telemetry-agent-phase-$CALL_HOME_VERSION phase-$CALL_HOME_VERSION.tar.gz; \
+ chmod a+rx /call-home.sh; \
+ mkdir -p /usr/local/percona; \
+ chown 1001:1001 /usr/local/percona
+ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
+COPY ps-entry.sh /entrypoint.sh
+RUN sed -i '/^if \[\[ \${PERCONA_TELEMETRY_DISABLE}/,/^fi$/c \
+ /call-home.sh -f "PRODUCT_FAMILY_PSMDB" -v "${PSMDB_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :\
+ \nexec "$@"' /entrypoint.sh
ENTRYPOINT ["/entrypoint.sh"]
EXPOSE 27017
diff --git a/percona_psmdb-5.0/ps-entry.sh b/percona_psmdb-5.0/ps-entry.sh
index 9ffcecc..e763af4 100755
--- a/percona_psmdb-5.0/ps-entry.sh
+++ b/percona_psmdb-5.0/ps-entry.sh
@@ -460,5 +460,36 @@ fi
rm -f "$jsonConfigFile" "$tempConfigFile"
-set -o xtrace
-exec "$@"
+set -o xtrace +u
+
+# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
+if [ ! -z "${PERCONA_INSTANCE_ID}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -i ${PERCONA_INSTANCE_ID}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_CONFIG_FILE_PATH}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -j ${PERCONA_TELEMETRY_CONFIG_FILE_PATH}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_URL}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -u ${PERCONA_TELEMETRY_URL}"
+fi
+
+if [ ! -z "${PERCONA_SEND_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -t ${PERCONA_SEND_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -t 7"
+fi
+
+if [ ! -z "${PERCONA_CONNECT_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -c ${PERCONA_CONNECT_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
+fi
+
+if [[ ${PERCONA_TELEMETRY_DISABLE} -ne "0" ]]; then
+ exec "$@" --setParameter perconaTelemetry=false
+else
+ /usr/bin/telemetry-agent-supervisor.sh &
+ exec "$@"
+fi
diff --git a/percona_psmdb-6.0/Dockerfile b/percona_psmdb-6.0/Dockerfile-dockerhub
similarity index 66%
rename from percona_psmdb-6.0/Dockerfile
rename to percona_psmdb-6.0/Dockerfile-dockerhub
index c207655..8abf6b5 100644
--- a/percona_psmdb-6.0/Dockerfile
+++ b/percona_psmdb-6.0/Dockerfile-dockerhub
@@ -1,3 +1,4 @@
+# This Dockerfile should be used for docker official repo
FROM oraclelinux:8
LABEL org.opencontainers.image.authors="info@percona.com"
@@ -5,30 +6,40 @@ LABEL org.opencontainers.image.authors="info@percona.com"
# check repository package signature in secure way
RUN set -ex; \
export GNUPGHOME="$(mktemp -d)"; \
- gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
- gpg --batch --export --armor 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A > ${GNUPGHOME}/RPM-GPG-KEY-Percona; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
gpg --batch --export --armor 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1 > ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
- rpmkeys --import ${GNUPGHOME}/RPM-GPG-KEY-Percona ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
rpmkeys --checksig /tmp/percona-release.rpm; \
rpm -i /tmp/percona-release.rpm; \
rm -rf "$GNUPGHOME" /tmp/percona-release.rpm; \
rpm --import /etc/pki/rpm-gpg/PERCONA-PACKAGING-KEY
-ENV PSMDB_VERSION 6.0.6-5
+ENV PSMDB_VERSION 6.0.19-16
ENV OS_VER el8
ENV FULL_PERCONA_VERSION "$PSMDB_VERSION.$OS_VER"
ENV K8S_TOOLS_VERSION "0.5.0"
ENV PSMDB_REPO release
+ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
+ENV CALL_HOME_VERSION 0.1
+
+# Do not report during Docker image creation.
+ARG PERCONA_TELEMETRY_DISABLE=1
RUN set -ex; \
percona-release enable psmdb-60 ${PSMDB_REPO}; \
dnf config-manager --enable ol8_u4_security_validation; \
+ dnf -y update openssh; \
+ dnf -y update bind-export-libs; \
+ dnf -y update glibc; \
+ dnf -y update libgcrypt; \
dnf -y install \
percona-server-mongodb-mongos-${FULL_PERCONA_VERSION} \
percona-server-mongodb-tools-${FULL_PERCONA_VERSION} \
percona-mongodb-mongosh \
+ numactl \
procps-ng \
jq \
tar \
@@ -66,24 +77,27 @@ RUN set -eux; \
chmod +x /usr/bin/gosu; \
curl -f -o /licenses/LICENSE.gosu https://raw.githubusercontent.com/tianon/gosu/${GOSU_VERSION}/LICENSE
-RUN set -ex; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/k8s-mongodb-initiator -o /usr/local/bin/k8s-mongodb-initiator; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/mongodb-healthcheck -o /usr/local/bin/mongodb-healthcheck; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/SHA256SUMS -o /tmp/SHA256SUMS; \
- echo "$(grep 'k8s-mongodb-initiator' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/k8s-mongodb-initiator | sha256sum -c -; \
- echo "$(grep 'mongodb-healthcheck' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/mongodb-healthcheck | sha256sum -c -; \
- rm -f /tmp/SHA256SUMS; \
- \
- chmod 0755 /usr/local/bin/k8s-mongodb-initiator /usr/local/bin/mongodb-healthcheck
-
VOLUME ["/data/db"]
RUN set -ex; \
curl -fSL https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js -o /js-yaml.js; \
echo "45dc3dd03dc07a06705a2c2989b8c7f709013f04bd5386e3279d4e447f07ebd7 /js-yaml.js" | sha256sum -c -
-COPY ps-entry.sh /entrypoint.sh
+RUN set -eux; \
+ curl -fL "https://github.com/percona/telemetry-agent/archive/refs/tags/phase-$CALL_HOME_VERSION.tar.gz" -o "phase-$CALL_HOME_VERSION.tar.gz"; \
+ echo "$CALL_HOME_DOWNLOAD_SHA256 phase-$CALL_HOME_VERSION.tar.gz" | sha256sum --strict --check; \
+ tar -xvf phase-$CALL_HOME_VERSION.tar.gz; \
+ cp telemetry-agent-phase-$CALL_HOME_VERSION/call-home.sh .;\
+ rm -rf telemetry-agent-phase-$CALL_HOME_VERSION phase-$CALL_HOME_VERSION.tar.gz; \
+ chmod a+rx /call-home.sh; \
+ mkdir -p /usr/local/percona; \
+ chown 1001:1001 /usr/local/percona
+ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
+COPY ps-entry.sh /entrypoint.sh
+RUN sed -i '/^if \[\[ \${PERCONA_TELEMETRY_DISABLE}/,/^fi$/c \
+ /call-home.sh -f "PRODUCT_FAMILY_PSMDB" -v "${PSMDB_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :\
+ \nexec "$@"' /entrypoint.sh
ENTRYPOINT ["/entrypoint.sh"]
EXPOSE 27017
diff --git a/percona_psmdb-6.0/ps-entry.sh b/percona_psmdb-6.0/ps-entry.sh
index 3df658a..69e15de 100755
--- a/percona_psmdb-6.0/ps-entry.sh
+++ b/percona_psmdb-6.0/ps-entry.sh
@@ -460,5 +460,36 @@ fi
rm -f "$jsonConfigFile" "$tempConfigFile"
-set -o xtrace
-exec "$@"
+set -o xtrace +u
+
+# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
+if [ ! -z "${PERCONA_INSTANCE_ID}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -i ${PERCONA_INSTANCE_ID}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_CONFIG_FILE_PATH}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -j ${PERCONA_TELEMETRY_CONFIG_FILE_PATH}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_URL}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -u ${PERCONA_TELEMETRY_URL}"
+fi
+
+if [ ! -z "${PERCONA_SEND_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -t ${PERCONA_SEND_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -t 7"
+fi
+
+if [ ! -z "${PERCONA_CONNECT_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -c ${PERCONA_CONNECT_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
+fi
+
+if [[ ${PERCONA_TELEMETRY_DISABLE} -ne "0" ]]; then
+ exec "$@" --setParameter perconaTelemetry=false
+else
+ /usr/bin/telemetry-agent-supervisor.sh &
+ exec "$@"
+fi
diff --git a/percona_psmdb-4.4/Dockerfile b/percona_psmdb-7.0/Dockerfile-dockerhub
similarity index 63%
rename from percona_psmdb-4.4/Dockerfile
rename to percona_psmdb-7.0/Dockerfile-dockerhub
index fc72b94..696aed0 100644
--- a/percona_psmdb-4.4/Dockerfile
+++ b/percona_psmdb-7.0/Dockerfile-dockerhub
@@ -1,3 +1,4 @@
+# This Dockerfile should be used for docker official repo
FROM oraclelinux:8
LABEL org.opencontainers.image.authors="info@percona.com"
@@ -5,30 +6,40 @@ LABEL org.opencontainers.image.authors="info@percona.com"
# check repository package signature in secure way
RUN set -ex; \
export GNUPGHOME="$(mktemp -d)"; \
- gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
- gpg --batch --export --armor 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A > ${GNUPGHOME}/RPM-GPG-KEY-Percona; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
gpg --batch --export --armor 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1 > ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
- rpmkeys --import ${GNUPGHOME}/RPM-GPG-KEY-Percona ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
rpmkeys --checksig /tmp/percona-release.rpm; \
rpm -i /tmp/percona-release.rpm; \
rm -rf "$GNUPGHOME" /tmp/percona-release.rpm; \
rpm --import /etc/pki/rpm-gpg/PERCONA-PACKAGING-KEY
-ENV PSMDB_VERSION 4.4.22-21
+ENV PSMDB_VERSION 7.0.15-9
ENV OS_VER el8
ENV FULL_PERCONA_VERSION "$PSMDB_VERSION.$OS_VER"
ENV K8S_TOOLS_VERSION "0.5.0"
ENV PSMDB_REPO release
+ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
+ENV CALL_HOME_VERSION 0.1
+
+# Do not report during Docker image creation.
+ARG PERCONA_TELEMETRY_DISABLE=1
RUN set -ex; \
- percona-release enable psmdb-44 ${PSMDB_REPO}; \
+ percona-release enable psmdb-70 ${PSMDB_REPO}; \
dnf config-manager --enable ol8_u4_security_validation; \
+ dnf -y update openssh; \
+ dnf -y update bind-export-libs; \
+ dnf -y update glibc; \
+ dnf -y update libgcrypt; \
dnf -y install \
percona-server-mongodb-mongos-${FULL_PERCONA_VERSION} \
- percona-server-mongodb-shell-${FULL_PERCONA_VERSION} \
percona-server-mongodb-tools-${FULL_PERCONA_VERSION} \
+ percona-mongodb-mongosh \
+ numactl \
procps-ng \
jq \
tar \
@@ -36,7 +47,7 @@ RUN set -ex; \
cyrus-sasl-gssapi \
policycoreutils; \
\
- curl -Lf -o /tmp/Percona-Server-MongoDB-server.rpm http://repo.percona.com/psmdb-44/yum/${PSMDB_REPO}/8/RPMS/x86_64/percona-server-mongodb-server-${FULL_PERCONA_VERSION}.x86_64.rpm; \
+ curl -Lf -o /tmp/Percona-Server-MongoDB-server.rpm http://repo.percona.com/psmdb-70/yum/${PSMDB_REPO}/8/RPMS/x86_64/percona-server-mongodb-server-${FULL_PERCONA_VERSION}.x86_64.rpm; \
rpmkeys --checksig /tmp/Percona-Server-MongoDB-server.rpm; \
rpm -iv /tmp/Percona-Server-MongoDB-server.rpm --nodeps; \
rm -rf /tmp/Percona-Server-MongoDB-server.rpm; \
@@ -66,24 +77,27 @@ RUN set -eux; \
chmod +x /usr/bin/gosu; \
curl -f -o /licenses/LICENSE.gosu https://raw.githubusercontent.com/tianon/gosu/${GOSU_VERSION}/LICENSE
-RUN set -ex; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/k8s-mongodb-initiator -o /usr/local/bin/k8s-mongodb-initiator; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/mongodb-healthcheck -o /usr/local/bin/mongodb-healthcheck; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/SHA256SUMS -o /tmp/SHA256SUMS; \
- echo "$(grep 'k8s-mongodb-initiator' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/k8s-mongodb-initiator | sha256sum -c -; \
- echo "$(grep 'mongodb-healthcheck' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/mongodb-healthcheck | sha256sum -c -; \
- rm -f /tmp/SHA256SUMS; \
- \
- chmod 0755 /usr/local/bin/k8s-mongodb-initiator /usr/local/bin/mongodb-healthcheck
-
VOLUME ["/data/db"]
RUN set -ex; \
curl -fSL https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js -o /js-yaml.js; \
echo "45dc3dd03dc07a06705a2c2989b8c7f709013f04bd5386e3279d4e447f07ebd7 /js-yaml.js" | sha256sum -c -
-COPY ps-entry.sh /entrypoint.sh
+RUN set -eux; \
+ curl -fL "https://github.com/percona/telemetry-agent/archive/refs/tags/phase-$CALL_HOME_VERSION.tar.gz" -o "phase-$CALL_HOME_VERSION.tar.gz"; \
+ echo "$CALL_HOME_DOWNLOAD_SHA256 phase-$CALL_HOME_VERSION.tar.gz" | sha256sum --strict --check; \
+ tar -xvf phase-$CALL_HOME_VERSION.tar.gz; \
+ cp telemetry-agent-phase-$CALL_HOME_VERSION/call-home.sh .;\
+ rm -rf telemetry-agent-phase-$CALL_HOME_VERSION phase-$CALL_HOME_VERSION.tar.gz; \
+ chmod a+rx /call-home.sh; \
+ mkdir -p /usr/local/percona; \
+ chown 1001:1001 /usr/local/percona
+ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
+COPY ps-entry.sh /entrypoint.sh
+RUN sed -i '/^if \[\[ \${PERCONA_TELEMETRY_DISABLE}/,/^fi$/c \
+ /call-home.sh -f "PRODUCT_FAMILY_PSMDB" -v "${PSMDB_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :\
+ \nexec "$@"' /entrypoint.sh
ENTRYPOINT ["/entrypoint.sh"]
EXPOSE 27017
diff --git a/percona_psmdb-4.2/LICENSE b/percona_psmdb-7.0/LICENSE
similarity index 100%
rename from percona_psmdb-4.2/LICENSE
rename to percona_psmdb-7.0/LICENSE
diff --git a/percona_psmdb-4.4/ps-entry.sh b/percona_psmdb-7.0/ps-entry.sh
similarity index 92%
rename from percona_psmdb-4.4/ps-entry.sh
rename to percona_psmdb-7.0/ps-entry.sh
index 5963dfa..36f3481 100755
--- a/percona_psmdb-4.4/ps-entry.sh
+++ b/percona_psmdb-7.0/ps-entry.sh
@@ -194,7 +194,7 @@ _parse_config() {
if configPath="$(_mongod_hack_get_arg_val --config "$@")"; then
# if --config is specified, parse it into a JSON file so we can remove a few problematic keys (especially SSL-related keys)
# see https://docs.mongodb.com/manual/reference/configuration-options/
- mongo --norc --nodb --quiet --eval "load('/js-yaml.js'); printjson(jsyaml.load(cat($(_js_escape "$configPath"))))" > "$jsonConfigFile"
+ mongosh --norc --nodb --quiet --eval "load('/js-yaml.js'); printjson(jsyaml.load(cat($(_js_escape "$configPath"))))" > "$jsonConfigFile"
jq 'del(.systemLog, .processManagement, .net, .security)' "$jsonConfigFile" > "$tempConfigFile"
return 0
fi
@@ -314,7 +314,7 @@ if [ "$originalArgOne" = 'mongod' ]; then
"${mongodHackedArgs[@]}" --fork
- mongo=( mongo --host 127.0.0.1 --port 27017 --quiet )
+ mongo=( mongosh --host 127.0.0.1 --port 27017 --quiet )
# check to see that our "mongod" actually did start up (catches "--help", "--version", MongoDB 3.2 being silly, slow prealloc, etc)
# https://jira.mongodb.org/browse/SERVER-16292
@@ -399,7 +399,7 @@ if [ "$originalArgOne" = 'mongod' ]; then
fi
MONGODB_VERSION=$(mongod --version | head -1 | awk '{print $3}' | awk -F'.' '{print $1"."$2}')
- if [ "$MONGODB_VERSION" == 'v4.2' ] || [ "$MONGODB_VERSION" == 'v4.4' ]; then
+ if [ "$MONGODB_VERSION" == 'v4.2' ] || [ "$MONGODB_VERSION" == 'v4.4' ] || [ "$MONGODB_VERSION" == 'v5.0' ] || [ "$MONGODB_VERSION" == 'v6.0' ] || [ "$MONGODB_VERSION" == 'v7.0' ]; then
_mongod_hack_rename_arg_save_val --sslMode --tlsMode "${mongodHackedArgs[@]}"
if _mongod_hack_have_arg '--tlsMode' "${mongodHackedArgs[@]}"; then
@@ -460,5 +460,36 @@ fi
rm -f "$jsonConfigFile" "$tempConfigFile"
-set -o xtrace
-exec "$@"
+set -o xtrace +u
+
+# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
+if [ ! -z "${PERCONA_INSTANCE_ID}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -i ${PERCONA_INSTANCE_ID}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_CONFIG_FILE_PATH}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -j ${PERCONA_TELEMETRY_CONFIG_FILE_PATH}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_URL}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -u ${PERCONA_TELEMETRY_URL}"
+fi
+
+if [ ! -z "${PERCONA_SEND_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -t ${PERCONA_SEND_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -t 7"
+fi
+
+if [ ! -z "${PERCONA_CONNECT_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -c ${PERCONA_CONNECT_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
+fi
+
+if [[ ${PERCONA_TELEMETRY_DISABLE} -ne "0" ]]; then
+ exec "$@" --setParameter perconaTelemetry=false
+else
+ /usr/bin/telemetry-agent-supervisor.sh &
+ exec "$@"
+fi |
|
@tianon Is there something else required from our end for the changes to be approved and merged? |
|
I think this +RUN sed -i '/^if \[\[ \${PERCONA_TELEMETRY_DISABLE}/,/^fi$/c \
+ /call-home.sh -f "PRODUCT_FAMILY_PS" -v "${PS_TELEMETRY_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :\
+ \nexec "$@"' /docker-entrypoint.sh
ENTRYPOINT ["/docker-entrypoint.sh"]
diff --git a/percona_8/ps-entry.sh b/percona_8/ps-entry.sh
index 8b92cf5..a7fe81b 100755
--- a/percona_8/ps-entry.sh
+++ b/percona_8/ps-entry.sh
@@ -248,7 +245,9 @@ else
CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
fi
-# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
-/call-home.sh -f "PRODUCT_FAMILY_PS" -v "${PS_TELEMETRY_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :
-
-exec "$@"
+if [[ ${PERCONA_TELEMETRY_DISABLE} -ne "0" ]]; then
+ exec "$@" --percona_telemetry_disable=1
+else
+ /usr/bin/telemetry-agent-supervisor.sh &
+ exec "$@"
+fi |
…tags Remove eol versions for PS and PSMDB
Diff for 162e3eb:diff --git a/_bashbrew-arches b/_bashbrew-arches
index 8b13789..21d5bd8 100644
--- a/_bashbrew-arches
+++ b/_bashbrew-arches
@@ -1 +1 @@
-
+amd64
diff --git a/_bashbrew-cat b/_bashbrew-cat
index b9435ce..a375d73 100644
--- a/_bashbrew-cat
+++ b/_bashbrew-cat
@@ -1,3 +1,23 @@
Maintainers: Evgeniy Patlan <evgeniy.patlan@percona.com> (@EvgeniyPatlan), Viacheslav Sarzhan <slava.sarzhan@percona.com> (@hors), Oleksandr Miroshnychenko <alex.miroshnychenko@percona.com> (@vorsel), Vadim Yalovets <vadim.yalovets@percona.com> (@adivinho), Surabhi Bhat <surabhi.bhat@percona.com> (@surbhat1595)
GitRepo: https://github.com/percona/percona-docker.git
GitFetch: refs/heads/main
+
+Tags: 8.0.39-30-centos, 8.0-centos, 8-centos, 8.0.39-30, 8.0, 8, ps-8.0.39-30, ps-8.0, ps-8
+GitCommit: 5640bc536e5ce7d1559fc4f28868fda941bbaf1d
+Directory: percona-server-8.0
+File: Dockerfile-dockerhub
+
+Tags: psmdb-5.0.29, psmdb-5.0
+GitCommit: 5640bc536e5ce7d1559fc4f28868fda941bbaf1d
+Directory: percona-server-mongodb-5.0
+File: Dockerfile-dockerhub
+
+Tags: psmdb-6.0.19, psmdb-6.0
+GitCommit: 5640bc536e5ce7d1559fc4f28868fda941bbaf1d
+Directory: percona-server-mongodb-6.0
+File: Dockerfile-dockerhub
+
+Tags: psmdb-7.0.15, psmdb-7.0
+GitCommit: 5640bc536e5ce7d1559fc4f28868fda941bbaf1d
+Directory: percona-server-mongodb-7.0
+File: Dockerfile-dockerhub
diff --git a/_bashbrew-list b/_bashbrew-list
index e69de29..6727a23 100644
--- a/_bashbrew-list
+++ b/_bashbrew-list
@@ -0,0 +1,15 @@
+percona:8
+percona:8-centos
+percona:8.0
+percona:8.0-centos
+percona:8.0.39-30
+percona:8.0.39-30-centos
+percona:psmdb-5.0
+percona:psmdb-5.0.29
+percona:psmdb-6.0
+percona:psmdb-6.0.19
+percona:psmdb-7.0
+percona:psmdb-7.0.15
+percona:ps-8
+percona:ps-8.0
+percona:ps-8.0.39-30
diff --git a/_bashbrew-list-build-order b/_bashbrew-list-build-order
index e69de29..f314b1b 100644
--- a/_bashbrew-list-build-order
+++ b/_bashbrew-list-build-order
@@ -0,0 +1,4 @@
+percona:psmdb-5.0
+percona:psmdb-6.0
+percona:psmdb-7.0
+percona:ps-8
diff --git a/percona_ps-8/Dockerfile-dockerhub b/percona_ps-8/Dockerfile-dockerhub
new file mode 100644
index 0000000..a335ebe
--- /dev/null
+++ b/percona_ps-8/Dockerfile-dockerhub
@@ -0,0 +1,118 @@
+# This Dockerfile should be used for docker official repo
+
+# https://github.com/docker-library/official-images:
+# No official images can be derived from, or depend on, non-official images
+# with the following notable exceptions...
+FROM oraclelinux:9
+
+LABEL org.opencontainers.image.authors="info@percona.com"
+
+# It is intentionally used another UID, to have backward compatibility with
+# the previous image versions published on Docker Hub
+RUN set -ex; \
+ groupdel input; \
+ userdel systemd-coredump; \
+ groupadd -g 1001 mysql; \
+ useradd -u 1001 -r -g 1001 -s /sbin/nologin \
+ -m -c "Default Application User" mysql
+
+ENV PS_VERSION 8.0.39-30.1
+ENV MYSQL_SHELL_VERSION 8.0.38-1
+ENV OS_VER el9
+ENV FULL_PERCONA_VERSION "$PS_VERSION.$OS_VER"
+ENV FULL_MYSQL_SHELL_VERSION "$MYSQL_SHELL_VERSION.$OS_VER"
+ENV PS_REPO testing
+ENV PS_TELEMETRY_VERSION 8.0.39-30-1
+ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
+ENV CALL_HOME_VERSION 0.1
+# Do not report during Docker image creation.
+# Note that doing so, would create telemetry config file
+# which would prevent reporting when new container is started.
+# If we want to track Docker image creation as well,
+# remove telemetry config file after installing packages!
+ARG PERCONA_TELEMETRY_DISABLE=1
+
+# check repository package signature in secure way
+RUN set -ex; \
+ export GNUPGHOME="$(mktemp -d)"; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
+ gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
+ curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
+ rpmkeys --checksig /tmp/percona-release.rpm; \
+ rpm -i /tmp/percona-release.rpm; \
+ rm -rf "$GNUPGHOME" /tmp/percona-release.rpm; \
+ rpm --import /etc/pki/rpm-gpg/PERCONA-PACKAGING-KEY; \
+ percona-release disable all; \
+ percona-release enable ps-80 ${PS_REPO}; \
+ percona-release enable mysql-shell ${PS_REPO}
+
+RUN set -ex; \
+ dnf -y install epel-release; \
+ rpm -e --nodeps tzdata; \
+ dnf -y install \
+ hostname \
+ tzdata \
+ jemalloc \
+ which \
+ cracklib-dicts \
+ tar \
+ policycoreutils; \
+ dnf -y update \
+ curl \
+ glibc \
+ libnghttp2 \
+ openssh \
+ python3-setuptools-wheel \
+ krb5-libs \
+ pam \
+ python3; \
+ \
+ dnf -y install \
+ percona-server-server-${FULL_PERCONA_VERSION} \
+ #percona-server-tokudb-${FULL_PERCONA_VERSION} \
+ percona-server-devel-${FULL_PERCONA_VERSION} \
+ percona-server-rocksdb-${FULL_PERCONA_VERSION} \
+ percona-icu-data-files-${FULL_PERCONA_VERSION} \
+ percona-mysql-shell-${FULL_MYSQL_SHELL_VERSION}; \
+ dnf clean all; \
+ rm -rf /var/cache/dnf /var/cache/yum /var/lib/mysql
+
+# purge and re-create /var/lib/mysql with appropriate ownership
+RUN set -ex; \
+ /usr/bin/install -m 0775 -o mysql -g root -d /var/lib/mysql /var/run/mysqld /docker-entrypoint-initdb.d; \
+# comment out a few problematic configuration values
+ find /etc/my.cnf /etc/my.cnf.d -name '*.cnf' -print0 \
+ | xargs -0 grep -lZE '^(bind-address|log|user)' \
+ | xargs -rt -0 sed -Ei 's/^(bind-address|log|user)/#&/'; \
+# don't reverse lookup hostnames, they are usually another container
+ echo '!includedir /etc/my.cnf.d' >> /etc/my.cnf; \
+ printf '[mysqld]\nhost_cache_size=0\nskip-name-resolve\n' > /etc/my.cnf.d/docker.cnf; \
+# TokuDB modifications
+ /usr/bin/install -m 0664 -o mysql -g root /dev/null /etc/sysconfig/mysql; \
+ echo "LD_PRELOAD=/usr/lib64/libjemalloc.so.1" >> /etc/sysconfig/mysql; \
+ echo "THP_SETTING=never" >> /etc/sysconfig/mysql; \
+# allow to change config files
+ chown -R mysql:root /etc/my.cnf /etc/my.cnf.d; \
+ chmod -R ug+rwX /etc/my.cnf /etc/my.cnf.d
+
+VOLUME ["/var/lib/mysql", "/var/log/mysql"]
+
+RUN set -eux; \
+ curl -fL "https://github.com/Percona-Lab/telemetry-agent/archive/refs/tags/phase-$CALL_HOME_VERSION.tar.gz" -o "phase-$CALL_HOME_VERSION.tar.gz"; \
+ echo "$CALL_HOME_DOWNLOAD_SHA256 phase-$CALL_HOME_VERSION.tar.gz" | sha256sum --strict --check; \
+ tar -xvf phase-$CALL_HOME_VERSION.tar.gz; \
+ cp telemetry-agent-phase-$CALL_HOME_VERSION/call-home.sh .;\
+ rm -rf telemetry-agent-phase-$CALL_HOME_VERSION phase-$CALL_HOME_VERSION.tar.gz; \
+ chmod a+rx /call-home.sh; \
+ mkdir -p /usr/local/percona; \
+ chown mysql:mysql /usr/local/percona
+ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
+
+COPY ps-entry-dockerhub.sh /docker-entrypoint.sh
+ENTRYPOINT ["/docker-entrypoint.sh"]
+
+USER mysql
+EXPOSE 3306 33060
+CMD ["mysqld"]
diff --git a/percona_ps-8/ps-entry-dockerhub.sh b/percona_ps-8/ps-entry-dockerhub.sh
new file mode 100755
index 0000000..9f08ef1
--- /dev/null
+++ b/percona_ps-8/ps-entry-dockerhub.sh
@@ -0,0 +1,250 @@
+#!/bin/bash
+set -eo pipefail
+shopt -s nullglob
+# if command starts with an option, prepend mysqld
+if [ "${1:0:1}" = '-' ]; then
+ set -- mysqld "$@"
+fi
+# skip setup if they want an option that stops mysqld
+wantHelp=
+for arg; do
+ case "$arg" in
+ -'?'|--help|--print-defaults|-V|--version)
+ wantHelp=1
+ break
+ ;;
+ esac
+done
+
+# usage: file_env VAR [DEFAULT]
+# ie: file_env 'XYZ_DB_PASSWORD' 'example'
+# (will allow for "$XYZ_DB_PASSWORD_FILE" to fill in the value of
+# "$XYZ_DB_PASSWORD" from a file, especially for Docker's secrets feature)
+file_env() {
+ local var="$1"
+ local fileVar="${var}_FILE"
+ local def="${2:-}"
+ if [ "${!var:-}" ] && [ "${!fileVar:-}" ]; then
+ echo >&2 "error: both $var and $fileVar are set (but are exclusive)"
+ exit 1
+ fi
+ local val="$def"
+ if [ "${!var:-}" ]; then
+ val="${!var}"
+ elif [ "${!fileVar:-}" ]; then
+ val="$(< "${!fileVar}")"
+ fi
+ export "$var"="$val"
+ unset "$fileVar"
+}
+
+# usage: process_init_file FILENAME MYSQLCOMMAND...
+# ie: process_init_file foo.sh mysql -uroot
+# (process a single initializer file, based on its extension. we define this
+# function here, so that initializer scripts (*.sh) can use the same logic,
+# potentially recursively, or override the logic used in subsequent calls)
+process_init_file() {
+ local f="$1"; shift
+ local mysql=( "$@" )
+
+ case "$f" in
+ *.sh) echo "$0: running $f"; . "$f" ;;
+ *.sql) echo "$0: running $f"; "${mysql[@]}" < "$f"; echo ;;
+ *.sql.gz) echo "$0: running $f"; gunzip -c "$f" | "${mysql[@]}"; echo ;;
+ *) echo "$0: ignoring $f" ;;
+ esac
+ echo
+}
+
+_check_config() {
+ toRun=( "$@" --verbose --help )
+ if ! errors="$("${toRun[@]}" 2>&1 >/dev/null)"; then
+ cat >&2 <<-EOM
+
+ ERROR: mysqld failed while attempting to check config
+ command was: "${toRun[*]}"
+
+ $errors
+ EOM
+ exit 1
+ fi
+}
+
+# Fetch value from server config
+# We use mysqld --verbose --help instead of my_print_defaults because the
+# latter only show values present in config files, and not server defaults
+_get_config() {
+ local conf="$1"; shift
+ "$@" --verbose --help --log-bin-index="$(mktemp -u)" 2>/dev/null \
+ | awk '$1 == "'"$conf"'" && /^[^ \t]/ { sub(/^[^ \t]+[ \t]+/, ""); print; exit }'
+ # match "datadir /some/path with/spaces in/it here" but not "--xyz=abc\n datadir (xyz)"
+}
+
+if [ "$1" = 'mysqld' -a -z "$wantHelp" ]; then
+ # still need to check config, container may have started with --user
+ _check_config "$@"
+
+ if [ -n "$INIT_TOKUDB" ]; then
+ export LD_PRELOAD=/usr/lib64/libjemalloc.so.1
+ fi
+ # Get config
+ DATADIR="$(_get_config 'datadir' "$@")"
+
+ if [ ! -d "$DATADIR/mysql" ]; then
+ file_env 'MYSQL_ROOT_PASSWORD'
+ if [ -z "$MYSQL_ROOT_PASSWORD" -a -z "$MYSQL_ALLOW_EMPTY_PASSWORD" -a -z "$MYSQL_RANDOM_ROOT_PASSWORD" ]; then
+ echo >&2 'error: database is uninitialized and password option is not specified '
+ echo >&2 ' You need to specify one of MYSQL_ROOT_PASSWORD, MYSQL_ALLOW_EMPTY_PASSWORD and MYSQL_RANDOM_ROOT_PASSWORD'
+ exit 1
+ fi
+
+ mkdir -p "$DATADIR"
+
+ echo 'Initializing database'
+ "$@" --initialize-insecure
+ echo 'Database initialized'
+
+ if command -v mysql_ssl_rsa_setup > /dev/null && [ ! -e "$DATADIR/server-key.pem" ]; then
+ # https://github.com/mysql/mysql-server/blob/23032807537d8dd8ee4ec1c4d40f0633cd4e12f9/packaging/deb-in/extra/mysql-systemd-start#L81-L84
+ echo 'Initializing certificates'
+ mysql_ssl_rsa_setup --datadir="$DATADIR"
+ echo 'Certificates initialized'
+ fi
+
+ SOCKET="$(_get_config 'socket' "$@")"
+ "$@" --skip-networking --socket="${SOCKET}" &
+ pid="$!"
+
+ mysql=( mysql --protocol=socket -uroot -hlocalhost --socket="${SOCKET}" --password="" )
+
+ for i in {120..0}; do
+ if echo 'SELECT 1' | "${mysql[@]}" &> /dev/null; then
+ break
+ fi
+ echo 'MySQL init process in progress...'
+ sleep 1
+ done
+ if [ "$i" = 0 ]; then
+ echo >&2 'MySQL init process failed.'
+ exit 1
+ fi
+
+ if [ -z "$MYSQL_INITDB_SKIP_TZINFO" ]; then
+ (
+ echo "SET @@SESSION.SQL_LOG_BIN = off;"
+ # sed is for https://bugs.mysql.com/bug.php?id=20545
+ mysql_tzinfo_to_sql /usr/share/zoneinfo | sed 's/Local time zone must be set--see zic manual page/FCTY/'
+ ) | "${mysql[@]}" mysql
+ fi
+
+ # install TokuDB engine
+ if [ -n "$INIT_TOKUDB" ]; then
+ ps-admin --docker --enable-tokudb -u root -p $MYSQL_ROOT_PASSWORD
+ fi
+ if [ -n "$INIT_ROCKSDB" ]; then
+ ps-admin --enable-rocksdb -u root -p $MYSQL_ROOT_PASSWORD
+ fi
+
+ if [ ! -z "$MYSQL_RANDOM_ROOT_PASSWORD" ]; then
+ MYSQL_ROOT_PASSWORD="$(pwmake 128)"
+ echo "GENERATED ROOT PASSWORD: $MYSQL_ROOT_PASSWORD"
+ fi
+
+ rootCreate=
+ # default root to listen for connections from anywhere
+ file_env 'MYSQL_ROOT_HOST' '%'
+ if [ ! -z "$MYSQL_ROOT_HOST" -a "$MYSQL_ROOT_HOST" != 'localhost' ]; then
+ # no, we don't care if read finds a terminating character in this heredoc
+ # https://unix.stackexchange.com/questions/265149/why-is-set-o-errexit-breaking-this-read-heredoc-expression/265151#265151
+ read -r -d '' rootCreate <<-EOSQL || true
+ CREATE USER 'root'@'${MYSQL_ROOT_HOST}' IDENTIFIED BY '${MYSQL_ROOT_PASSWORD}' ;
+ GRANT ALL ON *.* TO 'root'@'${MYSQL_ROOT_HOST}' WITH GRANT OPTION ;
+ EOSQL
+ fi
+
+ "${mysql[@]}" <<-EOSQL
+ -- What's done in this file shouldn't be replicated
+ -- or products like mysql-fabric won't work
+ SET @@SESSION.SQL_LOG_BIN=0;
+
+ DELETE FROM mysql.user WHERE user NOT IN ('mysql.sys', 'mysqlxsys', 'mysql.infoschema', 'mysql.session', 'root') OR host NOT IN ('localhost') ;
+ ALTER USER 'root'@'localhost' IDENTIFIED BY '${MYSQL_ROOT_PASSWORD}' ;
+ GRANT ALL ON *.* TO 'root'@'localhost' WITH GRANT OPTION ;
+ ${rootCreate}
+ DROP DATABASE IF EXISTS test ;
+ FLUSH PRIVILEGES ;
+ EOSQL
+
+ if [ ! -z "$MYSQL_ROOT_PASSWORD" ]; then
+ mysql+=( -p"${MYSQL_ROOT_PASSWORD}" )
+ fi
+
+ file_env 'MYSQL_DATABASE'
+ if [ "$MYSQL_DATABASE" ]; then
+ echo "CREATE DATABASE IF NOT EXISTS \`$MYSQL_DATABASE\` ;" | "${mysql[@]}"
+ mysql+=( "$MYSQL_DATABASE" )
+ fi
+
+ file_env 'MYSQL_USER'
+ file_env 'MYSQL_PASSWORD'
+ if [ "$MYSQL_USER" -a "$MYSQL_PASSWORD" ]; then
+ echo "CREATE USER '$MYSQL_USER'@'%' IDENTIFIED BY '$MYSQL_PASSWORD' ;" | "${mysql[@]}"
+
+ if [ "$MYSQL_DATABASE" ]; then
+ echo "GRANT ALL ON \`$MYSQL_DATABASE\`.* TO '$MYSQL_USER'@'%' ;" | "${mysql[@]}"
+ fi
+
+ echo 'FLUSH PRIVILEGES ;' | "${mysql[@]}"
+ fi
+
+ echo
+ ls /docker-entrypoint-initdb.d/ > /dev/null
+ for f in /docker-entrypoint-initdb.d/*; do
+ process_init_file "$f" "${mysql[@]}"
+ done
+
+ if [ ! -z "$MYSQL_ONETIME_PASSWORD" ]; then
+ "${mysql[@]}" <<-EOSQL
+ ALTER USER 'root'@'%' PASSWORD EXPIRE;
+ EOSQL
+ fi
+ if ! kill -s TERM "$pid" || ! wait "$pid"; then
+ echo >&2 'MySQL init process failed.'
+ exit 1
+ fi
+
+ echo
+ echo 'MySQL init process done. Ready for start up.'
+ echo
+ fi
+
+ # exit when MYSQL_INIT_ONLY environment variable is set to avoid starting mysqld
+ if [ ! -z "$MYSQL_INIT_ONLY" ]; then
+ echo 'Initialization complete, now exiting!'
+ exit 0
+ fi
+fi
+
+if [ ! -z "${PERCONA_INSTANCE_ID}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -i ${PERCONA_INSTANCE_ID}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_CONFIG_FILE_PATH}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -j ${PERCONA_TELEMETRY_CONFIG_FILE_PATH}"
+fi
+
+if [ ! -z "${PERCONA_SEND_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -t ${PERCONA_SEND_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -t 7"
+fi
+
+if [ ! -z "${PERCONA_CONNECT_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -c ${PERCONA_CONNECT_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
+fi
+
+/call-home.sh -f "PRODUCT_FAMILY_PS" -v "${PS_TELEMETRY_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :
+
+exec "$@"
diff --git a/percona_psmdb-5.0/Dockerfile-dockerhub b/percona_psmdb-5.0/Dockerfile-dockerhub
new file mode 100644
index 0000000..a22c0fb
--- /dev/null
+++ b/percona_psmdb-5.0/Dockerfile-dockerhub
@@ -0,0 +1,103 @@
+# This Dockerfile should be used for docker official repo
+FROM oraclelinux:8
+
+LABEL org.opencontainers.image.authors="info@percona.com"
+
+# check repository package signature in secure way
+RUN set -ex; \
+ export GNUPGHOME="$(mktemp -d)"; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
+ gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
+ gpg --batch --export --armor 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1 > ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
+ rpmkeys --checksig /tmp/percona-release.rpm; \
+ rpm -i /tmp/percona-release.rpm; \
+ rm -rf "$GNUPGHOME" /tmp/percona-release.rpm; \
+ rpm --import /etc/pki/rpm-gpg/PERCONA-PACKAGING-KEY
+
+ENV PSMDB_VERSION 5.0.29-25
+ENV OS_VER el8
+ENV FULL_PERCONA_VERSION "$PSMDB_VERSION.$OS_VER"
+ENV K8S_TOOLS_VERSION "0.5.0"
+ENV PSMDB_REPO release
+ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
+ENV CALL_HOME_VERSION 0.1
+
+# Do not report during Docker image creation.
+ARG PERCONA_TELEMETRY_DISABLE=1
+
+RUN set -ex; \
+ percona-release enable psmdb-50 ${PSMDB_REPO}; \
+ dnf config-manager --enable ol8_u4_security_validation; \
+ dnf -y update bind-export-libs; \
+ dnf -y update glibc; \
+ dnf -y update libgcrypt; \
+ dnf -y install \
+ percona-server-mongodb-mongos-${FULL_PERCONA_VERSION} \
+ percona-server-mongodb-shell-${FULL_PERCONA_VERSION} \
+ percona-server-mongodb-tools-${FULL_PERCONA_VERSION} \
+ numactl \
+ procps-ng \
+ jq \
+ tar \
+ oniguruma \
+ cyrus-sasl-gssapi \
+ policycoreutils; \
+ \
+ curl -Lf -o /tmp/Percona-Server-MongoDB-server.rpm http://repo.percona.com/psmdb-50/yum/${PSMDB_REPO}/8/RPMS/x86_64/percona-server-mongodb-server-${FULL_PERCONA_VERSION}.x86_64.rpm; \
+ rpmkeys --checksig /tmp/Percona-Server-MongoDB-server.rpm; \
+ rpm -iv /tmp/Percona-Server-MongoDB-server.rpm --nodeps; \
+ rm -rf /tmp/Percona-Server-MongoDB-server.rpm; \
+ dnf clean all; \
+ rm -rf /var/cache/dnf /var/cache/yum /data/db && mkdir -p /data/db; \
+ chown -R 1001:0 /data/db
+
+# the numeric UID is needed for OpenShift
+RUN useradd -u 1001 -r -g 0 -m -s /sbin/nologin \
+ -c "Default Application User" mongodb; \
+ chmod g+rwx /var/log/mongo; \
+ chown :0 /var/log/mongo
+
+COPY LICENSE /licenses/LICENSE.Dockerfile
+RUN cp /usr/share/doc/percona-server-mongodb-server/LICENSE-Community.txt /licenses/LICENSE.Percona-Server-for-MongoDB
+
+ENV GOSU_VERSION=1.11
+RUN set -eux; \
+ curl -Lf -o /usr/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-amd64; \
+ curl -Lf -o /usr/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-amd64.asc; \
+ \
+ export GNUPGHOME="$(mktemp -d)"; \
+ gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
+ gpg --batch --verify /usr/bin/gosu.asc /usr/bin/gosu; \
+ rm -rf "$GNUPGHOME" /usr/bin/gosu.asc; \
+ \
+ chmod +x /usr/bin/gosu; \
+ curl -f -o /licenses/LICENSE.gosu https://raw.githubusercontent.com/tianon/gosu/${GOSU_VERSION}/LICENSE
+
+VOLUME ["/data/db"]
+
+RUN set -ex; \
+ curl -fSL https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js -o /js-yaml.js; \
+ echo "45dc3dd03dc07a06705a2c2989b8c7f709013f04bd5386e3279d4e447f07ebd7 /js-yaml.js" | sha256sum -c -
+
+RUN set -eux; \
+ curl -fL "https://github.com/percona/telemetry-agent/archive/refs/tags/phase-$CALL_HOME_VERSION.tar.gz" -o "phase-$CALL_HOME_VERSION.tar.gz"; \
+ echo "$CALL_HOME_DOWNLOAD_SHA256 phase-$CALL_HOME_VERSION.tar.gz" | sha256sum --strict --check; \
+ tar -xvf phase-$CALL_HOME_VERSION.tar.gz; \
+ cp telemetry-agent-phase-$CALL_HOME_VERSION/call-home.sh .;\
+ rm -rf telemetry-agent-phase-$CALL_HOME_VERSION phase-$CALL_HOME_VERSION.tar.gz; \
+ chmod a+rx /call-home.sh; \
+ mkdir -p /usr/local/percona; \
+ chown 1001:1001 /usr/local/percona
+ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
+
+COPY ps-entry-dockerhub.sh /entrypoint.sh
+ENTRYPOINT ["/entrypoint.sh"]
+
+EXPOSE 27017
+
+USER 1001
+
+CMD ["mongod"]
diff --git a/percona_psmdb-5.0/LICENSE b/percona_psmdb-5.0/LICENSE
new file mode 100644
index 0000000..b5a2afb
--- /dev/null
+++ b/percona_psmdb-5.0/LICENSE
@@ -0,0 +1,201 @@
+ Apache License
+ Version 2.0, January 2004
+ http://www.apache.org/licenses/
+
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+ 1. Definitions.
+
+ "License" shall mean the terms and conditions for use, reproduction,
+ and distribution as defined by Sections 1 through 9 of this document.
+
+ "Licensor" shall mean the copyright owner or entity authorized by
+ the copyright owner that is granting the License.
+
+ "Legal Entity" shall mean the union of the acting entity and all
+ other entities that control, are controlled by, or are under common
+ control with that entity. For the purposes of this definition,
+ "control" means (i) the power, direct or indirect, to cause the
+ direction or management of such entity, whether by contract or
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
+ outstanding shares, or (iii) beneficial ownership of such entity.
+
+ "You" (or "Your") shall mean an individual or Legal Entity
+ exercising permissions granted by this License.
+
+ "Source" form shall mean the preferred form for making modifications,
+ including but not limited to software source code, documentation
+ source, and configuration files.
+
+ "Object" form shall mean any form resulting from mechanical
+ transformation or translation of a Source form, including but
+ not limited to compiled object code, generated documentation,
+ and conversions to other media types.
+
+ "Work" shall mean the work of authorship, whether in Source or
+ Object form, made available under the License, as indicated by a
+ copyright notice that is included in or attached to the work
+ (an example is provided in the Appendix below).
+
+ "Derivative Works" shall mean any work, whether in Source or Object
+ form, that is based on (or derived from) the Work and for which the
+ editorial revisions, annotations, elaborations, or other modifications
+ represent, as a whole, an original work of authorship. For the purposes
+ of this License, Derivative Works shall not include works that remain
+ separable from, or merely link (or bind by name) to the interfaces of,
+ the Work and Derivative Works thereof.
+
+ "Contribution" shall mean any work of authorship, including
+ the original version of the Work and any modifications or additions
+ to that Work or Derivative Works thereof, that is intentionally
+ submitted to Licensor for inclusion in the Work by the copyright owner
+ or by an individual or Legal Entity authorized to submit on behalf of
+ the copyright owner. For the purposes of this definition, "submitted"
+ means any form of electronic, verbal, or written communication sent
+ to the Licensor or its representatives, including but not limited to
+ communication on electronic mailing lists, source code control systems,
+ and issue tracking systems that are managed by, or on behalf of, the
+ Licensor for the purpose of discussing and improving the Work, but
+ excluding communication that is conspicuously marked or otherwise
+ designated in writing by the copyright owner as "Not a Contribution."
+
+ "Contributor" shall mean Licensor and any individual or Legal Entity
+ on behalf of whom a Contribution has been received by Licensor and
+ subsequently incorporated within the Work.
+
+ 2. Grant of Copyright License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ copyright license to reproduce, prepare Derivative Works of,
+ publicly display, publicly perform, sublicense, and distribute the
+ Work and such Derivative Works in Source or Object form.
+
+ 3. Grant of Patent License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ (except as stated in this section) patent license to make, have made,
+ use, offer to sell, sell, import, and otherwise transfer the Work,
+ where such license applies only to those patent claims licensable
+ by such Contributor that are necessarily infringed by their
+ Contribution(s) alone or by combination of their Contribution(s)
+ with the Work to which such Contribution(s) was submitted. If You
+ institute patent litigation against any entity (including a
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
+ or a Contribution incorporated within the Work constitutes direct
+ or contributory patent infringement, then any patent licenses
+ granted to You under this License for that Work shall terminate
+ as of the date such litigation is filed.
+
+ 4. Redistribution. You may reproduce and distribute copies of the
+ Work or Derivative Works thereof in any medium, with or without
+ modifications, and in Source or Object form, provided that You
+ meet the following conditions:
+
+ (a) You must give any other recipients of the Work or
+ Derivative Works a copy of this License; and
+
+ (b) You must cause any modified files to carry prominent notices
+ stating that You changed the files; and
+
+ (c) You must retain, in the Source form of any Derivative Works
+ that You distribute, all copyright, patent, trademark, and
+ attribution notices from the Source form of the Work,
+ excluding those notices that do not pertain to any part of
+ the Derivative Works; and
+
+ (d) If the Work includes a "NOTICE" text file as part of its
+ distribution, then any Derivative Works that You distribute must
+ include a readable copy of the attribution notices contained
+ within such NOTICE file, excluding those notices that do not
+ pertain to any part of the Derivative Works, in at least one
+ of the following places: within a NOTICE text file distributed
+ as part of the Derivative Works; within the Source form or
+ documentation, if provided along with the Derivative Works; or,
+ within a display generated by the Derivative Works, if and
+ wherever such third-party notices normally appear. The contents
+ of the NOTICE file are for informational purposes only and
+ do not modify the License. You may add Your own attribution
+ notices within Derivative Works that You distribute, alongside
+ or as an addendum to the NOTICE text from the Work, provided
+ that such additional attribution notices cannot be construed
+ as modifying the License.
+
+ You may add Your own copyright statement to Your modifications and
+ may provide additional or different license terms and conditions
+ for use, reproduction, or distribution of Your modifications, or
+ for any such Derivative Works as a whole, provided Your use,
+ reproduction, and distribution of the Work otherwise complies with
+ the conditions stated in this License.
+
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
+ any Contribution intentionally submitted for inclusion in the Work
+ by You to the Licensor shall be under the terms and conditions of
+ this License, without any additional terms or conditions.
+ Notwithstanding the above, nothing herein shall supersede or modify
+ the terms of any separate license agreement you may have executed
+ with Licensor regarding such Contributions.
+
+ 6. Trademarks. This License does not grant permission to use the trade
+ names, trademarks, service marks, or product names of the Licensor,
+ except as required for reasonable and customary use in describing the
+ origin of the Work and reproducing the content of the NOTICE file.
+
+ 7. Disclaimer of Warranty. Unless required by applicable law or
+ agreed to in writing, Licensor provides the Work (and each
+ Contributor provides its Contributions) on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+ implied, including, without limitation, any warranties or conditions
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+ PARTICULAR PURPOSE. You are solely responsible for determining the
+ appropriateness of using or redistributing the Work and assume any
+ risks associated with Your exercise of permissions under this License.
+
+ 8. Limitation of Liability. In no event and under no legal theory,
+ whether in tort (including negligence), contract, or otherwise,
+ unless required by applicable law (such as deliberate and grossly
+ negligent acts) or agreed to in writing, shall any Contributor be
+ liable to You for damages, including any direct, indirect, special,
+ incidental, or consequential damages of any character arising as a
+ result of this License or out of the use or inability to use the
+ Work (including but not limited to damages for loss of goodwill,
+ work stoppage, computer failure or malfunction, or any and all
+ other commercial damages or losses), even if such Contributor
+ has been advised of the possibility of such damages.
+
+ 9. Accepting Warranty or Additional Liability. While redistributing
+ the Work or Derivative Works thereof, You may choose to offer,
+ and charge a fee for, acceptance of support, warranty, indemnity,
+ or other liability obligations and/or rights consistent with this
+ License. However, in accepting such obligations, You may act only
+ on Your own behalf and on Your sole responsibility, not on behalf
+ of any other Contributor, and only if You agree to indemnify,
+ defend, and hold each Contributor harmless for any liability
+ incurred by, or claims asserted against, such Contributor by reason
+ of your accepting any such warranty or additional liability.
+
+ END OF TERMS AND CONDITIONS
+
+ APPENDIX: How to apply the Apache License to your work.
+
+ To apply the Apache License to your work, attach the following
+ boilerplate notice, with the fields enclosed by brackets "[]"
+ replaced with your own identifying information. (Don't include
+ the brackets!) The text should be enclosed in the appropriate
+ comment syntax for the file format. We also recommend that a
+ file or class name and description of purpose be included on the
+ same "printed page" as the copyright notice for easier
+ identification within third-party archives.
+
+ Copyright 2010-2018 Percona LLC
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
diff --git a/percona_psmdb-5.0/ps-entry-dockerhub.sh b/percona_psmdb-5.0/ps-entry-dockerhub.sh
new file mode 100755
index 0000000..9262485
--- /dev/null
+++ b/percona_psmdb-5.0/ps-entry-dockerhub.sh
@@ -0,0 +1,492 @@
+#!/bin/bash
+set -Eeuo pipefail
+
+if [ "${1:0:1}" = '-' ]; then
+ set -- mongod "$@"
+fi
+
+originalArgOne="$1"
+
+# allow the container to be started with `--user`
+# all mongo* commands should be dropped to the correct user
+if [[ "$originalArgOne" == mongo* ]] && [ "$(id -u)" = '0' ]; then
+ if [ "$originalArgOne" = 'mongod' ]; then
+ if [ -d "/data/configdb" ]; then
+ find /data/configdb \! -user mongodb -exec chown mongodb '{}' +
+ fi
+ if [ -d "/data/db" ]; then
+ find /data/db \! -user mongodb -exec chown mongodb '{}' +
+ fi
+ fi
+
+ # make sure we can write to stdout and stderr as "mongodb"
+ # (for our "initdb" code later; see "--logpath" below)
+ chown --dereference mongodb "/proc/$$/fd/1" "/proc/$$/fd/2" || :
+ # ignore errors thanks to https://github.com/docker-library/mongo/issues/149
+
+ exec gosu mongodb:1001 "$BASH_SOURCE" "$@"
+fi
+
+# you should use numactl to start your mongod instances, including the config servers, mongos instances, and any clients.
+# https://docs.mongodb.com/manual/administration/production-notes/#configuring-numa-on-linux
+if [[ "$originalArgOne" == mongo* ]]; then
+ numa='numactl --interleave=all'
+ if $numa true &> /dev/null; then
+ set -- $numa "$@"
+ fi
+fi
+
+# usage: file_env VAR [DEFAULT]
+# ie: file_env 'XYZ_DB_PASSWORD' 'example'
+# (will allow for "$XYZ_DB_PASSWORD_FILE" to fill in the value of
+# "$XYZ_DB_PASSWORD" from a file, especially for Docker's secrets feature)
+file_env() {
+ local var="$1"
+ local fileVar="${var}_FILE"
+ local def="${2:-}"
+ if [ "${!var:-}" ] && [ "${!fileVar:-}" ]; then
+ echo >&2 "error: both $var and $fileVar are set (but are exclusive)"
+ exit 1
+ fi
+ local val="$def"
+ if [ "${!var:-}" ]; then
+ val="${!var}"
+ elif [ "${!fileVar:-}" ]; then
+ val="$(< "${!fileVar}")"
+ fi
+ export "$var"="$val"
+ unset "$fileVar"
+}
+
+# see https://github.com/docker-library/mongo/issues/147 (mongod is picky about duplicated arguments)
+_mongod_hack_have_arg() {
+ local checkArg="$1"; shift
+ local arg
+ for arg; do
+ case "$arg" in
+ "$checkArg"|"$checkArg"=*)
+ return 0
+ ;;
+ esac
+ done
+ return 1
+}
+# _mongod_hack_get_arg_val '--some-arg' "$@"
+_mongod_hack_get_arg_val() {
+ local checkArg="$1"; shift
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ case "$arg" in
+ "$checkArg")
+ echo "$1"
+ return 0
+ ;;
+ "$checkArg"=*)
+ echo "${arg#$checkArg=}"
+ return 0
+ ;;
+ esac
+ done
+ return 1
+}
+declare -a mongodHackedArgs
+# _mongod_hack_ensure_arg '--some-arg' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_arg() {
+ local ensureArg="$1"; shift
+ mongodHackedArgs=( "$@" )
+ if ! _mongod_hack_have_arg "$ensureArg" "$@"; then
+ mongodHackedArgs+=( "$ensureArg" )
+ fi
+}
+# _mongod_hack_ensure_no_arg '--some-unwanted-arg' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_no_arg() {
+ local ensureNoArg="$1"; shift
+ mongodHackedArgs=()
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ if [ "$arg" = "$ensureNoArg" ]; then
+ continue
+ fi
+ mongodHackedArgs+=( "$arg" )
+ done
+}
+# _mongod_hack_ensure_no_arg '--some-unwanted-arg' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_no_arg_val() {
+ local ensureNoArg="$1"; shift
+ mongodHackedArgs=()
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ case "$arg" in
+ "$ensureNoArg")
+ shift # also skip the value
+ continue
+ ;;
+ "$ensureNoArg"=*)
+ # value is already included
+ continue
+ ;;
+ esac
+ mongodHackedArgs+=( "$arg" )
+ done
+}
+# _mongod_hack_ensure_arg_val '--some-arg' 'some-val' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_arg_val() {
+ local ensureArg="$1"; shift
+ local ensureVal="$1"; shift
+ _mongod_hack_ensure_no_arg_val "$ensureArg" "$@"
+ mongodHackedArgs+=( "$ensureArg" "$ensureVal" )
+}
+
+# required by mongodb 4.2
+# _mongod_hack_rename_arg_save_val '--arg-to-rename' '--arg-to-rename-to' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_rename_arg_save_val() {
+ local oldArg="$1"; shift
+ local newArg="$1"; shift
+ if ! _mongod_hack_have_arg "$oldArg" "$@"; then
+ return 0
+ fi
+ local val=""
+ mongodHackedArgs=()
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ if [ "$arg" = "$oldArg" ]; then
+ val="$1"; shift
+ continue
+ elif [[ "$arg" =~ "$oldArg"=(.*) ]]; then
+ val=${BASH_REMATCH[1]}
+ continue
+ fi
+ mongodHackedArgs+=("$arg")
+ done
+ mongodHackedArgs+=("$newArg" "$val")
+}
+
+# required by mongodb 4.2
+# _mongod_hack_rename_arg'--arg-to-rename' '--arg-to-rename-to' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_rename_arg() {
+ local oldArg="$1"; shift
+ local newArg="$1"; shift
+ if _mongod_hack_have_arg "$oldArg" "$@"; then
+ _mongod_hack_ensure_no_arg "$oldArg" "$@"
+ _mongod_hack_ensure_arg "$newArg" "${mongodHackedArgs[@]}"
+ fi
+}
+
+# _js_escape 'some "string" value'
+_js_escape() {
+ jq --null-input --arg 'str' "$1" '$str'
+}
+
+jsonConfigFile="${TMPDIR:-/tmp}/docker-entrypoint-config.json"
+tempConfigFile="${TMPDIR:-/tmp}/docker-entrypoint-temp-config.json"
+_parse_config() {
+ if [ -s "$tempConfigFile" ]; then
+ return 0
+ fi
+
+ local configPath
+ if configPath="$(_mongod_hack_get_arg_val --config "$@")"; then
+ # if --config is specified, parse it into a JSON file so we can remove a few problematic keys (especially SSL-related keys)
+ # see https://docs.mongodb.com/manual/reference/configuration-options/
+ mongo --norc --nodb --quiet --eval "load('/js-yaml.js'); printjson(jsyaml.load(cat($(_js_escape "$configPath"))))" > "$jsonConfigFile"
+ jq 'del(.systemLog, .processManagement, .net, .security)' "$jsonConfigFile" > "$tempConfigFile"
+ return 0
+ fi
+
+ return 1
+}
+dbPath=
+_dbPath() {
+ if [ -n "$dbPath" ]; then
+ echo "$dbPath"
+ return
+ fi
+
+ if ! dbPath="$(_mongod_hack_get_arg_val --dbpath "$@")"; then
+ if _parse_config "$@"; then
+ dbPath="$(jq -r '.storage.dbPath // empty' "$jsonConfigFile")"
+ fi
+ fi
+
+ : "${dbPath:=/data/db}"
+
+ echo "$dbPath"
+}
+
+if [ "$originalArgOne" = 'mongod' ]; then
+ file_env 'MONGO_INITDB_ROOT_USERNAME'
+ file_env 'MONGO_INITDB_ROOT_PASSWORD'
+ # pre-check a few factors to see if it's even worth bothering with initdb
+ shouldPerformInitdb=
+ if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ # if we have a username/password, let's set "--auth"
+ _mongod_hack_ensure_arg '--auth' "$@"
+ set -- "${mongodHackedArgs[@]}"
+ shouldPerformInitdb='true'
+ elif [ "$MONGO_INITDB_ROOT_USERNAME" ] || [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ cat >&2 <<-'EOF'
+
+ error: missing 'MONGO_INITDB_ROOT_USERNAME' or 'MONGO_INITDB_ROOT_PASSWORD'
+ both must be specified for a user to be created
+
+ EOF
+ exit 1
+ fi
+
+ if [ -z "$shouldPerformInitdb" ]; then
+ # if we've got any /docker-entrypoint-initdb.d/* files to parse later, we should initdb
+ for f in /docker-entrypoint-initdb.d/*; do
+ case "$f" in
+ *.sh|*.js) # this should match the set of files we check for below
+ shouldPerformInitdb="$f"
+ break
+ ;;
+ esac
+ done
+ fi
+
+ # check for a few known paths (to determine whether we've already initialized and should thus skip our initdb scripts)
+ if [ -n "$shouldPerformInitdb" ]; then
+ dbPath="$(_dbPath "$@")"
+ for path in \
+ "$dbPath/WiredTiger" \
+ "$dbPath/journal" \
+ "$dbPath/local.0" \
+ "$dbPath/storage.bson" \
+ ; do
+ if [ -e "$path" ]; then
+ shouldPerformInitdb=
+ break
+ fi
+ done
+ fi
+
+ if [ -n "$shouldPerformInitdb" ]; then
+ mongodHackedArgs=( "$@" )
+ if _parse_config "$@"; then
+ _mongod_hack_ensure_arg_val --config "$tempConfigFile" "${mongodHackedArgs[@]}"
+ fi
+ _mongod_hack_ensure_arg_val --bind_ip 127.0.0.1 "${mongodHackedArgs[@]}"
+ _mongod_hack_ensure_arg_val --port 27017 "${mongodHackedArgs[@]}"
+ _mongod_hack_ensure_no_arg --bind_ip_all "${mongodHackedArgs[@]}"
+
+ # remove "--auth" and "--replSet" for our initial startup (see https://docs.mongodb.com/manual/tutorial/enable-authentication/#start-mongodb-without-access-control)
+ # https://github.com/docker-library/mongo/issues/211
+ _mongod_hack_ensure_no_arg --auth "${mongodHackedArgs[@]}"
+ if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ _mongod_hack_ensure_no_arg_val --replSet "${mongodHackedArgs[@]}"
+ fi
+
+ # "BadValue: need sslPEMKeyFile when SSL is enabled" vs "BadValue: need to enable SSL via the sslMode flag when using SSL configuration parameters"
+ tlsMode='disabled'
+ if _mongod_hack_have_arg '--tlsCertificateKeyFile' "${mongodHackedArgs[@]}"; then
+ tlsMode='preferTLS'
+ elif _mongod_hack_have_arg '--sslPEMKeyFile' "${mongodHackedArgs[@]}"; then
+ tlsMode='preferSSL'
+ fi
+ # 4.2 switched all configuration/flag names from "SSL" to "TLS"
+ if [ "$tlsMode" = 'preferTLS' ] || mongod --help 2>&1 | grep -q -- ' --tlsMode '; then
+ _mongod_hack_ensure_arg_val --tlsMode "$tlsMode" "${mongodHackedArgs[@]}"
+ else
+ _mongod_hack_ensure_arg_val --sslMode "$tlsMode" "${mongodHackedArgs[@]}"
+ fi
+
+ if stat "/proc/$$/fd/1" > /dev/null && [ -w "/proc/$$/fd/1" ]; then
+ # https://github.com/mongodb/mongo/blob/38c0eb538d0fd390c6cb9ce9ae9894153f6e8ef5/src/mongo/db/initialize_server_global_state.cpp#L237-L251
+ # https://github.com/docker-library/mongo/issues/164#issuecomment-293965668
+ _mongod_hack_ensure_arg_val --logpath "/proc/$$/fd/1" "${mongodHackedArgs[@]}"
+ else
+ initdbLogPath="$(_dbPath "$@")/docker-initdb.log"
+ echo >&2 "warning: initdb logs cannot write to '/proc/$$/fd/1', so they are in '$initdbLogPath' instead"
+ _mongod_hack_ensure_arg_val --logpath "$initdbLogPath" "${mongodHackedArgs[@]}"
+ fi
+ _mongod_hack_ensure_arg --logappend "${mongodHackedArgs[@]}"
+
+ pidfile="${TMPDIR:-/tmp}/docker-entrypoint-temp-mongod.pid"
+ rm -f "$pidfile"
+ _mongod_hack_ensure_arg_val --pidfilepath "$pidfile" "${mongodHackedArgs[@]}"
+
+ "${mongodHackedArgs[@]}" --fork
+
+ mongo=( mongo --host 127.0.0.1 --port 27017 --quiet )
+
+ # check to see that our "mongod" actually did start up (catches "--help", "--version", MongoDB 3.2 being silly, slow prealloc, etc)
+ # https://jira.mongodb.org/browse/SERVER-16292
+ tries=30
+ while true; do
+ if ! { [ -s "$pidfile" ] && ps "$(< "$pidfile")" &> /dev/null; }; then
+ # bail ASAP if "mongod" isn't even running
+ echo >&2
+ echo >&2 "error: $originalArgOne does not appear to have stayed running -- perhaps it had an error?"
+ echo >&2
+ exit 1
+ fi
+ if "${mongo[@]}" 'admin' --eval 'quit(0)' &> /dev/null; then
+ # success!
+ break
+ fi
+ (( tries-- ))
+ if [ "$tries" -le 0 ]; then
+ echo >&2
+ echo >&2 "error: $originalArgOne does not appear to have accepted connections quickly enough -- perhaps it had an error?"
+ echo >&2
+ exit 1
+ fi
+ sleep 1
+ done
+
+ if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ rootAuthDatabase='admin'
+
+ "${mongo[@]}" "$rootAuthDatabase" <<-EOJS
+ db.createUser({
+ user: $(_js_escape "$MONGO_INITDB_ROOT_USERNAME"),
+ pwd: $(_js_escape "$MONGO_INITDB_ROOT_PASSWORD"),
+ roles: [ { role: 'root', db: $(_js_escape "$rootAuthDatabase") } ]
+ })
+ EOJS
+ fi
+
+ export MONGO_INITDB_DATABASE="${MONGO_INITDB_DATABASE:-test}"
+
+ echo
+ for f in /docker-entrypoint-initdb.d/*; do
+ case "$f" in
+ *.sh) echo "$0: running $f"; . "$f" ;;
+ *.js) echo "$0: running $f"; "${mongo[@]}" "$MONGO_INITDB_DATABASE" "$f"; echo ;;
+ *) echo "$0: ignoring $f" ;;
+ esac
+ echo
+ done
+
+ "${mongodHackedArgs[@]}" --shutdown
+ rm -f "$pidfile"
+
+ echo
+ echo 'MongoDB init process complete; ready for start up.'
+ echo
+ fi
+
+ mongodHackedArgs=("$@")
+ MONGO_SSL_DIR=${MONGO_SSL_DIR:-/etc/mongodb-ssl}
+ CA=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
+ if [ -f /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt ]; then
+ CA=/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
+ fi
+ if [ -f "${MONGO_SSL_DIR}/ca.crt" ]; then
+ CA="${MONGO_SSL_DIR}/ca.crt"
+ fi
+ if [ -f "${MONGO_SSL_DIR}/tls.key" ] && [ -f "${MONGO_SSL_DIR}/tls.crt" ]; then
+ cat "${MONGO_SSL_DIR}/tls.key" "${MONGO_SSL_DIR}/tls.crt" >/tmp/tls.pem
+ _mongod_hack_ensure_arg_val --sslPEMKeyFile /tmp/tls.pem "${mongodHackedArgs[@]}"
+ if [ -f "${CA}" ]; then
+ _mongod_hack_ensure_arg_val --sslCAFile "${CA}" "${mongodHackedArgs[@]}"
+ fi
+ fi
+ MONGO_SSL_INTERNAL_DIR=${MONGO_SSL_INTERNAL_DIR:-/etc/mongodb-ssl-internal}
+ if [ -f "${MONGO_SSL_INTERNAL_DIR}/tls.key" ] && [ -f "${MONGO_SSL_INTERNAL_DIR}/tls.crt" ]; then
+ cat "${MONGO_SSL_INTERNAL_DIR}/tls.key" "${MONGO_SSL_INTERNAL_DIR}/tls.crt" >/tmp/tls-internal.pem
+ _mongod_hack_ensure_arg_val --sslClusterFile /tmp/tls-internal.pem "${mongodHackedArgs[@]}"
+ if [ -f "${MONGO_SSL_INTERNAL_DIR}/ca.crt" ]; then
+ _mongod_hack_ensure_arg_val --sslClusterCAFile "${MONGO_SSL_INTERNAL_DIR}/ca.crt" "${mongodHackedArgs[@]}"
+ fi
+ fi
+
+ MONGODB_VERSION=$(mongod --version | head -1 | awk '{print $3}' | awk -F'.' '{print $1"."$2}')
+ if [ "$MONGODB_VERSION" == 'v4.2' ] || [ "$MONGODB_VERSION" == 'v4.4' ] || [ "$MONGODB_VERSION" == 'v5.0' ]; then
+ _mongod_hack_rename_arg_save_val --sslMode --tlsMode "${mongodHackedArgs[@]}"
+
+ if _mongod_hack_have_arg '--tlsMode' "${mongodHackedArgs[@]}"; then
+ tlsMode="none"
+ if _mongod_hack_have_arg 'allowSSL' "${mongodHackedArgs[@]}"; then
+ tlsMode='allowTLS'
+ elif _mongod_hack_have_arg 'preferSSL' "${mongodHackedArgs[@]}"; then
+ tlsMode='preferTLS'
+ elif _mongod_hack_have_arg 'requireSSL' "${mongodHackedArgs[@]}"; then
+ tlsMode='requireTLS'
+ fi
+
+ if [ "$tlsMode" != "none" ]; then
+ _mongod_hack_ensure_no_arg_val --tlsMode "${mongodHackedArgs[@]}"
+ _mongod_hack_ensure_arg_val --tlsMode "$tlsMode" "${mongodHackedArgs[@]}"
+ fi
+ fi
+
+ _mongod_hack_rename_arg_save_val --sslPEMKeyFile --tlsCertificateKeyFile "${mongodHackedArgs[@]}"
+ if ! _mongod_hack_have_arg '--tlsMode' "${mongodHackedArgs[@]}"; then
+ if _mongod_hack_have_arg '--tlsCertificateKeyFile' "${mongodHackedArgs[@]}"; then
+ _mongod_hack_ensure_arg_val --tlsMode "preferTLS" "${mongodHackedArgs[@]}"
+ fi
+ fi
+ _mongod_hack_rename_arg '--sslAllowInvalidCertificates' '--tlsAllowInvalidCertificates' "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg '--sslAllowInvalidHostnames' '--tlsAllowInvalidHostnames' "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg '--sslAllowConnectionsWithoutCertificates' '--tlsAllowConnectionsWithoutCertificates' "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg '--sslFIPSMode' '--tlsFIPSMode' "${mongodHackedArgs[@]}"
+
+
+ _mongod_hack_rename_arg_save_val --sslPEMKeyPassword --tlsCertificateKeyFilePassword "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterFile --tlsClusterFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslCertificateSelector --tlsCertificateSelector "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterCertificateSelector --tlsClusterCertificateSelector "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterPassword --tlsClusterPassword "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslCAFile --tlsCAFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterCAFile --tlsClusterCAFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslCRLFile --tlsCRLFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslDisabledProtocols --tlsDisabledProtocols "${mongodHackedArgs[@]}"
+ fi
+
+ set -- "${mongodHackedArgs[@]}"
+
+ # MongoDB 3.6+ defaults to localhost-only binding
+ haveBindIp=
+ if _mongod_hack_have_arg --bind_ip "$@" || _mongod_hack_have_arg --bind_ip_all "$@"; then
+ haveBindIp=1
+ elif _parse_config "$@" && jq --exit-status '.net.bindIp // .net.bindIpAll' "$jsonConfigFile" > /dev/null; then
+ haveBindIp=1
+ fi
+ if [ -z "$haveBindIp" ]; then
+ # so if no "--bind_ip" is specified, let's add "--bind_ip_all"
+ set -- "$@" --bind_ip_all
+ fi
+
+ unset "${!MONGO_INITDB_@}"
+fi
+
+rm -f "$jsonConfigFile" "$tempConfigFile"
+
+set -o xtrace +u
+
+# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
+if [ ! -z "${PERCONA_INSTANCE_ID}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -i ${PERCONA_INSTANCE_ID}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_CONFIG_FILE_PATH}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -j ${PERCONA_TELEMETRY_CONFIG_FILE_PATH}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_URL}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -u ${PERCONA_TELEMETRY_URL}"
+fi
+
+if [ ! -z "${PERCONA_SEND_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -t ${PERCONA_SEND_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -t 7"
+fi
+
+if [ ! -z "${PERCONA_CONNECT_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -c ${PERCONA_CONNECT_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
+fi
+
+/call-home.sh -f "PRODUCT_FAMILY_PSMDB" -v "${PSMDB_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :
+
+exec "$@"
diff --git a/percona_psmdb-6.0/Dockerfile-dockerhub b/percona_psmdb-6.0/Dockerfile-dockerhub
new file mode 100644
index 0000000..3ccda30
--- /dev/null
+++ b/percona_psmdb-6.0/Dockerfile-dockerhub
@@ -0,0 +1,104 @@
+# This Dockerfile should be used for docker official repo
+FROM oraclelinux:8
+
+LABEL org.opencontainers.image.authors="info@percona.com"
+
+# check repository package signature in secure way
+RUN set -ex; \
+ export GNUPGHOME="$(mktemp -d)"; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
+ gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
+ gpg --batch --export --armor 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1 > ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
+ rpmkeys --checksig /tmp/percona-release.rpm; \
+ rpm -i /tmp/percona-release.rpm; \
+ rm -rf "$GNUPGHOME" /tmp/percona-release.rpm; \
+ rpm --import /etc/pki/rpm-gpg/PERCONA-PACKAGING-KEY
+
+ENV PSMDB_VERSION 6.0.19-16
+ENV OS_VER el8
+ENV FULL_PERCONA_VERSION "$PSMDB_VERSION.$OS_VER"
+ENV K8S_TOOLS_VERSION "0.5.0"
+ENV PSMDB_REPO release
+ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
+ENV CALL_HOME_VERSION 0.1
+
+# Do not report during Docker image creation.
+ARG PERCONA_TELEMETRY_DISABLE=1
+
+RUN set -ex; \
+ percona-release enable psmdb-60 ${PSMDB_REPO}; \
+ dnf config-manager --enable ol8_u4_security_validation; \
+ dnf -y update openssh; \
+ dnf -y update bind-export-libs; \
+ dnf -y update glibc; \
+ dnf -y update libgcrypt; \
+ dnf -y install \
+ percona-server-mongodb-mongos-${FULL_PERCONA_VERSION} \
+ percona-server-mongodb-tools-${FULL_PERCONA_VERSION} \
+ percona-mongodb-mongosh \
+ numactl \
+ procps-ng \
+ jq \
+ tar \
+ oniguruma \
+ cyrus-sasl-gssapi \
+ policycoreutils; \
+ \
+ curl -Lf -o /tmp/Percona-Server-MongoDB-server.rpm http://repo.percona.com/psmdb-60/yum/${PSMDB_REPO}/8/RPMS/x86_64/percona-server-mongodb-server-${FULL_PERCONA_VERSION}.x86_64.rpm; \
+ rpmkeys --checksig /tmp/Percona-Server-MongoDB-server.rpm; \
+ rpm -iv /tmp/Percona-Server-MongoDB-server.rpm --nodeps; \
+ rm -rf /tmp/Percona-Server-MongoDB-server.rpm; \
+ dnf clean all; \
+ rm -rf /var/cache/dnf /var/cache/yum /data/db && mkdir -p /data/db; \
+ chown -R 1001:0 /data/db
+
+# the numeric UID is needed for OpenShift
+RUN useradd -u 1001 -r -g 0 -m -s /sbin/nologin \
+ -c "Default Application User" mongodb; \
+ chmod g+rwx /var/log/mongo; \
+ chown :0 /var/log/mongo
+
+COPY LICENSE /licenses/LICENSE.Dockerfile
+RUN cp /usr/share/doc/percona-server-mongodb-server/LICENSE-Community.txt /licenses/LICENSE.Percona-Server-for-MongoDB
+
+ENV GOSU_VERSION=1.11
+RUN set -eux; \
+ curl -Lf -o /usr/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-amd64; \
+ curl -Lf -o /usr/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-amd64.asc; \
+ \
+ export GNUPGHOME="$(mktemp -d)"; \
+ gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
+ gpg --batch --verify /usr/bin/gosu.asc /usr/bin/gosu; \
+ rm -rf "$GNUPGHOME" /usr/bin/gosu.asc; \
+ \
+ chmod +x /usr/bin/gosu; \
+ curl -f -o /licenses/LICENSE.gosu https://raw.githubusercontent.com/tianon/gosu/${GOSU_VERSION}/LICENSE
+
+VOLUME ["/data/db"]
+
+RUN set -ex; \
+ curl -fSL https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js -o /js-yaml.js; \
+ echo "45dc3dd03dc07a06705a2c2989b8c7f709013f04bd5386e3279d4e447f07ebd7 /js-yaml.js" | sha256sum -c -
+
+RUN set -eux; \
+ curl -fL "https://github.com/percona/telemetry-agent/archive/refs/tags/phase-$CALL_HOME_VERSION.tar.gz" -o "phase-$CALL_HOME_VERSION.tar.gz"; \
+ echo "$CALL_HOME_DOWNLOAD_SHA256 phase-$CALL_HOME_VERSION.tar.gz" | sha256sum --strict --check; \
+ tar -xvf phase-$CALL_HOME_VERSION.tar.gz; \
+ cp telemetry-agent-phase-$CALL_HOME_VERSION/call-home.sh .;\
+ rm -rf telemetry-agent-phase-$CALL_HOME_VERSION phase-$CALL_HOME_VERSION.tar.gz; \
+ chmod a+rx /call-home.sh; \
+ mkdir -p /usr/local/percona; \
+ chown 1001:1001 /usr/local/percona
+ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
+
+COPY ps-entry-dockerhub.sh /entrypoint.sh
+ENTRYPOINT ["/entrypoint.sh"]
+
+EXPOSE 27017
+
+USER 1001
+
+CMD ["mongod"]
diff --git a/percona_psmdb-6.0/LICENSE b/percona_psmdb-6.0/LICENSE
new file mode 100644
index 0000000..b5a2afb
--- /dev/null
+++ b/percona_psmdb-6.0/LICENSE
@@ -0,0 +1,201 @@
+ Apache License
+ Version 2.0, January 2004
+ http://www.apache.org/licenses/
+
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+ 1. Definitions.
+
+ "License" shall mean the terms and conditions for use, reproduction,
+ and distribution as defined by Sections 1 through 9 of this document.
+
+ "Licensor" shall mean the copyright owner or entity authorized by
+ the copyright owner that is granting the License.
+
+ "Legal Entity" shall mean the union of the acting entity and all
+ other entities that control, are controlled by, or are under common
+ control with that entity. For the purposes of this definition,
+ "control" means (i) the power, direct or indirect, to cause the
+ direction or management of such entity, whether by contract or
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
+ outstanding shares, or (iii) beneficial ownership of such entity.
+
+ "You" (or "Your") shall mean an individual or Legal Entity
+ exercising permissions granted by this License.
+
+ "Source" form shall mean the preferred form for making modifications,
+ including but not limited to software source code, documentation
+ source, and configuration files.
+
+ "Object" form shall mean any form resulting from mechanical
+ transformation or translation of a Source form, including but
+ not limited to compiled object code, generated documentation,
+ and conversions to other media types.
+
+ "Work" shall mean the work of authorship, whether in Source or
+ Object form, made available under the License, as indicated by a
+ copyright notice that is included in or attached to the work
+ (an example is provided in the Appendix below).
+
+ "Derivative Works" shall mean any work, whether in Source or Object
+ form, that is based on (or derived from) the Work and for which the
+ editorial revisions, annotations, elaborations, or other modifications
+ represent, as a whole, an original work of authorship. For the purposes
+ of this License, Derivative Works shall not include works that remain
+ separable from, or merely link (or bind by name) to the interfaces of,
+ the Work and Derivative Works thereof.
+
+ "Contribution" shall mean any work of authorship, including
+ the original version of the Work and any modifications or additions
+ to that Work or Derivative Works thereof, that is intentionally
+ submitted to Licensor for inclusion in the Work by the copyright owner
+ or by an individual or Legal Entity authorized to submit on behalf of
+ the copyright owner. For the purposes of this definition, "submitted"
+ means any form of electronic, verbal, or written communication sent
+ to the Licensor or its representatives, including but not limited to
+ communication on electronic mailing lists, source code control systems,
+ and issue tracking systems that are managed by, or on behalf of, the
+ Licensor for the purpose of discussing and improving the Work, but
+ excluding communication that is conspicuously marked or otherwise
+ designated in writing by the copyright owner as "Not a Contribution."
+
+ "Contributor" shall mean Licensor and any individual or Legal Entity
+ on behalf of whom a Contribution has been received by Licensor and
+ subsequently incorporated within the Work.
+
+ 2. Grant of Copyright License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ copyright license to reproduce, prepare Derivative Works of,
+ publicly display, publicly perform, sublicense, and distribute the
+ Work and such Derivative Works in Source or Object form.
+
+ 3. Grant of Patent License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ (except as stated in this section) patent license to make, have made,
+ use, offer to sell, sell, import, and otherwise transfer the Work,
+ where such license applies only to those patent claims licensable
+ by such Contributor that are necessarily infringed by their
+ Contribution(s) alone or by combination of their Contribution(s)
+ with the Work to which such Contribution(s) was submitted. If You
+ institute patent litigation against any entity (including a
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
+ or a Contribution incorporated within the Work constitutes direct
+ or contributory patent infringement, then any patent licenses
+ granted to You under this License for that Work shall terminate
+ as of the date such litigation is filed.
+
+ 4. Redistribution. You may reproduce and distribute copies of the
+ Work or Derivative Works thereof in any medium, with or without
+ modifications, and in Source or Object form, provided that You
+ meet the following conditions:
+
+ (a) You must give any other recipients of the Work or
+ Derivative Works a copy of this License; and
+
+ (b) You must cause any modified files to carry prominent notices
+ stating that You changed the files; and
+
+ (c) You must retain, in the Source form of any Derivative Works
+ that You distribute, all copyright, patent, trademark, and
+ attribution notices from the Source form of the Work,
+ excluding those notices that do not pertain to any part of
+ the Derivative Works; and
+
+ (d) If the Work includes a "NOTICE" text file as part of its
+ distribution, then any Derivative Works that You distribute must
+ include a readable copy of the attribution notices contained
+ within such NOTICE file, excluding those notices that do not
+ pertain to any part of the Derivative Works, in at least one
+ of the following places: within a NOTICE text file distributed
+ as part of the Derivative Works; within the Source form or
+ documentation, if provided along with the Derivative Works; or,
+ within a display generated by the Derivative Works, if and
+ wherever such third-party notices normally appear. The contents
+ of the NOTICE file are for informational purposes only and
+ do not modify the License. You may add Your own attribution
+ notices within Derivative Works that You distribute, alongside
+ or as an addendum to the NOTICE text from the Work, provided
+ that such additional attribution notices cannot be construed
+ as modifying the License.
+
+ You may add Your own copyright statement to Your modifications and
+ may provide additional or different license terms and conditions
+ for use, reproduction, or distribution of Your modifications, or
+ for any such Derivative Works as a whole, provided Your use,
+ reproduction, and distribution of the Work otherwise complies with
+ the conditions stated in this License.
+
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
+ any Contribution intentionally submitted for inclusion in the Work
+ by You to the Licensor shall be under the terms and conditions of
+ this License, without any additional terms or conditions.
+ Notwithstanding the above, nothing herein shall supersede or modify
+ the terms of any separate license agreement you may have executed
+ with Licensor regarding such Contributions.
+
+ 6. Trademarks. This License does not grant permission to use the trade
+ names, trademarks, service marks, or product names of the Licensor,
+ except as required for reasonable and customary use in describing the
+ origin of the Work and reproducing the content of the NOTICE file.
+
+ 7. Disclaimer of Warranty. Unless required by applicable law or
+ agreed to in writing, Licensor provides the Work (and each
+ Contributor provides its Contributions) on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+ implied, including, without limitation, any warranties or conditions
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+ PARTICULAR PURPOSE. You are solely responsible for determining the
+ appropriateness of using or redistributing the Work and assume any
+ risks associated with Your exercise of permissions under this License.
+
+ 8. Limitation of Liability. In no event and under no legal theory,
+ whether in tort (including negligence), contract, or otherwise,
+ unless required by applicable law (such as deliberate and grossly
+ negligent acts) or agreed to in writing, shall any Contributor be
+ liable to You for damages, including any direct, indirect, special,
+ incidental, or consequential damages of any character arising as a
+ result of this License or out of the use or inability to use the
+ Work (including but not limited to damages for loss of goodwill,
+ work stoppage, computer failure or malfunction, or any and all
+ other commercial damages or losses), even if such Contributor
+ has been advised of the possibility of such damages.
+
+ 9. Accepting Warranty or Additional Liability. While redistributing
+ the Work or Derivative Works thereof, You may choose to offer,
+ and charge a fee for, acceptance of support, warranty, indemnity,
+ or other liability obligations and/or rights consistent with this
+ License. However, in accepting such obligations, You may act only
+ on Your own behalf and on Your sole responsibility, not on behalf
+ of any other Contributor, and only if You agree to indemnify,
+ defend, and hold each Contributor harmless for any liability
+ incurred by, or claims asserted against, such Contributor by reason
+ of your accepting any such warranty or additional liability.
+
+ END OF TERMS AND CONDITIONS
+
+ APPENDIX: How to apply the Apache License to your work.
+
+ To apply the Apache License to your work, attach the following
+ boilerplate notice, with the fields enclosed by brackets "[]"
+ replaced with your own identifying information. (Don't include
+ the brackets!) The text should be enclosed in the appropriate
+ comment syntax for the file format. We also recommend that a
+ file or class name and description of purpose be included on the
+ same "printed page" as the copyright notice for easier
+ identification within third-party archives.
+
+ Copyright 2010-2018 Percona LLC
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
diff --git a/percona_psmdb-6.0/ps-entry-dockerhub.sh b/percona_psmdb-6.0/ps-entry-dockerhub.sh
new file mode 100755
index 0000000..abe1918
--- /dev/null
+++ b/percona_psmdb-6.0/ps-entry-dockerhub.sh
@@ -0,0 +1,492 @@
+#!/bin/bash
+set -Eeuo pipefail
+
+if [ "${1:0:1}" = '-' ]; then
+ set -- mongod "$@"
+fi
+
+originalArgOne="$1"
+
+# allow the container to be started with `--user`
+# all mongo* commands should be dropped to the correct user
+if [[ "$originalArgOne" == mongo* ]] && [ "$(id -u)" = '0' ]; then
+ if [ "$originalArgOne" = 'mongod' ]; then
+ if [ -d "/data/configdb" ]; then
+ find /data/configdb \! -user mongodb -exec chown mongodb '{}' +
+ fi
+ if [ -d "/data/db" ]; then
+ find /data/db \! -user mongodb -exec chown mongodb '{}' +
+ fi
+ fi
+
+ # make sure we can write to stdout and stderr as "mongodb"
+ # (for our "initdb" code later; see "--logpath" below)
+ chown --dereference mongodb "/proc/$$/fd/1" "/proc/$$/fd/2" || :
+ # ignore errors thanks to https://github.com/docker-library/mongo/issues/149
+
+ exec gosu mongodb:1001 "$BASH_SOURCE" "$@"
+fi
+
+# you should use numactl to start your mongod instances, including the config servers, mongos instances, and any clients.
+# https://docs.mongodb.com/manual/administration/production-notes/#configuring-numa-on-linux
+if [[ "$originalArgOne" == mongo* ]]; then
+ numa='numactl --interleave=all'
+ if $numa true &> /dev/null; then
+ set -- $numa "$@"
+ fi
+fi
+
+# usage: file_env VAR [DEFAULT]
+# ie: file_env 'XYZ_DB_PASSWORD' 'example'
+# (will allow for "$XYZ_DB_PASSWORD_FILE" to fill in the value of
+# "$XYZ_DB_PASSWORD" from a file, especially for Docker's secrets feature)
+file_env() {
+ local var="$1"
+ local fileVar="${var}_FILE"
+ local def="${2:-}"
+ if [ "${!var:-}" ] && [ "${!fileVar:-}" ]; then
+ echo >&2 "error: both $var and $fileVar are set (but are exclusive)"
+ exit 1
+ fi
+ local val="$def"
+ if [ "${!var:-}" ]; then
+ val="${!var}"
+ elif [ "${!fileVar:-}" ]; then
+ val="$(< "${!fileVar}")"
+ fi
+ export "$var"="$val"
+ unset "$fileVar"
+}
+
+# see https://github.com/docker-library/mongo/issues/147 (mongod is picky about duplicated arguments)
+_mongod_hack_have_arg() {
+ local checkArg="$1"; shift
+ local arg
+ for arg; do
+ case "$arg" in
+ "$checkArg"|"$checkArg"=*)
+ return 0
+ ;;
+ esac
+ done
+ return 1
+}
+# _mongod_hack_get_arg_val '--some-arg' "$@"
+_mongod_hack_get_arg_val() {
+ local checkArg="$1"; shift
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ case "$arg" in
+ "$checkArg")
+ echo "$1"
+ return 0
+ ;;
+ "$checkArg"=*)
+ echo "${arg#$checkArg=}"
+ return 0
+ ;;
+ esac
+ done
+ return 1
+}
+declare -a mongodHackedArgs
+# _mongod_hack_ensure_arg '--some-arg' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_arg() {
+ local ensureArg="$1"; shift
+ mongodHackedArgs=( "$@" )
+ if ! _mongod_hack_have_arg "$ensureArg" "$@"; then
+ mongodHackedArgs+=( "$ensureArg" )
+ fi
+}
+# _mongod_hack_ensure_no_arg '--some-unwanted-arg' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_no_arg() {
+ local ensureNoArg="$1"; shift
+ mongodHackedArgs=()
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ if [ "$arg" = "$ensureNoArg" ]; then
+ continue
+ fi
+ mongodHackedArgs+=( "$arg" )
+ done
+}
+# _mongod_hack_ensure_no_arg '--some-unwanted-arg' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_no_arg_val() {
+ local ensureNoArg="$1"; shift
+ mongodHackedArgs=()
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ case "$arg" in
+ "$ensureNoArg")
+ shift # also skip the value
+ continue
+ ;;
+ "$ensureNoArg"=*)
+ # value is already included
+ continue
+ ;;
+ esac
+ mongodHackedArgs+=( "$arg" )
+ done
+}
+# _mongod_hack_ensure_arg_val '--some-arg' 'some-val' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_arg_val() {
+ local ensureArg="$1"; shift
+ local ensureVal="$1"; shift
+ _mongod_hack_ensure_no_arg_val "$ensureArg" "$@"
+ mongodHackedArgs+=( "$ensureArg" "$ensureVal" )
+}
+
+# required by mongodb 4.2
+# _mongod_hack_rename_arg_save_val '--arg-to-rename' '--arg-to-rename-to' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_rename_arg_save_val() {
+ local oldArg="$1"; shift
+ local newArg="$1"; shift
+ if ! _mongod_hack_have_arg "$oldArg" "$@"; then
+ return 0
+ fi
+ local val=""
+ mongodHackedArgs=()
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ if [ "$arg" = "$oldArg" ]; then
+ val="$1"; shift
+ continue
+ elif [[ "$arg" =~ "$oldArg"=(.*) ]]; then
+ val=${BASH_REMATCH[1]}
+ continue
+ fi
+ mongodHackedArgs+=("$arg")
+ done
+ mongodHackedArgs+=("$newArg" "$val")
+}
+
+# required by mongodb 4.2
+# _mongod_hack_rename_arg'--arg-to-rename' '--arg-to-rename-to' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_rename_arg() {
+ local oldArg="$1"; shift
+ local newArg="$1"; shift
+ if _mongod_hack_have_arg "$oldArg" "$@"; then
+ _mongod_hack_ensure_no_arg "$oldArg" "$@"
+ _mongod_hack_ensure_arg "$newArg" "${mongodHackedArgs[@]}"
+ fi
+}
+
+# _js_escape 'some "string" value'
+_js_escape() {
+ jq --null-input --arg 'str' "$1" '$str'
+}
+
+jsonConfigFile="${TMPDIR:-/tmp}/docker-entrypoint-config.json"
+tempConfigFile="${TMPDIR:-/tmp}/docker-entrypoint-temp-config.json"
+_parse_config() {
+ if [ -s "$tempConfigFile" ]; then
+ return 0
+ fi
+
+ local configPath
+ if configPath="$(_mongod_hack_get_arg_val --config "$@")"; then
+ # if --config is specified, parse it into a JSON file so we can remove a few problematic keys (especially SSL-related keys)
+ # see https://docs.mongodb.com/manual/reference/configuration-options/
+ mongosh --norc --nodb --quiet --eval "load('/js-yaml.js'); printjson(jsyaml.load(cat($(_js_escape "$configPath"))))" > "$jsonConfigFile"
+ jq 'del(.systemLog, .processManagement, .net, .security)' "$jsonConfigFile" > "$tempConfigFile"
+ return 0
+ fi
+
+ return 1
+}
+dbPath=
+_dbPath() {
+ if [ -n "$dbPath" ]; then
+ echo "$dbPath"
+ return
+ fi
+
+ if ! dbPath="$(_mongod_hack_get_arg_val --dbpath "$@")"; then
+ if _parse_config "$@"; then
+ dbPath="$(jq -r '.storage.dbPath // empty' "$jsonConfigFile")"
+ fi
+ fi
+
+ : "${dbPath:=/data/db}"
+
+ echo "$dbPath"
+}
+
+if [ "$originalArgOne" = 'mongod' ]; then
+ file_env 'MONGO_INITDB_ROOT_USERNAME'
+ file_env 'MONGO_INITDB_ROOT_PASSWORD'
+ # pre-check a few factors to see if it's even worth bothering with initdb
+ shouldPerformInitdb=
+ if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ # if we have a username/password, let's set "--auth"
+ _mongod_hack_ensure_arg '--auth' "$@"
+ set -- "${mongodHackedArgs[@]}"
+ shouldPerformInitdb='true'
+ elif [ "$MONGO_INITDB_ROOT_USERNAME" ] || [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ cat >&2 <<-'EOF'
+
+ error: missing 'MONGO_INITDB_ROOT_USERNAME' or 'MONGO_INITDB_ROOT_PASSWORD'
+ both must be specified for a user to be created
+
+ EOF
+ exit 1
+ fi
+
+ if [ -z "$shouldPerformInitdb" ]; then
+ # if we've got any /docker-entrypoint-initdb.d/* files to parse later, we should initdb
+ for f in /docker-entrypoint-initdb.d/*; do
+ case "$f" in
+ *.sh|*.js) # this should match the set of files we check for below
+ shouldPerformInitdb="$f"
+ break
+ ;;
+ esac
+ done
+ fi
+
+ # check for a few known paths (to determine whether we've already initialized and should thus skip our initdb scripts)
+ if [ -n "$shouldPerformInitdb" ]; then
+ dbPath="$(_dbPath "$@")"
+ for path in \
+ "$dbPath/WiredTiger" \
+ "$dbPath/journal" \
+ "$dbPath/local.0" \
+ "$dbPath/storage.bson" \
+ ; do
+ if [ -e "$path" ]; then
+ shouldPerformInitdb=
+ break
+ fi
+ done
+ fi
+
+ if [ -n "$shouldPerformInitdb" ]; then
+ mongodHackedArgs=( "$@" )
+ if _parse_config "$@"; then
+ _mongod_hack_ensure_arg_val --config "$tempConfigFile" "${mongodHackedArgs[@]}"
+ fi
+ _mongod_hack_ensure_arg_val --bind_ip 127.0.0.1 "${mongodHackedArgs[@]}"
+ _mongod_hack_ensure_arg_val --port 27017 "${mongodHackedArgs[@]}"
+ _mongod_hack_ensure_no_arg --bind_ip_all "${mongodHackedArgs[@]}"
+
+ # remove "--auth" and "--replSet" for our initial startup (see https://docs.mongodb.com/manual/tutorial/enable-authentication/#start-mongodb-without-access-control)
+ # https://github.com/docker-library/mongo/issues/211
+ _mongod_hack_ensure_no_arg --auth "${mongodHackedArgs[@]}"
+ if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ _mongod_hack_ensure_no_arg_val --replSet "${mongodHackedArgs[@]}"
+ fi
+
+ # "BadValue: need sslPEMKeyFile when SSL is enabled" vs "BadValue: need to enable SSL via the sslMode flag when using SSL configuration parameters"
+ tlsMode='disabled'
+ if _mongod_hack_have_arg '--tlsCertificateKeyFile' "${mongodHackedArgs[@]}"; then
+ tlsMode='preferTLS'
+ elif _mongod_hack_have_arg '--sslPEMKeyFile' "${mongodHackedArgs[@]}"; then
+ tlsMode='preferSSL'
+ fi
+ # 4.2 switched all configuration/flag names from "SSL" to "TLS"
+ if [ "$tlsMode" = 'preferTLS' ] || mongod --help 2>&1 | grep -q -- ' --tlsMode '; then
+ _mongod_hack_ensure_arg_val --tlsMode "$tlsMode" "${mongodHackedArgs[@]}"
+ else
+ _mongod_hack_ensure_arg_val --sslMode "$tlsMode" "${mongodHackedArgs[@]}"
+ fi
+
+ if stat "/proc/$$/fd/1" > /dev/null && [ -w "/proc/$$/fd/1" ]; then
+ # https://github.com/mongodb/mongo/blob/38c0eb538d0fd390c6cb9ce9ae9894153f6e8ef5/src/mongo/db/initialize_server_global_state.cpp#L237-L251
+ # https://github.com/docker-library/mongo/issues/164#issuecomment-293965668
+ _mongod_hack_ensure_arg_val --logpath "/proc/$$/fd/1" "${mongodHackedArgs[@]}"
+ else
+ initdbLogPath="$(_dbPath "$@")/docker-initdb.log"
+ echo >&2 "warning: initdb logs cannot write to '/proc/$$/fd/1', so they are in '$initdbLogPath' instead"
+ _mongod_hack_ensure_arg_val --logpath "$initdbLogPath" "${mongodHackedArgs[@]}"
+ fi
+ _mongod_hack_ensure_arg --logappend "${mongodHackedArgs[@]}"
+
+ pidfile="${TMPDIR:-/tmp}/docker-entrypoint-temp-mongod.pid"
+ rm -f "$pidfile"
+ _mongod_hack_ensure_arg_val --pidfilepath "$pidfile" "${mongodHackedArgs[@]}"
+
+ "${mongodHackedArgs[@]}" --fork
+
+ mongo=( mongosh --host 127.0.0.1 --port 27017 --quiet )
+
+ # check to see that our "mongod" actually did start up (catches "--help", "--version", MongoDB 3.2 being silly, slow prealloc, etc)
+ # https://jira.mongodb.org/browse/SERVER-16292
+ tries=30
+ while true; do
+ if ! { [ -s "$pidfile" ] && ps "$(< "$pidfile")" &> /dev/null; }; then
+ # bail ASAP if "mongod" isn't even running
+ echo >&2
+ echo >&2 "error: $originalArgOne does not appear to have stayed running -- perhaps it had an error?"
+ echo >&2
+ exit 1
+ fi
+ if "${mongo[@]}" 'admin' --eval 'quit(0)' &> /dev/null; then
+ # success!
+ break
+ fi
+ (( tries-- ))
+ if [ "$tries" -le 0 ]; then
+ echo >&2
+ echo >&2 "error: $originalArgOne does not appear to have accepted connections quickly enough -- perhaps it had an error?"
+ echo >&2
+ exit 1
+ fi
+ sleep 1
+ done
+
+ if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ rootAuthDatabase='admin'
+
+ "${mongo[@]}" "$rootAuthDatabase" <<-EOJS
+ db.createUser({
+ user: $(_js_escape "$MONGO_INITDB_ROOT_USERNAME"),
+ pwd: $(_js_escape "$MONGO_INITDB_ROOT_PASSWORD"),
+ roles: [ { role: 'root', db: $(_js_escape "$rootAuthDatabase") } ]
+ })
+ EOJS
+ fi
+
+ export MONGO_INITDB_DATABASE="${MONGO_INITDB_DATABASE:-test}"
+
+ echo
+ for f in /docker-entrypoint-initdb.d/*; do
+ case "$f" in
+ *.sh) echo "$0: running $f"; . "$f" ;;
+ *.js) echo "$0: running $f"; "${mongo[@]}" "$MONGO_INITDB_DATABASE" "$f"; echo ;;
+ *) echo "$0: ignoring $f" ;;
+ esac
+ echo
+ done
+
+ "${mongodHackedArgs[@]}" --shutdown
+ rm -f "$pidfile"
+
+ echo
+ echo 'MongoDB init process complete; ready for start up.'
+ echo
+ fi
+
+ mongodHackedArgs=("$@")
+ MONGO_SSL_DIR=${MONGO_SSL_DIR:-/etc/mongodb-ssl}
+ CA=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
+ if [ -f /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt ]; then
+ CA=/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
+ fi
+ if [ -f "${MONGO_SSL_DIR}/ca.crt" ]; then
+ CA="${MONGO_SSL_DIR}/ca.crt"
+ fi
+ if [ -f "${MONGO_SSL_DIR}/tls.key" ] && [ -f "${MONGO_SSL_DIR}/tls.crt" ]; then
+ cat "${MONGO_SSL_DIR}/tls.key" "${MONGO_SSL_DIR}/tls.crt" >/tmp/tls.pem
+ _mongod_hack_ensure_arg_val --sslPEMKeyFile /tmp/tls.pem "${mongodHackedArgs[@]}"
+ if [ -f "${CA}" ]; then
+ _mongod_hack_ensure_arg_val --sslCAFile "${CA}" "${mongodHackedArgs[@]}"
+ fi
+ fi
+ MONGO_SSL_INTERNAL_DIR=${MONGO_SSL_INTERNAL_DIR:-/etc/mongodb-ssl-internal}
+ if [ -f "${MONGO_SSL_INTERNAL_DIR}/tls.key" ] && [ -f "${MONGO_SSL_INTERNAL_DIR}/tls.crt" ]; then
+ cat "${MONGO_SSL_INTERNAL_DIR}/tls.key" "${MONGO_SSL_INTERNAL_DIR}/tls.crt" >/tmp/tls-internal.pem
+ _mongod_hack_ensure_arg_val --sslClusterFile /tmp/tls-internal.pem "${mongodHackedArgs[@]}"
+ if [ -f "${MONGO_SSL_INTERNAL_DIR}/ca.crt" ]; then
+ _mongod_hack_ensure_arg_val --sslClusterCAFile "${MONGO_SSL_INTERNAL_DIR}/ca.crt" "${mongodHackedArgs[@]}"
+ fi
+ fi
+
+ MONGODB_VERSION=$(mongod --version | head -1 | awk '{print $3}' | awk -F'.' '{print $1"."$2}')
+ if [ "$MONGODB_VERSION" == 'v4.2' ] || [ "$MONGODB_VERSION" == 'v4.4' ] || [ "$MONGODB_VERSION" == 'v5.0' ] || [ "$MONGODB_VERSION" == 'v6.0' ]; then
+ _mongod_hack_rename_arg_save_val --sslMode --tlsMode "${mongodHackedArgs[@]}"
+
+ if _mongod_hack_have_arg '--tlsMode' "${mongodHackedArgs[@]}"; then
+ tlsMode="none"
+ if _mongod_hack_have_arg 'allowSSL' "${mongodHackedArgs[@]}"; then
+ tlsMode='allowTLS'
+ elif _mongod_hack_have_arg 'preferSSL' "${mongodHackedArgs[@]}"; then
+ tlsMode='preferTLS'
+ elif _mongod_hack_have_arg 'requireSSL' "${mongodHackedArgs[@]}"; then
+ tlsMode='requireTLS'
+ fi
+
+ if [ "$tlsMode" != "none" ]; then
+ _mongod_hack_ensure_no_arg_val --tlsMode "${mongodHackedArgs[@]}"
+ _mongod_hack_ensure_arg_val --tlsMode "$tlsMode" "${mongodHackedArgs[@]}"
+ fi
+ fi
+
+ _mongod_hack_rename_arg_save_val --sslPEMKeyFile --tlsCertificateKeyFile "${mongodHackedArgs[@]}"
+ if ! _mongod_hack_have_arg '--tlsMode' "${mongodHackedArgs[@]}"; then
+ if _mongod_hack_have_arg '--tlsCertificateKeyFile' "${mongodHackedArgs[@]}"; then
+ _mongod_hack_ensure_arg_val --tlsMode "preferTLS" "${mongodHackedArgs[@]}"
+ fi
+ fi
+ _mongod_hack_rename_arg '--sslAllowInvalidCertificates' '--tlsAllowInvalidCertificates' "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg '--sslAllowInvalidHostnames' '--tlsAllowInvalidHostnames' "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg '--sslAllowConnectionsWithoutCertificates' '--tlsAllowConnectionsWithoutCertificates' "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg '--sslFIPSMode' '--tlsFIPSMode' "${mongodHackedArgs[@]}"
+
+
+ _mongod_hack_rename_arg_save_val --sslPEMKeyPassword --tlsCertificateKeyFilePassword "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterFile --tlsClusterFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslCertificateSelector --tlsCertificateSelector "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterCertificateSelector --tlsClusterCertificateSelector "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterPassword --tlsClusterPassword "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslCAFile --tlsCAFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterCAFile --tlsClusterCAFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslCRLFile --tlsCRLFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslDisabledProtocols --tlsDisabledProtocols "${mongodHackedArgs[@]}"
+ fi
+
+ set -- "${mongodHackedArgs[@]}"
+
+ # MongoDB 3.6+ defaults to localhost-only binding
+ haveBindIp=
+ if _mongod_hack_have_arg --bind_ip "$@" || _mongod_hack_have_arg --bind_ip_all "$@"; then
+ haveBindIp=1
+ elif _parse_config "$@" && jq --exit-status '.net.bindIp // .net.bindIpAll' "$jsonConfigFile" > /dev/null; then
+ haveBindIp=1
+ fi
+ if [ -z "$haveBindIp" ]; then
+ # so if no "--bind_ip" is specified, let's add "--bind_ip_all"
+ set -- "$@" --bind_ip_all
+ fi
+
+ unset "${!MONGO_INITDB_@}"
+fi
+
+rm -f "$jsonConfigFile" "$tempConfigFile"
+
+set -o xtrace +u
+
+# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
+if [ ! -z "${PERCONA_INSTANCE_ID}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -i ${PERCONA_INSTANCE_ID}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_CONFIG_FILE_PATH}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -j ${PERCONA_TELEMETRY_CONFIG_FILE_PATH}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_URL}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -u ${PERCONA_TELEMETRY_URL}"
+fi
+
+if [ ! -z "${PERCONA_SEND_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -t ${PERCONA_SEND_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -t 7"
+fi
+
+if [ ! -z "${PERCONA_CONNECT_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -c ${PERCONA_CONNECT_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
+fi
+
+/call-home.sh -f "PRODUCT_FAMILY_PSMDB" -v "${PSMDB_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :
+
+exec "$@"
diff --git a/percona_psmdb-7.0/Dockerfile-dockerhub b/percona_psmdb-7.0/Dockerfile-dockerhub
new file mode 100644
index 0000000..e624558
--- /dev/null
+++ b/percona_psmdb-7.0/Dockerfile-dockerhub
@@ -0,0 +1,104 @@
+# This Dockerfile should be used for docker official repo
+FROM oraclelinux:8
+
+LABEL org.opencontainers.image.authors="info@percona.com"
+
+# check repository package signature in secure way
+RUN set -ex; \
+ export GNUPGHOME="$(mktemp -d)"; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
+ gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
+ gpg --batch --export --armor 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1 > ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
+ rpmkeys --checksig /tmp/percona-release.rpm; \
+ rpm -i /tmp/percona-release.rpm; \
+ rm -rf "$GNUPGHOME" /tmp/percona-release.rpm; \
+ rpm --import /etc/pki/rpm-gpg/PERCONA-PACKAGING-KEY
+
+ENV PSMDB_VERSION 7.0.15-9
+ENV OS_VER el8
+ENV FULL_PERCONA_VERSION "$PSMDB_VERSION.$OS_VER"
+ENV K8S_TOOLS_VERSION "0.5.0"
+ENV PSMDB_REPO release
+ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
+ENV CALL_HOME_VERSION 0.1
+
+# Do not report during Docker image creation.
+ARG PERCONA_TELEMETRY_DISABLE=1
+
+RUN set -ex; \
+ percona-release enable psmdb-70 ${PSMDB_REPO}; \
+ dnf config-manager --enable ol8_u4_security_validation; \
+ dnf -y update openssh; \
+ dnf -y update bind-export-libs; \
+ dnf -y update glibc; \
+ dnf -y update libgcrypt; \
+ dnf -y install \
+ percona-server-mongodb-mongos-${FULL_PERCONA_VERSION} \
+ percona-server-mongodb-tools-${FULL_PERCONA_VERSION} \
+ percona-mongodb-mongosh \
+ numactl \
+ procps-ng \
+ jq \
+ tar \
+ oniguruma \
+ cyrus-sasl-gssapi \
+ policycoreutils; \
+ \
+ curl -Lf -o /tmp/Percona-Server-MongoDB-server.rpm http://repo.percona.com/psmdb-70/yum/${PSMDB_REPO}/8/RPMS/x86_64/percona-server-mongodb-server-${FULL_PERCONA_VERSION}.x86_64.rpm; \
+ rpmkeys --checksig /tmp/Percona-Server-MongoDB-server.rpm; \
+ rpm -iv /tmp/Percona-Server-MongoDB-server.rpm --nodeps; \
+ rm -rf /tmp/Percona-Server-MongoDB-server.rpm; \
+ dnf clean all; \
+ rm -rf /var/cache/dnf /var/cache/yum /data/db && mkdir -p /data/db; \
+ chown -R 1001:0 /data/db
+
+# the numeric UID is needed for OpenShift
+RUN useradd -u 1001 -r -g 0 -m -s /sbin/nologin \
+ -c "Default Application User" mongodb; \
+ chmod g+rwx /var/log/mongo; \
+ chown :0 /var/log/mongo
+
+COPY LICENSE /licenses/LICENSE.Dockerfile
+RUN cp /usr/share/doc/percona-server-mongodb-server/LICENSE-Community.txt /licenses/LICENSE.Percona-Server-for-MongoDB
+
+ENV GOSU_VERSION=1.11
+RUN set -eux; \
+ curl -Lf -o /usr/bin/gosu https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-amd64; \
+ curl -Lf -o /usr/bin/gosu.asc https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-amd64.asc; \
+ \
+ export GNUPGHOME="$(mktemp -d)"; \
+ gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
+ gpg --batch --verify /usr/bin/gosu.asc /usr/bin/gosu; \
+ rm -rf "$GNUPGHOME" /usr/bin/gosu.asc; \
+ \
+ chmod +x /usr/bin/gosu; \
+ curl -f -o /licenses/LICENSE.gosu https://raw.githubusercontent.com/tianon/gosu/${GOSU_VERSION}/LICENSE
+
+VOLUME ["/data/db"]
+
+RUN set -ex; \
+ curl -fSL https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js -o /js-yaml.js; \
+ echo "45dc3dd03dc07a06705a2c2989b8c7f709013f04bd5386e3279d4e447f07ebd7 /js-yaml.js" | sha256sum -c -
+
+RUN set -eux; \
+ curl -fL "https://github.com/percona/telemetry-agent/archive/refs/tags/phase-$CALL_HOME_VERSION.tar.gz" -o "phase-$CALL_HOME_VERSION.tar.gz"; \
+ echo "$CALL_HOME_DOWNLOAD_SHA256 phase-$CALL_HOME_VERSION.tar.gz" | sha256sum --strict --check; \
+ tar -xvf phase-$CALL_HOME_VERSION.tar.gz; \
+ cp telemetry-agent-phase-$CALL_HOME_VERSION/call-home.sh .;\
+ rm -rf telemetry-agent-phase-$CALL_HOME_VERSION phase-$CALL_HOME_VERSION.tar.gz; \
+ chmod a+rx /call-home.sh; \
+ mkdir -p /usr/local/percona; \
+ chown 1001:1001 /usr/local/percona
+ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
+
+COPY ps-entry-dockerhub.sh /entrypoint.sh
+ENTRYPOINT ["/entrypoint.sh"]
+
+EXPOSE 27017
+
+USER 1001
+
+CMD ["mongod"]
diff --git a/percona_psmdb-7.0/LICENSE b/percona_psmdb-7.0/LICENSE
new file mode 100644
index 0000000..b5a2afb
--- /dev/null
+++ b/percona_psmdb-7.0/LICENSE
@@ -0,0 +1,201 @@
+ Apache License
+ Version 2.0, January 2004
+ http://www.apache.org/licenses/
+
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+ 1. Definitions.
+
+ "License" shall mean the terms and conditions for use, reproduction,
+ and distribution as defined by Sections 1 through 9 of this document.
+
+ "Licensor" shall mean the copyright owner or entity authorized by
+ the copyright owner that is granting the License.
+
+ "Legal Entity" shall mean the union of the acting entity and all
+ other entities that control, are controlled by, or are under common
+ control with that entity. For the purposes of this definition,
+ "control" means (i) the power, direct or indirect, to cause the
+ direction or management of such entity, whether by contract or
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
+ outstanding shares, or (iii) beneficial ownership of such entity.
+
+ "You" (or "Your") shall mean an individual or Legal Entity
+ exercising permissions granted by this License.
+
+ "Source" form shall mean the preferred form for making modifications,
+ including but not limited to software source code, documentation
+ source, and configuration files.
+
+ "Object" form shall mean any form resulting from mechanical
+ transformation or translation of a Source form, including but
+ not limited to compiled object code, generated documentation,
+ and conversions to other media types.
+
+ "Work" shall mean the work of authorship, whether in Source or
+ Object form, made available under the License, as indicated by a
+ copyright notice that is included in or attached to the work
+ (an example is provided in the Appendix below).
+
+ "Derivative Works" shall mean any work, whether in Source or Object
+ form, that is based on (or derived from) the Work and for which the
+ editorial revisions, annotations, elaborations, or other modifications
+ represent, as a whole, an original work of authorship. For the purposes
+ of this License, Derivative Works shall not include works that remain
+ separable from, or merely link (or bind by name) to the interfaces of,
+ the Work and Derivative Works thereof.
+
+ "Contribution" shall mean any work of authorship, including
+ the original version of the Work and any modifications or additions
+ to that Work or Derivative Works thereof, that is intentionally
+ submitted to Licensor for inclusion in the Work by the copyright owner
+ or by an individual or Legal Entity authorized to submit on behalf of
+ the copyright owner. For the purposes of this definition, "submitted"
+ means any form of electronic, verbal, or written communication sent
+ to the Licensor or its representatives, including but not limited to
+ communication on electronic mailing lists, source code control systems,
+ and issue tracking systems that are managed by, or on behalf of, the
+ Licensor for the purpose of discussing and improving the Work, but
+ excluding communication that is conspicuously marked or otherwise
+ designated in writing by the copyright owner as "Not a Contribution."
+
+ "Contributor" shall mean Licensor and any individual or Legal Entity
+ on behalf of whom a Contribution has been received by Licensor and
+ subsequently incorporated within the Work.
+
+ 2. Grant of Copyright License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ copyright license to reproduce, prepare Derivative Works of,
+ publicly display, publicly perform, sublicense, and distribute the
+ Work and such Derivative Works in Source or Object form.
+
+ 3. Grant of Patent License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ (except as stated in this section) patent license to make, have made,
+ use, offer to sell, sell, import, and otherwise transfer the Work,
+ where such license applies only to those patent claims licensable
+ by such Contributor that are necessarily infringed by their
+ Contribution(s) alone or by combination of their Contribution(s)
+ with the Work to which such Contribution(s) was submitted. If You
+ institute patent litigation against any entity (including a
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
+ or a Contribution incorporated within the Work constitutes direct
+ or contributory patent infringement, then any patent licenses
+ granted to You under this License for that Work shall terminate
+ as of the date such litigation is filed.
+
+ 4. Redistribution. You may reproduce and distribute copies of the
+ Work or Derivative Works thereof in any medium, with or without
+ modifications, and in Source or Object form, provided that You
+ meet the following conditions:
+
+ (a) You must give any other recipients of the Work or
+ Derivative Works a copy of this License; and
+
+ (b) You must cause any modified files to carry prominent notices
+ stating that You changed the files; and
+
+ (c) You must retain, in the Source form of any Derivative Works
+ that You distribute, all copyright, patent, trademark, and
+ attribution notices from the Source form of the Work,
+ excluding those notices that do not pertain to any part of
+ the Derivative Works; and
+
+ (d) If the Work includes a "NOTICE" text file as part of its
+ distribution, then any Derivative Works that You distribute must
+ include a readable copy of the attribution notices contained
+ within such NOTICE file, excluding those notices that do not
+ pertain to any part of the Derivative Works, in at least one
+ of the following places: within a NOTICE text file distributed
+ as part of the Derivative Works; within the Source form or
+ documentation, if provided along with the Derivative Works; or,
+ within a display generated by the Derivative Works, if and
+ wherever such third-party notices normally appear. The contents
+ of the NOTICE file are for informational purposes only and
+ do not modify the License. You may add Your own attribution
+ notices within Derivative Works that You distribute, alongside
+ or as an addendum to the NOTICE text from the Work, provided
+ that such additional attribution notices cannot be construed
+ as modifying the License.
+
+ You may add Your own copyright statement to Your modifications and
+ may provide additional or different license terms and conditions
+ for use, reproduction, or distribution of Your modifications, or
+ for any such Derivative Works as a whole, provided Your use,
+ reproduction, and distribution of the Work otherwise complies with
+ the conditions stated in this License.
+
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
+ any Contribution intentionally submitted for inclusion in the Work
+ by You to the Licensor shall be under the terms and conditions of
+ this License, without any additional terms or conditions.
+ Notwithstanding the above, nothing herein shall supersede or modify
+ the terms of any separate license agreement you may have executed
+ with Licensor regarding such Contributions.
+
+ 6. Trademarks. This License does not grant permission to use the trade
+ names, trademarks, service marks, or product names of the Licensor,
+ except as required for reasonable and customary use in describing the
+ origin of the Work and reproducing the content of the NOTICE file.
+
+ 7. Disclaimer of Warranty. Unless required by applicable law or
+ agreed to in writing, Licensor provides the Work (and each
+ Contributor provides its Contributions) on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+ implied, including, without limitation, any warranties or conditions
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+ PARTICULAR PURPOSE. You are solely responsible for determining the
+ appropriateness of using or redistributing the Work and assume any
+ risks associated with Your exercise of permissions under this License.
+
+ 8. Limitation of Liability. In no event and under no legal theory,
+ whether in tort (including negligence), contract, or otherwise,
+ unless required by applicable law (such as deliberate and grossly
+ negligent acts) or agreed to in writing, shall any Contributor be
+ liable to You for damages, including any direct, indirect, special,
+ incidental, or consequential damages of any character arising as a
+ result of this License or out of the use or inability to use the
+ Work (including but not limited to damages for loss of goodwill,
+ work stoppage, computer failure or malfunction, or any and all
+ other commercial damages or losses), even if such Contributor
+ has been advised of the possibility of such damages.
+
+ 9. Accepting Warranty or Additional Liability. While redistributing
+ the Work or Derivative Works thereof, You may choose to offer,
+ and charge a fee for, acceptance of support, warranty, indemnity,
+ or other liability obligations and/or rights consistent with this
+ License. However, in accepting such obligations, You may act only
+ on Your own behalf and on Your sole responsibility, not on behalf
+ of any other Contributor, and only if You agree to indemnify,
+ defend, and hold each Contributor harmless for any liability
+ incurred by, or claims asserted against, such Contributor by reason
+ of your accepting any such warranty or additional liability.
+
+ END OF TERMS AND CONDITIONS
+
+ APPENDIX: How to apply the Apache License to your work.
+
+ To apply the Apache License to your work, attach the following
+ boilerplate notice, with the fields enclosed by brackets "[]"
+ replaced with your own identifying information. (Don't include
+ the brackets!) The text should be enclosed in the appropriate
+ comment syntax for the file format. We also recommend that a
+ file or class name and description of purpose be included on the
+ same "printed page" as the copyright notice for easier
+ identification within third-party archives.
+
+ Copyright 2010-2018 Percona LLC
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
diff --git a/percona_psmdb-7.0/ps-entry-dockerhub.sh b/percona_psmdb-7.0/ps-entry-dockerhub.sh
new file mode 100755
index 0000000..a9507ad
--- /dev/null
+++ b/percona_psmdb-7.0/ps-entry-dockerhub.sh
@@ -0,0 +1,492 @@
+#!/bin/bash
+set -Eeuo pipefail
+
+if [ "${1:0:1}" = '-' ]; then
+ set -- mongod "$@"
+fi
+
+originalArgOne="$1"
+
+# allow the container to be started with `--user`
+# all mongo* commands should be dropped to the correct user
+if [[ "$originalArgOne" == mongo* ]] && [ "$(id -u)" = '0' ]; then
+ if [ "$originalArgOne" = 'mongod' ]; then
+ if [ -d "/data/configdb" ]; then
+ find /data/configdb \! -user mongodb -exec chown mongodb '{}' +
+ fi
+ if [ -d "/data/db" ]; then
+ find /data/db \! -user mongodb -exec chown mongodb '{}' +
+ fi
+ fi
+
+ # make sure we can write to stdout and stderr as "mongodb"
+ # (for our "initdb" code later; see "--logpath" below)
+ chown --dereference mongodb "/proc/$$/fd/1" "/proc/$$/fd/2" || :
+ # ignore errors thanks to https://github.com/docker-library/mongo/issues/149
+
+ exec gosu mongodb:1001 "$BASH_SOURCE" "$@"
+fi
+
+# you should use numactl to start your mongod instances, including the config servers, mongos instances, and any clients.
+# https://docs.mongodb.com/manual/administration/production-notes/#configuring-numa-on-linux
+if [[ "$originalArgOne" == mongo* ]]; then
+ numa='numactl --interleave=all'
+ if $numa true &> /dev/null; then
+ set -- $numa "$@"
+ fi
+fi
+
+# usage: file_env VAR [DEFAULT]
+# ie: file_env 'XYZ_DB_PASSWORD' 'example'
+# (will allow for "$XYZ_DB_PASSWORD_FILE" to fill in the value of
+# "$XYZ_DB_PASSWORD" from a file, especially for Docker's secrets feature)
+file_env() {
+ local var="$1"
+ local fileVar="${var}_FILE"
+ local def="${2:-}"
+ if [ "${!var:-}" ] && [ "${!fileVar:-}" ]; then
+ echo >&2 "error: both $var and $fileVar are set (but are exclusive)"
+ exit 1
+ fi
+ local val="$def"
+ if [ "${!var:-}" ]; then
+ val="${!var}"
+ elif [ "${!fileVar:-}" ]; then
+ val="$(< "${!fileVar}")"
+ fi
+ export "$var"="$val"
+ unset "$fileVar"
+}
+
+# see https://github.com/docker-library/mongo/issues/147 (mongod is picky about duplicated arguments)
+_mongod_hack_have_arg() {
+ local checkArg="$1"; shift
+ local arg
+ for arg; do
+ case "$arg" in
+ "$checkArg"|"$checkArg"=*)
+ return 0
+ ;;
+ esac
+ done
+ return 1
+}
+# _mongod_hack_get_arg_val '--some-arg' "$@"
+_mongod_hack_get_arg_val() {
+ local checkArg="$1"; shift
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ case "$arg" in
+ "$checkArg")
+ echo "$1"
+ return 0
+ ;;
+ "$checkArg"=*)
+ echo "${arg#$checkArg=}"
+ return 0
+ ;;
+ esac
+ done
+ return 1
+}
+declare -a mongodHackedArgs
+# _mongod_hack_ensure_arg '--some-arg' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_arg() {
+ local ensureArg="$1"; shift
+ mongodHackedArgs=( "$@" )
+ if ! _mongod_hack_have_arg "$ensureArg" "$@"; then
+ mongodHackedArgs+=( "$ensureArg" )
+ fi
+}
+# _mongod_hack_ensure_no_arg '--some-unwanted-arg' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_no_arg() {
+ local ensureNoArg="$1"; shift
+ mongodHackedArgs=()
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ if [ "$arg" = "$ensureNoArg" ]; then
+ continue
+ fi
+ mongodHackedArgs+=( "$arg" )
+ done
+}
+# _mongod_hack_ensure_no_arg '--some-unwanted-arg' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_no_arg_val() {
+ local ensureNoArg="$1"; shift
+ mongodHackedArgs=()
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ case "$arg" in
+ "$ensureNoArg")
+ shift # also skip the value
+ continue
+ ;;
+ "$ensureNoArg"=*)
+ # value is already included
+ continue
+ ;;
+ esac
+ mongodHackedArgs+=( "$arg" )
+ done
+}
+# _mongod_hack_ensure_arg_val '--some-arg' 'some-val' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_ensure_arg_val() {
+ local ensureArg="$1"; shift
+ local ensureVal="$1"; shift
+ _mongod_hack_ensure_no_arg_val "$ensureArg" "$@"
+ mongodHackedArgs+=( "$ensureArg" "$ensureVal" )
+}
+
+# required by mongodb 4.2
+# _mongod_hack_rename_arg_save_val '--arg-to-rename' '--arg-to-rename-to' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_rename_arg_save_val() {
+ local oldArg="$1"; shift
+ local newArg="$1"; shift
+ if ! _mongod_hack_have_arg "$oldArg" "$@"; then
+ return 0
+ fi
+ local val=""
+ mongodHackedArgs=()
+ while [ "$#" -gt 0 ]; do
+ local arg="$1"; shift
+ if [ "$arg" = "$oldArg" ]; then
+ val="$1"; shift
+ continue
+ elif [[ "$arg" =~ "$oldArg"=(.*) ]]; then
+ val=${BASH_REMATCH[1]}
+ continue
+ fi
+ mongodHackedArgs+=("$arg")
+ done
+ mongodHackedArgs+=("$newArg" "$val")
+}
+
+# required by mongodb 4.2
+# _mongod_hack_rename_arg'--arg-to-rename' '--arg-to-rename-to' "$@"
+# set -- "${mongodHackedArgs[@]}"
+_mongod_hack_rename_arg() {
+ local oldArg="$1"; shift
+ local newArg="$1"; shift
+ if _mongod_hack_have_arg "$oldArg" "$@"; then
+ _mongod_hack_ensure_no_arg "$oldArg" "$@"
+ _mongod_hack_ensure_arg "$newArg" "${mongodHackedArgs[@]}"
+ fi
+}
+
+# _js_escape 'some "string" value'
+_js_escape() {
+ jq --null-input --arg 'str' "$1" '$str'
+}
+
+jsonConfigFile="${TMPDIR:-/tmp}/docker-entrypoint-config.json"
+tempConfigFile="${TMPDIR:-/tmp}/docker-entrypoint-temp-config.json"
+_parse_config() {
+ if [ -s "$tempConfigFile" ]; then
+ return 0
+ fi
+
+ local configPath
+ if configPath="$(_mongod_hack_get_arg_val --config "$@")"; then
+ # if --config is specified, parse it into a JSON file so we can remove a few problematic keys (especially SSL-related keys)
+ # see https://docs.mongodb.com/manual/reference/configuration-options/
+ mongosh --norc --nodb --quiet --eval "load('/js-yaml.js'); printjson(jsyaml.load(cat($(_js_escape "$configPath"))))" > "$jsonConfigFile"
+ jq 'del(.systemLog, .processManagement, .net, .security)' "$jsonConfigFile" > "$tempConfigFile"
+ return 0
+ fi
+
+ return 1
+}
+dbPath=
+_dbPath() {
+ if [ -n "$dbPath" ]; then
+ echo "$dbPath"
+ return
+ fi
+
+ if ! dbPath="$(_mongod_hack_get_arg_val --dbpath "$@")"; then
+ if _parse_config "$@"; then
+ dbPath="$(jq -r '.storage.dbPath // empty' "$jsonConfigFile")"
+ fi
+ fi
+
+ : "${dbPath:=/data/db}"
+
+ echo "$dbPath"
+}
+
+if [ "$originalArgOne" = 'mongod' ]; then
+ file_env 'MONGO_INITDB_ROOT_USERNAME'
+ file_env 'MONGO_INITDB_ROOT_PASSWORD'
+ # pre-check a few factors to see if it's even worth bothering with initdb
+ shouldPerformInitdb=
+ if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ # if we have a username/password, let's set "--auth"
+ _mongod_hack_ensure_arg '--auth' "$@"
+ set -- "${mongodHackedArgs[@]}"
+ shouldPerformInitdb='true'
+ elif [ "$MONGO_INITDB_ROOT_USERNAME" ] || [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ cat >&2 <<-'EOF'
+
+ error: missing 'MONGO_INITDB_ROOT_USERNAME' or 'MONGO_INITDB_ROOT_PASSWORD'
+ both must be specified for a user to be created
+
+ EOF
+ exit 1
+ fi
+
+ if [ -z "$shouldPerformInitdb" ]; then
+ # if we've got any /docker-entrypoint-initdb.d/* files to parse later, we should initdb
+ for f in /docker-entrypoint-initdb.d/*; do
+ case "$f" in
+ *.sh|*.js) # this should match the set of files we check for below
+ shouldPerformInitdb="$f"
+ break
+ ;;
+ esac
+ done
+ fi
+
+ # check for a few known paths (to determine whether we've already initialized and should thus skip our initdb scripts)
+ if [ -n "$shouldPerformInitdb" ]; then
+ dbPath="$(_dbPath "$@")"
+ for path in \
+ "$dbPath/WiredTiger" \
+ "$dbPath/journal" \
+ "$dbPath/local.0" \
+ "$dbPath/storage.bson" \
+ ; do
+ if [ -e "$path" ]; then
+ shouldPerformInitdb=
+ break
+ fi
+ done
+ fi
+
+ if [ -n "$shouldPerformInitdb" ]; then
+ mongodHackedArgs=( "$@" )
+ if _parse_config "$@"; then
+ _mongod_hack_ensure_arg_val --config "$tempConfigFile" "${mongodHackedArgs[@]}"
+ fi
+ _mongod_hack_ensure_arg_val --bind_ip 127.0.0.1 "${mongodHackedArgs[@]}"
+ _mongod_hack_ensure_arg_val --port 27017 "${mongodHackedArgs[@]}"
+ _mongod_hack_ensure_no_arg --bind_ip_all "${mongodHackedArgs[@]}"
+
+ # remove "--auth" and "--replSet" for our initial startup (see https://docs.mongodb.com/manual/tutorial/enable-authentication/#start-mongodb-without-access-control)
+ # https://github.com/docker-library/mongo/issues/211
+ _mongod_hack_ensure_no_arg --auth "${mongodHackedArgs[@]}"
+ if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ _mongod_hack_ensure_no_arg_val --replSet "${mongodHackedArgs[@]}"
+ fi
+
+ # "BadValue: need sslPEMKeyFile when SSL is enabled" vs "BadValue: need to enable SSL via the sslMode flag when using SSL configuration parameters"
+ tlsMode='disabled'
+ if _mongod_hack_have_arg '--tlsCertificateKeyFile' "${mongodHackedArgs[@]}"; then
+ tlsMode='preferTLS'
+ elif _mongod_hack_have_arg '--sslPEMKeyFile' "${mongodHackedArgs[@]}"; then
+ tlsMode='preferSSL'
+ fi
+ # 4.2 switched all configuration/flag names from "SSL" to "TLS"
+ if [ "$tlsMode" = 'preferTLS' ] || mongod --help 2>&1 | grep -q -- ' --tlsMode '; then
+ _mongod_hack_ensure_arg_val --tlsMode "$tlsMode" "${mongodHackedArgs[@]}"
+ else
+ _mongod_hack_ensure_arg_val --sslMode "$tlsMode" "${mongodHackedArgs[@]}"
+ fi
+
+ if stat "/proc/$$/fd/1" > /dev/null && [ -w "/proc/$$/fd/1" ]; then
+ # https://github.com/mongodb/mongo/blob/38c0eb538d0fd390c6cb9ce9ae9894153f6e8ef5/src/mongo/db/initialize_server_global_state.cpp#L237-L251
+ # https://github.com/docker-library/mongo/issues/164#issuecomment-293965668
+ _mongod_hack_ensure_arg_val --logpath "/proc/$$/fd/1" "${mongodHackedArgs[@]}"
+ else
+ initdbLogPath="$(_dbPath "$@")/docker-initdb.log"
+ echo >&2 "warning: initdb logs cannot write to '/proc/$$/fd/1', so they are in '$initdbLogPath' instead"
+ _mongod_hack_ensure_arg_val --logpath "$initdbLogPath" "${mongodHackedArgs[@]}"
+ fi
+ _mongod_hack_ensure_arg --logappend "${mongodHackedArgs[@]}"
+
+ pidfile="${TMPDIR:-/tmp}/docker-entrypoint-temp-mongod.pid"
+ rm -f "$pidfile"
+ _mongod_hack_ensure_arg_val --pidfilepath "$pidfile" "${mongodHackedArgs[@]}"
+
+ "${mongodHackedArgs[@]}" --fork
+
+ mongo=( mongosh --host 127.0.0.1 --port 27017 --quiet )
+
+ # check to see that our "mongod" actually did start up (catches "--help", "--version", MongoDB 3.2 being silly, slow prealloc, etc)
+ # https://jira.mongodb.org/browse/SERVER-16292
+ tries=30
+ while true; do
+ if ! { [ -s "$pidfile" ] && ps "$(< "$pidfile")" &> /dev/null; }; then
+ # bail ASAP if "mongod" isn't even running
+ echo >&2
+ echo >&2 "error: $originalArgOne does not appear to have stayed running -- perhaps it had an error?"
+ echo >&2
+ exit 1
+ fi
+ if "${mongo[@]}" 'admin' --eval 'quit(0)' &> /dev/null; then
+ # success!
+ break
+ fi
+ (( tries-- ))
+ if [ "$tries" -le 0 ]; then
+ echo >&2
+ echo >&2 "error: $originalArgOne does not appear to have accepted connections quickly enough -- perhaps it had an error?"
+ echo >&2
+ exit 1
+ fi
+ sleep 1
+ done
+
+ if [ "$MONGO_INITDB_ROOT_USERNAME" ] && [ "$MONGO_INITDB_ROOT_PASSWORD" ]; then
+ rootAuthDatabase='admin'
+
+ "${mongo[@]}" "$rootAuthDatabase" <<-EOJS
+ db.createUser({
+ user: $(_js_escape "$MONGO_INITDB_ROOT_USERNAME"),
+ pwd: $(_js_escape "$MONGO_INITDB_ROOT_PASSWORD"),
+ roles: [ { role: 'root', db: $(_js_escape "$rootAuthDatabase") } ]
+ })
+ EOJS
+ fi
+
+ export MONGO_INITDB_DATABASE="${MONGO_INITDB_DATABASE:-test}"
+
+ echo
+ for f in /docker-entrypoint-initdb.d/*; do
+ case "$f" in
+ *.sh) echo "$0: running $f"; . "$f" ;;
+ *.js) echo "$0: running $f"; "${mongo[@]}" "$MONGO_INITDB_DATABASE" "$f"; echo ;;
+ *) echo "$0: ignoring $f" ;;
+ esac
+ echo
+ done
+
+ "${mongodHackedArgs[@]}" --shutdown
+ rm -f "$pidfile"
+
+ echo
+ echo 'MongoDB init process complete; ready for start up.'
+ echo
+ fi
+
+ mongodHackedArgs=("$@")
+ MONGO_SSL_DIR=${MONGO_SSL_DIR:-/etc/mongodb-ssl}
+ CA=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
+ if [ -f /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt ]; then
+ CA=/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt
+ fi
+ if [ -f "${MONGO_SSL_DIR}/ca.crt" ]; then
+ CA="${MONGO_SSL_DIR}/ca.crt"
+ fi
+ if [ -f "${MONGO_SSL_DIR}/tls.key" ] && [ -f "${MONGO_SSL_DIR}/tls.crt" ]; then
+ cat "${MONGO_SSL_DIR}/tls.key" "${MONGO_SSL_DIR}/tls.crt" >/tmp/tls.pem
+ _mongod_hack_ensure_arg_val --sslPEMKeyFile /tmp/tls.pem "${mongodHackedArgs[@]}"
+ if [ -f "${CA}" ]; then
+ _mongod_hack_ensure_arg_val --sslCAFile "${CA}" "${mongodHackedArgs[@]}"
+ fi
+ fi
+ MONGO_SSL_INTERNAL_DIR=${MONGO_SSL_INTERNAL_DIR:-/etc/mongodb-ssl-internal}
+ if [ -f "${MONGO_SSL_INTERNAL_DIR}/tls.key" ] && [ -f "${MONGO_SSL_INTERNAL_DIR}/tls.crt" ]; then
+ cat "${MONGO_SSL_INTERNAL_DIR}/tls.key" "${MONGO_SSL_INTERNAL_DIR}/tls.crt" >/tmp/tls-internal.pem
+ _mongod_hack_ensure_arg_val --sslClusterFile /tmp/tls-internal.pem "${mongodHackedArgs[@]}"
+ if [ -f "${MONGO_SSL_INTERNAL_DIR}/ca.crt" ]; then
+ _mongod_hack_ensure_arg_val --sslClusterCAFile "${MONGO_SSL_INTERNAL_DIR}/ca.crt" "${mongodHackedArgs[@]}"
+ fi
+ fi
+
+ MONGODB_VERSION=$(mongod --version | head -1 | awk '{print $3}' | awk -F'.' '{print $1"."$2}')
+ if [ "$MONGODB_VERSION" == 'v4.2' ] || [ "$MONGODB_VERSION" == 'v4.4' ] || [ "$MONGODB_VERSION" == 'v5.0' ] || [ "$MONGODB_VERSION" == 'v6.0' ] || [ "$MONGODB_VERSION" == 'v7.0' ]; then
+ _mongod_hack_rename_arg_save_val --sslMode --tlsMode "${mongodHackedArgs[@]}"
+
+ if _mongod_hack_have_arg '--tlsMode' "${mongodHackedArgs[@]}"; then
+ tlsMode="none"
+ if _mongod_hack_have_arg 'allowSSL' "${mongodHackedArgs[@]}"; then
+ tlsMode='allowTLS'
+ elif _mongod_hack_have_arg 'preferSSL' "${mongodHackedArgs[@]}"; then
+ tlsMode='preferTLS'
+ elif _mongod_hack_have_arg 'requireSSL' "${mongodHackedArgs[@]}"; then
+ tlsMode='requireTLS'
+ fi
+
+ if [ "$tlsMode" != "none" ]; then
+ _mongod_hack_ensure_no_arg_val --tlsMode "${mongodHackedArgs[@]}"
+ _mongod_hack_ensure_arg_val --tlsMode "$tlsMode" "${mongodHackedArgs[@]}"
+ fi
+ fi
+
+ _mongod_hack_rename_arg_save_val --sslPEMKeyFile --tlsCertificateKeyFile "${mongodHackedArgs[@]}"
+ if ! _mongod_hack_have_arg '--tlsMode' "${mongodHackedArgs[@]}"; then
+ if _mongod_hack_have_arg '--tlsCertificateKeyFile' "${mongodHackedArgs[@]}"; then
+ _mongod_hack_ensure_arg_val --tlsMode "preferTLS" "${mongodHackedArgs[@]}"
+ fi
+ fi
+ _mongod_hack_rename_arg '--sslAllowInvalidCertificates' '--tlsAllowInvalidCertificates' "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg '--sslAllowInvalidHostnames' '--tlsAllowInvalidHostnames' "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg '--sslAllowConnectionsWithoutCertificates' '--tlsAllowConnectionsWithoutCertificates' "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg '--sslFIPSMode' '--tlsFIPSMode' "${mongodHackedArgs[@]}"
+
+
+ _mongod_hack_rename_arg_save_val --sslPEMKeyPassword --tlsCertificateKeyFilePassword "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterFile --tlsClusterFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslCertificateSelector --tlsCertificateSelector "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterCertificateSelector --tlsClusterCertificateSelector "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterPassword --tlsClusterPassword "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslCAFile --tlsCAFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslClusterCAFile --tlsClusterCAFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslCRLFile --tlsCRLFile "${mongodHackedArgs[@]}"
+ _mongod_hack_rename_arg_save_val --sslDisabledProtocols --tlsDisabledProtocols "${mongodHackedArgs[@]}"
+ fi
+
+ set -- "${mongodHackedArgs[@]}"
+
+ # MongoDB 3.6+ defaults to localhost-only binding
+ haveBindIp=
+ if _mongod_hack_have_arg --bind_ip "$@" || _mongod_hack_have_arg --bind_ip_all "$@"; then
+ haveBindIp=1
+ elif _parse_config "$@" && jq --exit-status '.net.bindIp // .net.bindIpAll' "$jsonConfigFile" > /dev/null; then
+ haveBindIp=1
+ fi
+ if [ -z "$haveBindIp" ]; then
+ # so if no "--bind_ip" is specified, let's add "--bind_ip_all"
+ set -- "$@" --bind_ip_all
+ fi
+
+ unset "${!MONGO_INITDB_@}"
+fi
+
+rm -f "$jsonConfigFile" "$tempConfigFile"
+
+set -o xtrace +u
+
+# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
+if [ ! -z "${PERCONA_INSTANCE_ID}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -i ${PERCONA_INSTANCE_ID}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_CONFIG_FILE_PATH}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -j ${PERCONA_TELEMETRY_CONFIG_FILE_PATH}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_URL}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -u ${PERCONA_TELEMETRY_URL}"
+fi
+
+if [ ! -z "${PERCONA_SEND_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -t ${PERCONA_SEND_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -t 7"
+fi
+
+if [ ! -z "${PERCONA_CONNECT_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -c ${PERCONA_CONNECT_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
+fi
+
+/call-home.sh -f "PRODUCT_FAMILY_PSMDB" -v "${PSMDB_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :
+
+exec "$@"Relevant Maintainers:
|
@yosifkit We have made changes to the entrypoint script to not include the sed command. Could you please check now? Thank you. |
Diff:diff --git a/_bashbrew-cat b/_bashbrew-cat
dissimilarity index 61%
index 35d4c8b..a375d73 100644
--- a/_bashbrew-cat
+++ b/_bashbrew-cat
@@ -?,? +1,23 @@
+Maintainers: Evgeniy Patlan <evgeniy.patlan@percona.com> (@EvgeniyPatlan), Viacheslav Sarzhan <slava.sarzhan@percona.com> (@hors), Oleksandr Miroshnychenko <alex.miroshnychenko@percona.com> (@vorsel), Vadim Yalovets <vadim.yalovets@percona.com> (@adivinho), Surabhi Bhat <surabhi.bhat@percona.com> (@surbhat1595)
+GitRepo: https://github.com/percona/percona-docker.git
+GitFetch: refs/heads/main
+
+Tags: 8.0.39-30-centos, 8.0-centos, 8-centos, 8.0.39-30, 8.0, 8, ps-8.0.39-30, ps-8.0, ps-8
+GitCommit: 5640bc536e5ce7d1559fc4f28868fda941bbaf1d
+Directory: percona-server-8.0
+File: Dockerfile-dockerhub
+
+Tags: psmdb-5.0.29, psmdb-5.0
+GitCommit: 5640bc536e5ce7d1559fc4f28868fda941bbaf1d
+Directory: percona-server-mongodb-5.0
+File: Dockerfile-dockerhub
+
+Tags: psmdb-6.0.19, psmdb-6.0
+GitCommit: 5640bc536e5ce7d1559fc4f28868fda941bbaf1d
+Directory: percona-server-mongodb-6.0
+File: Dockerfile-dockerhub
+
+Tags: psmdb-7.0.15, psmdb-7.0
+GitCommit: 5640bc536e5ce7d1559fc4f28868fda941bbaf1d
+Directory: percona-server-mongodb-7.0
+File: Dockerfile-dockerhub
diff --git a/_bashbrew-list b/_bashbrew-list
dissimilarity index 78%
index b19b65a..6727a23 100644
--- a/_bashbrew-list
+++ b/_bashbrew-list
@@ -?,? +1,15 @@
+percona:8
+percona:8-centos
+percona:8.0
+percona:8.0-centos
+percona:8.0.39-30
+percona:8.0.39-30-centos
+percona:psmdb-5.0
+percona:psmdb-5.0.29
+percona:psmdb-6.0
+percona:psmdb-6.0.19
+percona:psmdb-7.0
+percona:psmdb-7.0.15
+percona:ps-8
+percona:ps-8.0
+percona:ps-8.0.39-30
diff --git a/_bashbrew-list-build-order b/_bashbrew-list-build-order
index 0178e3c..f314b1b 100644
--- a/_bashbrew-list-build-order
+++ b/_bashbrew-list-build-order
@@ -1,7 +1,4 @@
-percona:psmdb-4.2
-percona:psmdb-4.4
percona:psmdb-5.0
percona:psmdb-6.0
-percona:ps-5
-percona:ps-5.6
+percona:psmdb-7.0
percona:ps-8
diff --git a/percona_5.6/Dockerfile-dockerhub b/percona_5.6/Dockerfile-dockerhub
deleted file mode 100644
index 3e5d9cd..0000000
diff --git a/percona_5.6/ps-entry.sh b/percona_5.6/ps-entry.sh
deleted file mode 100755
index cbe018c..0000000
diff --git a/percona_5/Dockerfile-dockerhub b/percona_5/Dockerfile-dockerhub
deleted file mode 100644
index cee20fe..0000000
diff --git a/percona_5/ps-entry.sh b/percona_5/ps-entry.sh
deleted file mode 100755
index e6f0908..0000000
diff --git a/percona_8/Dockerfile b/percona_8/Dockerfile-dockerhub
similarity index 86%
rename from percona_8/Dockerfile
rename to percona_8/Dockerfile-dockerhub
index 3ccf519..a335ebe 100644
--- a/percona_8/Dockerfile
+++ b/percona_8/Dockerfile-dockerhub
@@ -16,16 +16,15 @@ RUN set -ex; \
useradd -u 1001 -r -g 1001 -s /sbin/nologin \
-m -c "Default Application User" mysql
-ENV PS_VERSION 8.0.36-28.1
-ENV MYSQL_SHELL_VERSION 8.0.36-1
+ENV PS_VERSION 8.0.39-30.1
+ENV MYSQL_SHELL_VERSION 8.0.38-1
ENV OS_VER el9
ENV FULL_PERCONA_VERSION "$PS_VERSION.$OS_VER"
ENV FULL_MYSQL_SHELL_VERSION "$MYSQL_SHELL_VERSION.$OS_VER"
-ENV PS_REPO release
-ENV PS_TELEMETRY_VERSION 8.0.36-28-1
+ENV PS_REPO testing
+ENV PS_TELEMETRY_VERSION 8.0.39-30-1
ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
ENV CALL_HOME_VERSION 0.1
-
# Do not report during Docker image creation.
# Note that doing so, would create telemetry config file
# which would prevent reporting when new container is started.
@@ -36,10 +35,10 @@ ARG PERCONA_TELEMETRY_DISABLE=1
# check repository package signature in secure way
RUN set -ex; \
export GNUPGHOME="$(mktemp -d)"; \
- gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A 99DB70FAE1D7CE227FB6488205B555B38483C65D; \
- gpg --batch --export --armor 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A > ${GNUPGHOME}/RPM-GPG-KEY-Percona; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
- rpmkeys --import ${GNUPGHOME}/RPM-GPG-KEY-Percona ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
rpmkeys --checksig /tmp/percona-release.rpm; \
rpm -i /tmp/percona-release.rpm; \
@@ -64,6 +63,10 @@ RUN set -ex; \
curl \
glibc \
libnghttp2 \
+ openssh \
+ python3-setuptools-wheel \
+ krb5-libs \
+ pam \
python3; \
\
dnf -y install \
@@ -85,7 +88,7 @@ RUN set -ex; \
| xargs -rt -0 sed -Ei 's/^(bind-address|log|user)/#&/'; \
# don't reverse lookup hostnames, they are usually another container
echo '!includedir /etc/my.cnf.d' >> /etc/my.cnf; \
- printf '[mysqld]\nskip-host-cache\nskip-name-resolve\n' > /etc/my.cnf.d/docker.cnf; \
+ printf '[mysqld]\nhost_cache_size=0\nskip-name-resolve\n' > /etc/my.cnf.d/docker.cnf; \
# TokuDB modifications
/usr/bin/install -m 0664 -o mysql -g root /dev/null /etc/sysconfig/mysql; \
echo "LD_PRELOAD=/usr/lib64/libjemalloc.so.1" >> /etc/sysconfig/mysql; \
@@ -107,7 +110,7 @@ RUN set -eux; \
chown mysql:mysql /usr/local/percona
ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
-COPY ps-entry.sh /docker-entrypoint.sh
+COPY ps-entry-dockerhub.sh /docker-entrypoint.sh
ENTRYPOINT ["/docker-entrypoint.sh"]
USER mysql
diff --git a/percona_8/ps-entry.sh b/percona_8/ps-entry-dockerhub.sh
similarity index 98%
rename from percona_8/ps-entry.sh
rename to percona_8/ps-entry-dockerhub.sh
index 8b92cf5..9f08ef1 100755
--- a/percona_8/ps-entry.sh
+++ b/percona_8/ps-entry-dockerhub.sh
@@ -248,7 +245,6 @@ else
CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
fi
-# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
/call-home.sh -f "PRODUCT_FAMILY_PS" -v "${PS_TELEMETRY_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :
exec "$@"
diff --git a/percona_psmdb-4.2/Dockerfile b/percona_psmdb-4.2/Dockerfile
deleted file mode 100644
index b16bb25..0000000
diff --git a/percona_psmdb-4.2/ps-entry.sh b/percona_psmdb-4.2/ps-entry.sh
deleted file mode 100755
index a3ec16d..0000000
diff --git a/percona_psmdb-4.4/LICENSE b/percona_psmdb-4.4/LICENSE
deleted file mode 100644
index b5a2afb..0000000
diff --git a/percona_psmdb-5.0/Dockerfile b/percona_psmdb-5.0/Dockerfile-dockerhub
similarity index 69%
rename from percona_psmdb-5.0/Dockerfile
rename to percona_psmdb-5.0/Dockerfile-dockerhub
index 6163002..a22c0fb 100644
--- a/percona_psmdb-5.0/Dockerfile
+++ b/percona_psmdb-5.0/Dockerfile-dockerhub
@@ -1,3 +1,4 @@
+# This Dockerfile should be used for docker official repo
FROM oraclelinux:8
LABEL org.opencontainers.image.authors="info@percona.com"
@@ -5,30 +6,39 @@ LABEL org.opencontainers.image.authors="info@percona.com"
# check repository package signature in secure way
RUN set -ex; \
export GNUPGHOME="$(mktemp -d)"; \
- gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
- gpg --batch --export --armor 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A > ${GNUPGHOME}/RPM-GPG-KEY-Percona; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
gpg --batch --export --armor 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1 > ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
- rpmkeys --import ${GNUPGHOME}/RPM-GPG-KEY-Percona ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
rpmkeys --checksig /tmp/percona-release.rpm; \
rpm -i /tmp/percona-release.rpm; \
rm -rf "$GNUPGHOME" /tmp/percona-release.rpm; \
rpm --import /etc/pki/rpm-gpg/PERCONA-PACKAGING-KEY
-ENV PSMDB_VERSION 5.0.18-15
+ENV PSMDB_VERSION 5.0.29-25
ENV OS_VER el8
ENV FULL_PERCONA_VERSION "$PSMDB_VERSION.$OS_VER"
ENV K8S_TOOLS_VERSION "0.5.0"
ENV PSMDB_REPO release
+ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
+ENV CALL_HOME_VERSION 0.1
+
+# Do not report during Docker image creation.
+ARG PERCONA_TELEMETRY_DISABLE=1
RUN set -ex; \
percona-release enable psmdb-50 ${PSMDB_REPO}; \
dnf config-manager --enable ol8_u4_security_validation; \
+ dnf -y update bind-export-libs; \
+ dnf -y update glibc; \
+ dnf -y update libgcrypt; \
dnf -y install \
percona-server-mongodb-mongos-${FULL_PERCONA_VERSION} \
percona-server-mongodb-shell-${FULL_PERCONA_VERSION} \
percona-server-mongodb-tools-${FULL_PERCONA_VERSION} \
+ numactl \
procps-ng \
jq \
tar \
@@ -66,24 +76,24 @@ RUN set -eux; \
chmod +x /usr/bin/gosu; \
curl -f -o /licenses/LICENSE.gosu https://raw.githubusercontent.com/tianon/gosu/${GOSU_VERSION}/LICENSE
-RUN set -ex; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/k8s-mongodb-initiator -o /usr/local/bin/k8s-mongodb-initiator; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/mongodb-healthcheck -o /usr/local/bin/mongodb-healthcheck; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/SHA256SUMS -o /tmp/SHA256SUMS; \
- echo "$(grep 'k8s-mongodb-initiator' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/k8s-mongodb-initiator | sha256sum -c -; \
- echo "$(grep 'mongodb-healthcheck' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/mongodb-healthcheck | sha256sum -c -; \
- rm -f /tmp/SHA256SUMS; \
- \
- chmod 0755 /usr/local/bin/k8s-mongodb-initiator /usr/local/bin/mongodb-healthcheck
-
VOLUME ["/data/db"]
RUN set -ex; \
curl -fSL https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js -o /js-yaml.js; \
echo "45dc3dd03dc07a06705a2c2989b8c7f709013f04bd5386e3279d4e447f07ebd7 /js-yaml.js" | sha256sum -c -
-COPY ps-entry.sh /entrypoint.sh
+RUN set -eux; \
+ curl -fL "https://github.com/percona/telemetry-agent/archive/refs/tags/phase-$CALL_HOME_VERSION.tar.gz" -o "phase-$CALL_HOME_VERSION.tar.gz"; \
+ echo "$CALL_HOME_DOWNLOAD_SHA256 phase-$CALL_HOME_VERSION.tar.gz" | sha256sum --strict --check; \
+ tar -xvf phase-$CALL_HOME_VERSION.tar.gz; \
+ cp telemetry-agent-phase-$CALL_HOME_VERSION/call-home.sh .;\
+ rm -rf telemetry-agent-phase-$CALL_HOME_VERSION phase-$CALL_HOME_VERSION.tar.gz; \
+ chmod a+rx /call-home.sh; \
+ mkdir -p /usr/local/percona; \
+ chown 1001:1001 /usr/local/percona
+ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
+COPY ps-entry-dockerhub.sh /entrypoint.sh
ENTRYPOINT ["/entrypoint.sh"]
EXPOSE 27017
diff --git a/percona_psmdb-5.0/ps-entry.sh b/percona_psmdb-5.0/ps-entry-dockerhub.sh
similarity index 94%
rename from percona_psmdb-5.0/ps-entry.sh
rename to percona_psmdb-5.0/ps-entry-dockerhub.sh
index 9ffcecc..9262485 100755
--- a/percona_psmdb-5.0/ps-entry.sh
+++ b/percona_psmdb-5.0/ps-entry-dockerhub.sh
@@ -460,5 +460,33 @@ fi
rm -f "$jsonConfigFile" "$tempConfigFile"
-set -o xtrace
+set -o xtrace +u
+
+# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
+if [ ! -z "${PERCONA_INSTANCE_ID}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -i ${PERCONA_INSTANCE_ID}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_CONFIG_FILE_PATH}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -j ${PERCONA_TELEMETRY_CONFIG_FILE_PATH}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_URL}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -u ${PERCONA_TELEMETRY_URL}"
+fi
+
+if [ ! -z "${PERCONA_SEND_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -t ${PERCONA_SEND_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -t 7"
+fi
+
+if [ ! -z "${PERCONA_CONNECT_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -c ${PERCONA_CONNECT_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
+fi
+
+/call-home.sh -f "PRODUCT_FAMILY_PSMDB" -v "${PSMDB_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :
+
exec "$@"
diff --git a/percona_psmdb-6.0/Dockerfile b/percona_psmdb-6.0/Dockerfile-dockerhub
similarity index 68%
rename from percona_psmdb-6.0/Dockerfile
rename to percona_psmdb-6.0/Dockerfile-dockerhub
index c207655..3ccda30 100644
--- a/percona_psmdb-6.0/Dockerfile
+++ b/percona_psmdb-6.0/Dockerfile-dockerhub
@@ -1,3 +1,4 @@
+# This Dockerfile should be used for docker official repo
FROM oraclelinux:8
LABEL org.opencontainers.image.authors="info@percona.com"
@@ -5,30 +6,40 @@ LABEL org.opencontainers.image.authors="info@percona.com"
# check repository package signature in secure way
RUN set -ex; \
export GNUPGHOME="$(mktemp -d)"; \
- gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
- gpg --batch --export --armor 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A > ${GNUPGHOME}/RPM-GPG-KEY-Percona; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
gpg --batch --export --armor 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1 > ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
- rpmkeys --import ${GNUPGHOME}/RPM-GPG-KEY-Percona ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
rpmkeys --checksig /tmp/percona-release.rpm; \
rpm -i /tmp/percona-release.rpm; \
rm -rf "$GNUPGHOME" /tmp/percona-release.rpm; \
rpm --import /etc/pki/rpm-gpg/PERCONA-PACKAGING-KEY
-ENV PSMDB_VERSION 6.0.6-5
+ENV PSMDB_VERSION 6.0.19-16
ENV OS_VER el8
ENV FULL_PERCONA_VERSION "$PSMDB_VERSION.$OS_VER"
ENV K8S_TOOLS_VERSION "0.5.0"
ENV PSMDB_REPO release
+ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
+ENV CALL_HOME_VERSION 0.1
+
+# Do not report during Docker image creation.
+ARG PERCONA_TELEMETRY_DISABLE=1
RUN set -ex; \
percona-release enable psmdb-60 ${PSMDB_REPO}; \
dnf config-manager --enable ol8_u4_security_validation; \
+ dnf -y update openssh; \
+ dnf -y update bind-export-libs; \
+ dnf -y update glibc; \
+ dnf -y update libgcrypt; \
dnf -y install \
percona-server-mongodb-mongos-${FULL_PERCONA_VERSION} \
percona-server-mongodb-tools-${FULL_PERCONA_VERSION} \
percona-mongodb-mongosh \
+ numactl \
procps-ng \
jq \
tar \
@@ -66,24 +77,24 @@ RUN set -eux; \
chmod +x /usr/bin/gosu; \
curl -f -o /licenses/LICENSE.gosu https://raw.githubusercontent.com/tianon/gosu/${GOSU_VERSION}/LICENSE
-RUN set -ex; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/k8s-mongodb-initiator -o /usr/local/bin/k8s-mongodb-initiator; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/mongodb-healthcheck -o /usr/local/bin/mongodb-healthcheck; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/SHA256SUMS -o /tmp/SHA256SUMS; \
- echo "$(grep 'k8s-mongodb-initiator' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/k8s-mongodb-initiator | sha256sum -c -; \
- echo "$(grep 'mongodb-healthcheck' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/mongodb-healthcheck | sha256sum -c -; \
- rm -f /tmp/SHA256SUMS; \
- \
- chmod 0755 /usr/local/bin/k8s-mongodb-initiator /usr/local/bin/mongodb-healthcheck
-
VOLUME ["/data/db"]
RUN set -ex; \
curl -fSL https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js -o /js-yaml.js; \
echo "45dc3dd03dc07a06705a2c2989b8c7f709013f04bd5386e3279d4e447f07ebd7 /js-yaml.js" | sha256sum -c -
-COPY ps-entry.sh /entrypoint.sh
+RUN set -eux; \
+ curl -fL "https://github.com/percona/telemetry-agent/archive/refs/tags/phase-$CALL_HOME_VERSION.tar.gz" -o "phase-$CALL_HOME_VERSION.tar.gz"; \
+ echo "$CALL_HOME_DOWNLOAD_SHA256 phase-$CALL_HOME_VERSION.tar.gz" | sha256sum --strict --check; \
+ tar -xvf phase-$CALL_HOME_VERSION.tar.gz; \
+ cp telemetry-agent-phase-$CALL_HOME_VERSION/call-home.sh .;\
+ rm -rf telemetry-agent-phase-$CALL_HOME_VERSION phase-$CALL_HOME_VERSION.tar.gz; \
+ chmod a+rx /call-home.sh; \
+ mkdir -p /usr/local/percona; \
+ chown 1001:1001 /usr/local/percona
+ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
+COPY ps-entry-dockerhub.sh /entrypoint.sh
ENTRYPOINT ["/entrypoint.sh"]
EXPOSE 27017
diff --git a/percona_psmdb-6.0/ps-entry.sh b/percona_psmdb-6.0/ps-entry-dockerhub.sh
similarity index 94%
rename from percona_psmdb-6.0/ps-entry.sh
rename to percona_psmdb-6.0/ps-entry-dockerhub.sh
index 3df658a..abe1918 100755
--- a/percona_psmdb-6.0/ps-entry.sh
+++ b/percona_psmdb-6.0/ps-entry-dockerhub.sh
@@ -460,5 +460,33 @@ fi
rm -f "$jsonConfigFile" "$tempConfigFile"
-set -o xtrace
+set -o xtrace +u
+
+# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
+if [ ! -z "${PERCONA_INSTANCE_ID}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -i ${PERCONA_INSTANCE_ID}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_CONFIG_FILE_PATH}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -j ${PERCONA_TELEMETRY_CONFIG_FILE_PATH}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_URL}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -u ${PERCONA_TELEMETRY_URL}"
+fi
+
+if [ ! -z "${PERCONA_SEND_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -t ${PERCONA_SEND_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -t 7"
+fi
+
+if [ ! -z "${PERCONA_CONNECT_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -c ${PERCONA_CONNECT_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
+fi
+
+/call-home.sh -f "PRODUCT_FAMILY_PSMDB" -v "${PSMDB_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :
+
exec "$@"
diff --git a/percona_psmdb-4.4/Dockerfile b/percona_psmdb-7.0/Dockerfile-dockerhub
similarity index 65%
rename from percona_psmdb-4.4/Dockerfile
rename to percona_psmdb-7.0/Dockerfile-dockerhub
index fc72b94..e624558 100644
--- a/percona_psmdb-4.4/Dockerfile
+++ b/percona_psmdb-7.0/Dockerfile-dockerhub
@@ -1,3 +1,4 @@
+# This Dockerfile should be used for docker official repo
FROM oraclelinux:8
LABEL org.opencontainers.image.authors="info@percona.com"
@@ -5,30 +6,40 @@ LABEL org.opencontainers.image.authors="info@percona.com"
# check repository package signature in secure way
RUN set -ex; \
export GNUPGHOME="$(mktemp -d)"; \
- gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
- gpg --batch --export --armor 430BDF5C56E7C94E848EE60C1C4CBDCDCD2EFD2A > ${GNUPGHOME}/RPM-GPG-KEY-Percona; \
+ gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 4D1BB29D63D98E422B2113B19334A25F8507EFA5 99DB70FAE1D7CE227FB6488205B555B38483C65D 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1; \
+ gpg --batch --export --armor 4D1BB29D63D98E422B2113B19334A25F8507EFA5 > ${GNUPGHOME}/PERCONA-PACKAGING-KEY; \
gpg --batch --export --armor 99DB70FAE1D7CE227FB6488205B555B38483C65D > ${GNUPGHOME}/RPM-GPG-KEY-centosofficial; \
gpg --batch --export --armor 94E279EB8D8F25B21810ADF121EA45AB2F86D6A1 > ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
- rpmkeys --import ${GNUPGHOME}/RPM-GPG-KEY-Percona ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
+ rpmkeys --import ${GNUPGHOME}/PERCONA-PACKAGING-KEY ${GNUPGHOME}/RPM-GPG-KEY-centosofficial ${GNUPGHOME}/RPM-GPG-KEY-EPEL-8; \
curl -Lf -o /tmp/percona-release.rpm https://repo.percona.com/yum/percona-release-latest.noarch.rpm; \
rpmkeys --checksig /tmp/percona-release.rpm; \
rpm -i /tmp/percona-release.rpm; \
rm -rf "$GNUPGHOME" /tmp/percona-release.rpm; \
rpm --import /etc/pki/rpm-gpg/PERCONA-PACKAGING-KEY
-ENV PSMDB_VERSION 4.4.22-21
+ENV PSMDB_VERSION 7.0.15-9
ENV OS_VER el8
ENV FULL_PERCONA_VERSION "$PSMDB_VERSION.$OS_VER"
ENV K8S_TOOLS_VERSION "0.5.0"
ENV PSMDB_REPO release
+ENV CALL_HOME_DOWNLOAD_SHA256 5e84d2f1a5d57f44c46e6a1f16794d649d3de09fe8021f0294bc321c89e51068
+ENV CALL_HOME_VERSION 0.1
+
+# Do not report during Docker image creation.
+ARG PERCONA_TELEMETRY_DISABLE=1
RUN set -ex; \
- percona-release enable psmdb-44 ${PSMDB_REPO}; \
+ percona-release enable psmdb-70 ${PSMDB_REPO}; \
dnf config-manager --enable ol8_u4_security_validation; \
+ dnf -y update openssh; \
+ dnf -y update bind-export-libs; \
+ dnf -y update glibc; \
+ dnf -y update libgcrypt; \
dnf -y install \
percona-server-mongodb-mongos-${FULL_PERCONA_VERSION} \
- percona-server-mongodb-shell-${FULL_PERCONA_VERSION} \
percona-server-mongodb-tools-${FULL_PERCONA_VERSION} \
+ percona-mongodb-mongosh \
+ numactl \
procps-ng \
jq \
tar \
@@ -36,7 +47,7 @@ RUN set -ex; \
cyrus-sasl-gssapi \
policycoreutils; \
\
- curl -Lf -o /tmp/Percona-Server-MongoDB-server.rpm http://repo.percona.com/psmdb-44/yum/${PSMDB_REPO}/8/RPMS/x86_64/percona-server-mongodb-server-${FULL_PERCONA_VERSION}.x86_64.rpm; \
+ curl -Lf -o /tmp/Percona-Server-MongoDB-server.rpm http://repo.percona.com/psmdb-70/yum/${PSMDB_REPO}/8/RPMS/x86_64/percona-server-mongodb-server-${FULL_PERCONA_VERSION}.x86_64.rpm; \
rpmkeys --checksig /tmp/Percona-Server-MongoDB-server.rpm; \
rpm -iv /tmp/Percona-Server-MongoDB-server.rpm --nodeps; \
rm -rf /tmp/Percona-Server-MongoDB-server.rpm; \
@@ -66,24 +77,24 @@ RUN set -eux; \
chmod +x /usr/bin/gosu; \
curl -f -o /licenses/LICENSE.gosu https://raw.githubusercontent.com/tianon/gosu/${GOSU_VERSION}/LICENSE
-RUN set -ex; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/k8s-mongodb-initiator -o /usr/local/bin/k8s-mongodb-initiator; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/mongodb-healthcheck -o /usr/local/bin/mongodb-healthcheck; \
- curl -fSL https://github.com/percona/mongodb-orchestration-tools/releases/download/${K8S_TOOLS_VERSION}/SHA256SUMS -o /tmp/SHA256SUMS; \
- echo "$(grep 'k8s-mongodb-initiator' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/k8s-mongodb-initiator | sha256sum -c -; \
- echo "$(grep 'mongodb-healthcheck' /tmp/SHA256SUMS | awk '{print $1}')" /usr/local/bin/mongodb-healthcheck | sha256sum -c -; \
- rm -f /tmp/SHA256SUMS; \
- \
- chmod 0755 /usr/local/bin/k8s-mongodb-initiator /usr/local/bin/mongodb-healthcheck
-
VOLUME ["/data/db"]
RUN set -ex; \
curl -fSL https://cdnjs.cloudflare.com/ajax/libs/js-yaml/4.1.0/js-yaml.min.js -o /js-yaml.js; \
echo "45dc3dd03dc07a06705a2c2989b8c7f709013f04bd5386e3279d4e447f07ebd7 /js-yaml.js" | sha256sum -c -
-COPY ps-entry.sh /entrypoint.sh
+RUN set -eux; \
+ curl -fL "https://github.com/percona/telemetry-agent/archive/refs/tags/phase-$CALL_HOME_VERSION.tar.gz" -o "phase-$CALL_HOME_VERSION.tar.gz"; \
+ echo "$CALL_HOME_DOWNLOAD_SHA256 phase-$CALL_HOME_VERSION.tar.gz" | sha256sum --strict --check; \
+ tar -xvf phase-$CALL_HOME_VERSION.tar.gz; \
+ cp telemetry-agent-phase-$CALL_HOME_VERSION/call-home.sh .;\
+ rm -rf telemetry-agent-phase-$CALL_HOME_VERSION phase-$CALL_HOME_VERSION.tar.gz; \
+ chmod a+rx /call-home.sh; \
+ mkdir -p /usr/local/percona; \
+ chown 1001:1001 /usr/local/percona
+ENV CALL_HOME_OPTIONAL_PARAMS=" -s ${OS_VER}"
+COPY ps-entry-dockerhub.sh /entrypoint.sh
ENTRYPOINT ["/entrypoint.sh"]
EXPOSE 27017
diff --git a/percona_psmdb-4.2/LICENSE b/percona_psmdb-7.0/LICENSE
similarity index 100%
rename from percona_psmdb-4.2/LICENSE
rename to percona_psmdb-7.0/LICENSE
diff --git a/percona_psmdb-4.4/ps-entry.sh b/percona_psmdb-7.0/ps-entry-dockerhub.sh
similarity index 92%
rename from percona_psmdb-4.4/ps-entry.sh
rename to percona_psmdb-7.0/ps-entry-dockerhub.sh
index 5963dfa..a9507ad 100755
--- a/percona_psmdb-4.4/ps-entry.sh
+++ b/percona_psmdb-7.0/ps-entry-dockerhub.sh
@@ -194,7 +194,7 @@ _parse_config() {
if configPath="$(_mongod_hack_get_arg_val --config "$@")"; then
# if --config is specified, parse it into a JSON file so we can remove a few problematic keys (especially SSL-related keys)
# see https://docs.mongodb.com/manual/reference/configuration-options/
- mongo --norc --nodb --quiet --eval "load('/js-yaml.js'); printjson(jsyaml.load(cat($(_js_escape "$configPath"))))" > "$jsonConfigFile"
+ mongosh --norc --nodb --quiet --eval "load('/js-yaml.js'); printjson(jsyaml.load(cat($(_js_escape "$configPath"))))" > "$jsonConfigFile"
jq 'del(.systemLog, .processManagement, .net, .security)' "$jsonConfigFile" > "$tempConfigFile"
return 0
fi
@@ -314,7 +314,7 @@ if [ "$originalArgOne" = 'mongod' ]; then
"${mongodHackedArgs[@]}" --fork
- mongo=( mongo --host 127.0.0.1 --port 27017 --quiet )
+ mongo=( mongosh --host 127.0.0.1 --port 27017 --quiet )
# check to see that our "mongod" actually did start up (catches "--help", "--version", MongoDB 3.2 being silly, slow prealloc, etc)
# https://jira.mongodb.org/browse/SERVER-16292
@@ -399,7 +399,7 @@ if [ "$originalArgOne" = 'mongod' ]; then
fi
MONGODB_VERSION=$(mongod --version | head -1 | awk '{print $3}' | awk -F'.' '{print $1"."$2}')
- if [ "$MONGODB_VERSION" == 'v4.2' ] || [ "$MONGODB_VERSION" == 'v4.4' ]; then
+ if [ "$MONGODB_VERSION" == 'v4.2' ] || [ "$MONGODB_VERSION" == 'v4.4' ] || [ "$MONGODB_VERSION" == 'v5.0' ] || [ "$MONGODB_VERSION" == 'v6.0' ] || [ "$MONGODB_VERSION" == 'v7.0' ]; then
_mongod_hack_rename_arg_save_val --sslMode --tlsMode "${mongodHackedArgs[@]}"
if _mongod_hack_have_arg '--tlsMode' "${mongodHackedArgs[@]}"; then
@@ -460,5 +460,33 @@ fi
rm -f "$jsonConfigFile" "$tempConfigFile"
-set -o xtrace
+set -o xtrace +u
+
+# PERCONA_TELEMETRY_DISABLE is handled at the very beginning of call-home.sh
+if [ ! -z "${PERCONA_INSTANCE_ID}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -i ${PERCONA_INSTANCE_ID}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_CONFIG_FILE_PATH}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -j ${PERCONA_TELEMETRY_CONFIG_FILE_PATH}"
+fi
+
+if [ ! -z "${PERCONA_TELEMETRY_URL}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -u ${PERCONA_TELEMETRY_URL}"
+fi
+
+if [ ! -z "${PERCONA_SEND_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -t ${PERCONA_SEND_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -t 7"
+fi
+
+if [ ! -z "${PERCONA_CONNECT_TIMEOUT}" ]; then
+ CALL_HOME_OPTIONAL_PARAMS+=" -c ${PERCONA_CONNECT_TIMEOUT}"
+else
+ CALL_HOME_OPTIONAL_PARAMS+=" -c 2"
+fi
+
+/call-home.sh -f "PRODUCT_FAMILY_PSMDB" -v "${PSMDB_VERSION}" -d "DOCKER" ${CALL_HOME_OPTIONAL_PARAMS} &> /dev/null || :
+
exec "$@" |
|
I'm still not a fan of the telemetry behavior, but I can live with it (and it's pre-existing in other images). I don't plan to block the merge on this (I'm just waiting for CI), but can you elaborate on the addition of |
tianon
approved these changes
Dec 20, 2024
(to make sure the question doesn't get lost in the merge) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
…tags