# SPDX-License-Identifier: MulanPSL-2.0+
# Copyright (c) 2020 Huawei Technologies Co., Ltd. All rights reserved.

ARG BASE_IMAGE

FROM openeuler/openeuler:22.03
MAINTAINER Wu Zhende <wuzhende666@163.com>

ARG MEMORY
ARG USER
ARG PASSWORD

RUN yum -y update && \
    yum -y install tar gzip

RUN curl -o elasticsearch-7.11.1-linux-x86_64.tar.gz https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.11.1-linux-aarch64.tar.gz && \
    tar -xzvf elasticsearch-7.11.1-linux-x86_64.tar.gz -C /usr/share && \
    rm -f elasticsearch-7.11.1-linux-x86_64.tar.gz && \
    mv /usr/share/elasticsearch-7.11.1 /usr/share/elasticsearch && \
    chmod -R a+xr /usr/share/elasticsearch/

RUN yum -y install shadow
RUN groupadd -r -g 1090 es && useradd -r -u 1090 -g es es

RUN mkdir /usr/share/elasticsearch/tmp && \
    chown -R es:es /usr/share/elasticsearch

COPY elasticsearch.yml /usr/share/elasticsearch/config/

# RUN mkdir -p /usr/share/elasticsearch/certs/
# COPY elastic-certificates.p12 /usr/share/elasticsearch/config/certs/
# COPY elastic-stack-ca.p12 /usr/share/elasticsearch/config/certs/
# RUN chmod -R 600 /usr/share/elasticsearch/config/certs && \
#    chown -R es:es /usr/share/elasticsearch/config/

RUN echo "-Xms${MEMORY}m" >> /usr/share/elasticsearch/config/jvm.options && \
    echo "-Xmx${MEMORY}m" >> /usr/share/elasticsearch/config/jvm.options

WORKDIR /usr/share/elasticsearch

RUN ./bin/elasticsearch-users useradd ${USER} -p ${PASSWORD} -r superuser

ENV PATH /usr/share/elasticsearch/bin:$PATH
ENV ES_TMPDIR /usr/share/elasticsearch/tmp

EXPOSE 9202 9302

USER es

CMD ["sh", "-c", "mkdir -p /tmp/logging-es/config && cp -rf /usr/share/elasticsearch/config/* /tmp/logging-es/config/ && elasticsearch"]
