Phase V - Docker images

[AlexRuiz7]

Description

Build and publish Docker images for development and testing.

[AlexRuiz7]

Enabled assembly of tar packages.

https://github.com/wazuh/wazuh-indexer/actions/runs/8364340868

[AlexRuiz7]

By placing a tar in the same folder as the Dockerfile, the image can be built running this command:

docker build --progress=plain --no-cache --build-arg="WAZUH_VERSION=4.9.0" --build-arg="WAZUH_INDEXER_TAR_NAME=wazuh-indexer-4.9.0-1_linux-x64_cfca84f.tar.gz" --tag=wazuh-indexer:4.9.0 .

Then, start a container with:

docker run -it --rm wazuh-indexer:4.9.0 

The indexer starts, but there is an error that prevents it from reaching the green cluster state, which I'm still troubleshooting.

[2024-04-02T16:37:23,133][ERROR][o.o.s.c.ConfigurationLoaderSecurity7] [wazuh.indexer] Failure no such index [.opendistro_security] retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)

[AlexRuiz7]

The solution to the problem above is to run the security admin script to initialize the .opendistro_security index.

#!/bin/bash

# Initialize the `.opendistro_security` index.

INDEXER_HOME=/usr/share/wazuh-indexer
JAVA_HOME=$INDEXER_HOME/jdk/

export JAVA_HOME

bash $INDEXER_HOME/plugins/opensearch-security/tools/securityadmin.sh \
    -cd $INDEXER_HOME/config/opensearch-security/ \
    -nhnv \
    -cacert $INDEXER_HOME/config/certs/root-ca.pem \
    -cert $INDEXER_HOME/config/certs/admin.pem \
    -key $INDEXER_HOME/config/certs/admin-key.pem \
    -p 9200 \
    -icl

Raw command

JAVA_HOME=/usr/share/wazuh-indexer/jdk/ bash /usr/share/wazuh-indexer/plugins/opensearch-security/tools/securityadmin.sh -cd /usr/share/wazuh-indexer/config/opensearch-security/ -nhnv -cacert config/certs/root-ca.pem -cert config/certs/admin.pem -key config/certs/admin-key.pem -p 9200 -icl

[AlexRuiz7]

I wondered why we decided to run the securityadmin.sh directly instead of invoking our wrapper indexer-security-init.sh. The configuration path is hard-coded to /etc/wazuh-indexer.

bin/indexer-security-init.sh 
ERROR: it was not possible to find /etc/wazuh-indexer

[AlexRuiz7]

REPOSITORY                                TAG       IMAGE ID       CREATED        SIZE
wazuh-indexer                             4.9.0     5a9bdb3e545a   16 hours ago   1.33GB