【原文链接】
1 下载镜像
docker pull docker.elastic.co/elasticsearch/elasticsearch:8.1.3
2 创建挂载目录,将数据盘挂载出来
mkdir -p /docker/elasticsearch/usr/share/elasticsearch/data chmod 777 -R /docker/elasticsearch
3 创建docker启动Elasticsearch服务
docker run -d --name elasticsearch -p 10013:9200 -p 10014:9300 -e "discovery.type=single-node" -e ES_JAVA_OPTS="-Xms512m -Xmx1024m" -e "http.host=0.0.0.0" --privileged --restart=always -v /docker/elasticsearch/usr/share/elasticsearch/data:/usr/share/elasticsearch/data docker.elastic.co/elasticsearch/elasticsearch:8.1.3
4 Elasticsearch从8开始不再提供默认密码,这里需要重置密码
使用如下命令一次性将 elastic,apm_system,kibana,kibana_system,logstash_system,beats_system,remote_monitoring_user 等用户密码都重新设置
docker exec -it elasticsearch /usr/share/elasticsearch/bin/elasticsearch-setup-passwords interactive
如下依次输入各个用户的密码,当然也可以设置为一个,自己需要记住:
[root@redrose2100 ~]# docker exec -it elasticsearch /usr/share/elasticsearch/bin/elasticsearch-setup-passwords interactive ****************************************************************************** Note: The 'elasticsearch-setup-passwords' tool has been deprecated. This command will be removed in a future release. ****************************************************************************** Initiating the setup of passwords for reserved users elastic,apm_system,kibana,kibana_system,logstash_system,beats_system,remote_monitoring_user. You will be prompted to enter passwords as the process progresses. Please confirm that you would like to continue [y/N]y Enter password for [elastic]: Reenter password for [elastic]: Enter password for [apm_system]: Reenter password for [apm_system]: Enter password for [kibana_system]: Reenter password for [kibana_system]: Enter password for [logstash_system]: Reenter password for [logstash_system]: Enter password for [beats_system]: Reenter password for [beats_system]: Enter password for [remote_monitoring_user]: Reenter password for [remote_monitoring_user]: Changed password for user [apm_system] Changed password for user [kibana_system] Changed password for user [kibana] Changed password for user [logstash_system] Changed password for user [beats_system] Changed password for user [remote_monitoring_user] Changed password for user [elastic] [root@redrose2100 ~]#
5 由于Elasticsearch从8开始启用了安全证书机制,将证书拷贝到宿主机
mkdir -p /docker/elasticsearch/usr/share/elasticsearch/config/certs docker cp elasticsearch:/usr/share/elasticsearch/config/certs/http_ca.crt /docker/elasticsearch/usr/share/elasticsearch/config/certs/
6 在命令行使用如下命令验证Elasticsearch是否安装成功
使用如下命令,然后在交互环境根据提示输入上面重置后的密码
curl --cacert /docker/elasticsearch/usr/share/elasticsearch/config/certs/http_ca.crt -u elastic https://127.0.0.1:10013
过程如下:
[root@redrose2100 ~]# curl --cacert /docker/elasticsearch/usr/share/elasticsearch/config/certs/http_ca.crt -u elastic https://127.0.0.1:10013 Enter host password for user 'elastic': { "name" : "994bcface178", "cluster_name" : "docker-cluster", "cluster_uuid" : "xOFaXy78QxWuJ8b-qcUF1g", "version" : { "number" : "8.1.3", "build_flavor" : "default", "build_type" : "docker", "build_hash" : "39afaa3c0fe7db4869a161985e240bd7182d7a07", "build_date" : "2022-04-19T08:13:25.444693396Z", "build_snapshot" : false, "lucene_version" : "9.0.0", "minimum_wire_compatibility_version" : "7.17.0", "minimum_index_compatibility_version" : "7.0.0" }, "tagline" : "You Know, for Search" } [root@redrose2100 ~]#
7 至此,Elasticsearch 8.1.3版本的安装就已经成功完成了
8 若后期想单独修改某个用户的密码时,使用如下命令即可
如下为修改用户elastic的密码
docker exec -it elasticsearch /usr/share/elasticsearch/bin/elasticsearch-reset-password -u elastic
9 为了简单使用,也可以将使用认证的开关关掉,首先将ElasticSearch中的配置文件拷贝出来
docker cp elasticsearch:/usr/share/elasticsearch/config/elasticsearch.yml /docker/elasticsearch/usr/share/elasticsearch/config/
10 编辑配置文件,
vi /docker/elasticsearch/usr/share/elasticsearch/config/elasticsearch.yml
将如下位置的配置的true修改为false

11 然后使用如下命令将修改后的配置重新拷贝到docker容器中
docker cp /docker/elasticsearch/usr/share/elasticsearch/config/elasticsearch.yml elasticsearch:/usr/share/elasticsearch/config/elasticsearch.yml
12 重启docker
docker restart elasticsearch
13 此时,直接使用如下命令再次请求Elasticsearch,即不适用证书直接请求
curl http://127.0.0.1:10013 -u elastic
结果如下:
Enter host password for user 'elastic': { "name" : "994bcface178", "cluster_name" : "docker-cluster", "cluster_uuid" : "xOFaXy78QxWuJ8b-qcUF1g", "version" : { "number" : "8.1.3", "build_flavor" : "default", "build_type" : "docker", "build_hash" : "39afaa3c0fe7db4869a161985e240bd7182d7a07", "build_date" : "2022-04-19T08:13:25.444693396Z", "build_snapshot" : false, "lucene_version" : "9.0.0", "minimum_wire_compatibility_version" : "7.17.0", "minimum_index_compatibility_version" : "7.0.0" }, "tagline" : "You Know, for Search" } [root@redrose2100 elasticsearch]#
14 至此,可以在浏览器通过ip+端口访问了,如下:

声明:本站所有文章,如无特殊说明或标注,均为本站原创发布。任何个人或组织,在未征得本站同意时,禁止复制、盗用、采集、发布本站内容到任何网站、书籍等各类媒体平台。如若本站内容侵犯了原著者的合法权益,可联系我们进行处理。
评论(0)