ElasticSearch使用dockercompose方式安装8.1.3版本的ElasticSearch集群

安装docker-compose

安装步骤&＃xff1a;

&＃xff08;1&＃xff09;下载docker-compose

执行如下命令进行下载

curl -L "https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose


若速度较慢&＃xff0c;可以使用如下命令&＃xff1a;

curl -L "https://mirror.ghproxy.com/https://github.com/docker/compose/releases/download/1.29.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose

&＃xff08;2&＃xff09;修改目录权限

chmod x /usr/local/bin/docker-compose


&＃xff08;3&＃xff09;创建软连接

ln -s /usr/local/bin/docker-compose /usr/bin/docker-compose


&＃xff08;4&＃xff09;验证安装是否完成

执行如下命令&＃xff0c;如果可以正常显示版本号&＃xff0c;则表示已经完成

docker-compose --version


使用docker-compose安装ElasticSearch

&＃xff08;1&＃xff09;准备好环境变量

内容如下&＃xff0c;保存在.env文件中&＃xff0c;存放在一个空的目录中&＃xff0c;这里注意密码需要给ELASTIC_PASSWORD 和 KIBANA_PASSWORD 配置一个比较强的&＃xff0c;不能使用过于简单的密码,
此外&＃xff0c;这里暴露端口是通过ES_PORT设置的&＃xff0c;默认暴露9200端口&＃xff0c;如果是其他端口需要修改下面变量文件中的ES_PORT值
kibana端口通过KIBANA_PORT设置&＃xff0c;默认为5601&＃xff0c;那么也可以设置为其他端口

# Password for the &＃39;elastic&＃39; user (at least 6 characters)
ELASTIC_PASSWORD&＃61;xxxxxxxxxx# Password for the &＃39;kibana_system&＃39; user (at least 6 characters)
KIBANA_PASSWORD&＃61;xxxxxxxxxxx# Version of Elastic products
STACK_VERSION&＃61;8.1.3# Set the cluster name
CLUSTER_NAME&＃61;docker-cluster# Set to &＃39;basic&＃39; or &＃39;trial&＃39; to automatically start the 30-day trial
LICENSE&＃61;basic
#LICENSE&＃61;trial# Port to expose Elasticsearch HTTP API to the host
ES_PORT&＃61;9200
#ES_PORT&＃61;127.0.0.1:9200# Port to expose Kibana to the host
KIBANA_PORT&＃61;5601
#KIBANA_PORT&＃61;80# Increase or decrease based on the available host memory (in bytes)
MEM_LIMIT&＃61;1073741824# Project namespace (defaults to the current folder name if not set)
#COMPOSE_PROJECT_NAME&＃61;myproject


&＃xff08;2&＃xff09;准备docke-compose.yml文件

如下&＃xff0c;

version: "2.2"services:setup:image: docker.elastic.co/elasticsearch/elasticsearch:${STACK_VERSION}volumes:- certs:/usr/share/elasticsearch/config/certsuser: "0"command: >bash -c &＃39;if [ x${ELASTIC_PASSWORD} &＃61;&＃61; x ]; thenecho "Set the ELASTIC_PASSWORD environment variable in the .env file";exit 1;elif [ x${KIBANA_PASSWORD} &＃61;&＃61; x ]; thenecho "Set the KIBANA_PASSWORD environment variable in the .env file";exit 1;fi;if [ ! -f config/certs/ca.zip ]; thenecho "Creating CA";bin/elasticsearch-certutil ca --silent --pem -out config/certs/ca.zip;unzip config/certs/ca.zip -d config/certs;fi;if [ ! -f config/certs/certs.zip ]; thenecho "Creating certs";echo -ne \"instances:\n"\" - name: es01\n"\" dns:\n"\" - es01\n"\" - localhost\n"\" ip:\n"\" - 127.0.0.1\n"\" - name: es02\n"\" dns:\n"\" - es02\n"\" - localhost\n"\" ip:\n"\" - 127.0.0.1\n"\" - name: es03\n"\" dns:\n"\" - es03\n"\" - localhost\n"\" ip:\n"\" - 127.0.0.1\n"\> config/certs/instances.yml;bin/elasticsearch-certutil cert --silent --pem -out config/certs/certs.zip --in config/certs/instances.yml --ca-cert config/certs/ca/ca.crt --ca-key config/certs/ca/ca.key;unzip config/certs/certs.zip -d config/certs;fi;echo "Setting file permissions"chown -R root:root config/certs;find . -type d -exec chmod 750 \{\} \;;find . -type f -exec chmod 640 \{\} \;;echo "Waiting for Elasticsearch availability";until curl -s --cacert config/certs/ca/ca.crt https://es01:9200 | grep -q "missing authentication credentials"; do sleep 30; done;echo "Setting kibana_system password";until curl -s -X POST --cacert config/certs/ca/ca.crt -u elastic:${ELASTIC_PASSWORD} -H "Content-Type: application/json" https://es01:9200/_security/user/kibana_system/_password -d "{\"password\":\"${KIBANA_PASSWORD}\"}" | grep -q "^{}"; do sleep 10; done;echo "All done!";&＃39;healthcheck:test: ["CMD-SHELL", "[ -f config/certs/es01/es01.crt ]"]interval: 1stimeout: 5sretries: 120es01:depends_on:setup:condition: service_healthyimage: docker.elastic.co/elasticsearch/elasticsearch:${STACK_VERSION}volumes:- certs:/usr/share/elasticsearch/config/certs- esdata01:/usr/share/elasticsearch/dataports:- ${ES_PORT}:9200environment:- node.name&＃61;es01- cluster.name&＃61;${CLUSTER_NAME}- cluster.initial_master_nodes&＃61;es01,es02,es03- discovery.seed_hosts&＃61;es02,es03- ELASTIC_PASSWORD&＃61;${ELASTIC_PASSWORD}- bootstrap.memory_lock&＃61;true- xpack.security.enabled&＃61;true- xpack.security.http.ssl.enabled&＃61;true- xpack.security.http.ssl.key&＃61;certs/es01/es01.key- xpack.security.http.ssl.certificate&＃61;certs/es01/es01.crt- xpack.security.http.ssl.certificate_authorities&＃61;certs/ca/ca.crt- xpack.security.http.ssl.verification_mode&＃61;certificate- xpack.security.transport.ssl.enabled&＃61;true- xpack.security.transport.ssl.key&＃61;certs/es01/es01.key- xpack.security.transport.ssl.certificate&＃61;certs/es01/es01.crt- xpack.security.transport.ssl.certificate_authorities&＃61;certs/ca/ca.crt- xpack.security.transport.ssl.verification_mode&＃61;certificate- xpack.license.self_generated.type&＃61;${LICENSE}mem_limit: ${MEM_LIMIT}ulimits:memlock:soft: -1hard: -1healthcheck:test:["CMD-SHELL","curl -s --cacert config/certs/ca/ca.crt https://localhost:9200 | grep -q &＃39;missing authentication credentials&＃39;",]interval: 10stimeout: 10sretries: 120es02:depends_on:- es01image: docker.elastic.co/elasticsearch/elasticsearch:${STACK_VERSION}volumes:- certs:/usr/share/elasticsearch/config/certs- esdata02:/usr/share/elasticsearch/dataenvironment:- node.name&＃61;es02- cluster.name&＃61;${CLUSTER_NAME}- cluster.initial_master_nodes&＃61;es01,es02,es03- discovery.seed_hosts&＃61;es01,es03- bootstrap.memory_lock&＃61;true- xpack.security.enabled&＃61;true- xpack.security.http.ssl.enabled&＃61;true- xpack.security.http.ssl.key&＃61;certs/es02/es02.key- xpack.security.http.ssl.certificate&＃61;certs/es02/es02.crt- xpack.security.http.ssl.certificate_authorities&＃61;certs/ca/ca.crt- xpack.security.http.ssl.verification_mode&＃61;certificate- xpack.security.transport.ssl.enabled&＃61;true- xpack.security.transport.ssl.key&＃61;certs/es02/es02.key- xpack.security.transport.ssl.certificate&＃61;certs/es02/es02.crt- xpack.security.transport.ssl.certificate_authorities&＃61;certs/ca/ca.crt- xpack.security.transport.ssl.verification_mode&＃61;certificate- xpack.license.self_generated.type&＃61;${LICENSE}mem_limit: ${MEM_LIMIT}ulimits:memlock:soft: -1hard: -1healthcheck:test:["CMD-SHELL","curl -s --cacert config/certs/ca/ca.crt https://localhost:9200 | grep -q &＃39;missing authentication credentials&＃39;",]interval: 10stimeout: 10sretries: 120es03:depends_on:- es02image: docker.elastic.co/elasticsearch/elasticsearch:${STACK_VERSION}volumes:- certs:/usr/share/elasticsearch/config/certs- esdata03:/usr/share/elasticsearch/dataenvironment:- node.name&＃61;es03- cluster.name&＃61;${CLUSTER_NAME}- cluster.initial_master_nodes&＃61;es01,es02,es03- discovery.seed_hosts&＃61;es01,es02- bootstrap.memory_lock&＃61;true- xpack.security.enabled&＃61;true- xpack.security.http.ssl.enabled&＃61;true- xpack.security.http.ssl.key&＃61;certs/es03/es03.key- xpack.security.http.ssl.certificate&＃61;certs/es03/es03.crt- xpack.security.http.ssl.certificate_authorities&＃61;certs/ca/ca.crt- xpack.security.http.ssl.verification_mode&＃61;certificate- xpack.security.transport.ssl.enabled&＃61;true- xpack.security.transport.ssl.key&＃61;certs/es03/es03.key- xpack.security.transport.ssl.certificate&＃61;certs/es03/es03.crt- xpack.security.transport.ssl.certificate_authorities&＃61;certs/ca/ca.crt- xpack.security.transport.ssl.verification_mode&＃61;certificate- xpack.license.self_generated.type&＃61;${LICENSE}mem_limit: ${MEM_LIMIT}ulimits:memlock:soft: -1hard: -1healthcheck:test:["CMD-SHELL","curl -s --cacert config/certs/ca/ca.crt https://localhost:9200 | grep -q &＃39;missing authentication credentials&＃39;",]interval: 10stimeout: 10sretries: 120kibana:depends_on:es01:condition: service_healthyes02:condition: service_healthyes03:condition: service_healthyimage: docker.elastic.co/kibana/kibana:${STACK_VERSION}volumes:- certs:/usr/share/kibana/config/certs- kibanadata:/usr/share/kibana/dataports:- ${KIBANA_PORT}:5601environment:- SERVERNAME&＃61;kibana- ELASTICSEARCH_HOSTS&＃61;https://es01:9200- ELASTICSEARCH_USERNAME&＃61;kibana_system- ELASTICSEARCH_PASSWORD&＃61;${KIBANA_PASSWORD}- ELASTICSEARCH_SSL_CERTIFICATEAUTHORITIES&＃61;config/certs/ca/ca.crtmem_limit: ${MEM_LIMIT}healthcheck:test:["CMD-SHELL","curl -s -I http://localhost:5601 | grep -q &＃39;HTTP/1.1 302 Found&＃39;",]interval: 10stimeout: 10sretries: 120volumes:certs:driver: localesdata01:driver: localesdata02:driver: localesdata03:driver: localkibanadata:driver: local


&＃xff08;3&＃xff09;配置vm.max_map_count 最小为262144

vi /etc/sysctl.conf


然后修改vm.max_map_count的值为262144&＃xff0c;如果不存在&＃xff0c;则直接增加以下内容

vm.max_map_count&＃61;262144


这种方式需要重启&＃xff0c;一般情况下环境不允许重启的&＃xff0c;因此这里可以继续使用如下命令配置

sysctl -w vm.max_map_count&＃61;262144


&＃xff08;4&＃xff09;启动服务

执行如下命令&＃xff0c;启动服务

docker-compose up -d


&＃xff08;5&＃xff09;通过docker-compose ps 命令查看状态&＃xff0c;如下&＃xff0c;标志已经启动成功

[root&＃64;master es]# docker-compose psName Command State Ports
----------------------------------------------------------------------------------------------------------------
es_es01_1 /bin/tini -- /usr/local/bi ... Up (healthy) 0.0.0.0:9200->9200/tcp,:::9200->9200/tcp, 9300/tcp
es_es02_1 /bin/tini -- /usr/local/bi ... Up (healthy) 9200/tcp, 9300/tcp
es_es03_1 /bin/tini -- /usr/local/bi ... Up (healthy) 9200/tcp, 9300/tcp
es_kibana_1 /bin/tini -- /usr/local/bi ... Up (healthy) 0.0.0.0:5601->5601/tcp,:::5601->5601/tcp
es_setup_1 /bin/tini -- /usr/local/bi ... Exit 0
[root&＃64;master es]#


(6) 然后再浏览器通过ip&＃43;端口即可访问了&＃xff0c;比如这里 192.168.16.40:5601&＃xff0c;然后输入用户名 elastic和配置的密码&＃xff0c;如下

(7) 登录后结果如下