opensearch

Author: iakat

.github/workflows/opensearch.yaml

@@ -0,0 +1,69 @@
+name: opensearch
+
+on:
+  schedule:
+  - cron: "0 10 * * *"
+  push:
+    branches:
+    - "**"
+    tags:
+    - "v*.*.*"
+  pull_request:
+    branches:
+    - "main"
+
+jobs:
+  opensearch:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Set variables useful for later
+      id: useful_vars
+      run: |-
+        echo "::set-output name=timestamp::$(date +%s)"
+        echo "::set-output name=short_sha::${GITHUB_SHA::8}"
+    - name: Checkout
+      uses: actions/checkout@v3
+    - name: Docker meta
+      id: docker_meta
+      uses: docker/metadata-action@v4
+      with:
+        images: ghcr.io/${{ github.repository }}/opensearch
+        tags: |
+          type=schedule
+          type=ref,event=branch
+          type=ref,event=pr
+          type=semver,pattern={{version}}
+          type=semver,pattern={{major}}.{{minor}}
+          type=semver,pattern={{major}}
+          type=sha,prefix=,format=long,event=tag
+          type=sha
+          type=raw,value=latest,enable=${{ endsWith(github.ref, github.event.repository.default_branch) }}
+          type=raw,value=${{ github.ref_name }}-${{ steps.useful_vars.outputs.short_sha }}-${{ steps.useful_vars.outputs.timestamp }},enable=${{ endsWith(github.ref, github.event.repository.default_branch) }}
+    - name: Set up QEMU
+      uses: docker/setup-qemu-action@v2
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v2
+    - name: Login to GHCR
+      if: github.event_name != 'pull_request'
+      uses: docker/login-action@v2
+      with:
+        registry: ghcr.io
+        username: ${{ github.repository_owner }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+    - name: Cache Docker layers
+      uses: actions/cache@v3
+      with:
+        path: /tmp/.buildx-cache
+        key: ${{ runner.os }}-opensearch-buildx-${{ github.sha }}
+        restore-keys: |
+          ${{ runner.os }}-opensearch-buildx-
+    - name: Build and push
+      uses: docker/build-push-action@v4
+      with:
+        context: opensearch
+        push: ${{ github.event_name != 'pull_request' }}
+        tags: ${{ steps.docker_meta.outputs.tags }}
+        labels: ${{ steps.docker_meta.outputs.labels }}
+        platforms: linux/amd64,linux/arm64
+        cache-from: type=local,src=/tmp/.buildx-cache
+        cache-to: type=local,dest=/tmp/.buildx-cache,mode=max

opensearch/Dockerfile

@@ -0,0 +1,46 @@
+ARG OPENSEARCH_VERSION=2.19.0
+
+FROM ibm-semeru-runtimes:open-21-jdk-jammy AS semeru
+
+FROM opensearchproject/opensearch:${OPENSEARCH_VERSION}
+
+USER root
+
+RUN rm -rf /usr/share/opensearch/jdk
+COPY --from=semeru /opt/java/openjdk /usr/share/opensearch/jdk
+RUN chown -R opensearch:opensearch /usr/share/opensearch/jdk
+
+# Strip HotSpot GC and logging flags from jvm.options
+RUN sed -i \
+    -e '/UseG1GC/d' \
+    -e '/G1ReservePercent/d' \
+    -e '/InitiatingHeapOccupancyPercent/d' \
+    -e '/UseConcMarkSweepGC/d' \
+    -e '/CMSInitiatingOccupancyFraction/d' \
+    -e '/UseCMSInitiatingOccupancyOnly/d' \
+    -e '/UseSerialGC/d' \
+    -e '/CICompilerCount/d' \
+    -e '/TieredCompilation/d' \
+    -e '/InitialCodeCacheSize/d' \
+    -e '/InitialBootClassLoaderMetaspaceSize/d' \
+    -e '/-Xlog:/d' \
+    /usr/share/opensearch/config/jvm.options
+
+# Strip -XX:+UseSerialGC from all files under opensearch (bin scripts, etc.)
+RUN find /usr/share/opensearch -type f -exec grep -l 'UseSerialGC' {} \; | while read f; do sed -i 's/-XX:+UseSerialGC//g' "$f"; done
+
+ENV OPENSEARCH_JAVA_HOME=/usr/share/opensearch/jdk
+ENV JAVA_HOME=/usr/share/opensearch/jdk
+ENV PATH="/usr/share/opensearch/jdk/bin:${PATH}"
+
+ENV OPENJ9_BASE_OPTS="-XX:+IdleTuningGcOnIdle -XX:IdleTuningMinIdleWaitTime=240 -Xshareclasses:none -Xquickstart -Xmns8m -Xmnx64m -Xsoftrefthreshold1 -XX:+ExitOnOutOfMemoryError"
+
+RUN sed -i '1a export OPENSEARCH_JAVA_OPTS="${OPENJ9_BASE_OPTS} ${OPENSEARCH_JAVA_OPTS}"' \
+    /usr/share/opensearch/opensearch-docker-entrypoint.sh
+
+# Per-deployment, set OPENSEARCH_JAVA_OPTS in your k8s manifest:
+# -Xms256m -Xmx512m -Xsoftmx256m -XX:MaxDirectMemorySize=128m
+
+USER opensearch
+
+RUN java -version 2>&1 | grep -i "openj9" || exit 1