couchdb-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From woh...@apache.org
Subject [couchdb-docker] branch master updated: Revert some changes for clustering
Date Mon, 25 Sep 2017 18:20:49 GMT
This is an automated email from the ASF dual-hosted git repository.

wohali pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/couchdb-docker.git


The following commit(s) were added to refs/heads/master by this push:
     new c726be0  Revert some changes for clustering
c726be0 is described below

commit c726be05240913f7f8226965428ade4475547ce3
Author: Joan Touzet <wohali@apache.org>
AuthorDate: Mon Sep 25 11:11:00 2017 -0700

    Revert some changes for clustering
    
    Port 5986 does not need to be exposed, can be accessed in other ways
    as described in the README.
    
    Port range for inet_dist_listen must be one port per erlang node.
    Since Docker runs a single VM per container, a single value here is
    sufficient.
---
 2.1.0/Dockerfile | 2 +-
 2.1.0/vm.args    | 2 +-
 README.md        | 2 ++
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/2.1.0/Dockerfile b/2.1.0/Dockerfile
index b532827..59a3d31 100644
--- a/2.1.0/Dockerfile
+++ b/2.1.0/Dockerfile
@@ -109,7 +109,7 @@ COPY ./docker-entrypoint.sh /
 RUN chown -R couchdb:couchdb /opt/couchdb/etc/local.d/ /opt/couchdb/etc/vm.args
 
 WORKDIR /opt/couchdb
-EXPOSE 5984 5986 4369 9100-9200
+EXPOSE 5984 4369 9100
 VOLUME ["/opt/couchdb/data"]
 
 ENTRYPOINT ["tini", "--", "/docker-entrypoint.sh"]
diff --git a/2.1.0/vm.args b/2.1.0/vm.args
index 3816b82..0425756 100644
--- a/2.1.0/vm.args
+++ b/2.1.0/vm.args
@@ -12,7 +12,7 @@
 
 # Ensure that the Erlang VM listens on a known port
 -kernel inet_dist_listen_min 9100
--kernel inet_dist_listen_max 9200
+-kernel inet_dist_listen_max 9100
 
 # Tell kernel and SASL not to log anything
 -kernel error_logger silent
diff --git a/README.md b/README.md
index 2608a30..473eb25 100644
--- a/README.md
+++ b/README.md
@@ -43,6 +43,8 @@ The node will also start in [admin party mode](http://guide.couchdb.org/draft/se
 Note that you can also use the NODENAME environment variable to set the name of the CouchDB
node inside the container.
 Once running, you can visit the new admin interface at `http://dockerhost:5984/_utils/`
 
+Note also that port 5986 is not exposed, as this can present *significant* security risks.
We recommend either connecting to the node directly to access this port, via `docker exec
-it <instance> /bin/bash` and accessing port 5986, or use of `--expose 5986` when launching
the container, but **ONLY** if you do not expose this port publicly.
+
 ## Run (1.6.1)
 
 Available as an official image on Docker Hub as [apache/couchdb:1.6.1](https://hub.docker.com/r/apache/couchdb/)

-- 
To stop receiving notification emails like this one, please contact
['"commits@couchdb.apache.org" <commits@couchdb.apache.org>'].

Mime
View raw message