You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ranger.apache.org by rm...@apache.org on 2026/05/25 20:40:11 UTC
(ranger) 01/01: RANGER-5613:DockerFile of Ranger Audit Server has issue duplicate tools sets which are already in Ranger Base image
This is an automated email from the ASF dual-hosted git repository.
rameeshm pushed a commit to branch RANGER-5613-patch
in repository https://gitbox.apache.org/repos/asf/ranger.git
commit 033625ae5bf3ce3dc3503e84332df0b670636fd7
Author: Ramesh Mani <rm...@apache.org>
AuthorDate: Mon May 25 13:39:49 2026 -0700
RANGER-5613:DockerFile of Ranger Audit Server has issue duplicate tools sets which are already in Ranger Base image
---
.../Dockerfile.ranger-audit-dispatcher | 7 +-
.../ranger-docker/Dockerfile.ranger-audit-ingestor | 7 +-
.../docker-compose.ranger-audit-ingestor.yml | 174 ---------------------
3 files changed, 2 insertions(+), 186 deletions(-)
diff --git a/dev-support/ranger-docker/Dockerfile.ranger-audit-dispatcher b/dev-support/ranger-docker/Dockerfile.ranger-audit-dispatcher
index 5dee7cb98..f5dfa1e22 100644
--- a/dev-support/ranger-docker/Dockerfile.ranger-audit-dispatcher
+++ b/dev-support/ranger-docker/Dockerfile.ranger-audit-dispatcher
@@ -22,14 +22,9 @@ FROM ${RANGER_BASE_IMAGE}:${RANGER_BASE_VERSION}
ARG RANGER_VERSION
ARG KERBEROS_ENABLED
-# Install required packages including Kerberos client
+# Install additional packages not in the base image
RUN apt-get update && apt-get install -y \
- python3 \
- python3-pip \
- curl \
- vim \
net-tools \
- krb5-user \
&& rm -rf /var/lib/apt/lists/*
# Volume for keytabs
diff --git a/dev-support/ranger-docker/Dockerfile.ranger-audit-ingestor b/dev-support/ranger-docker/Dockerfile.ranger-audit-ingestor
index 4db923910..a9a9d1b31 100644
--- a/dev-support/ranger-docker/Dockerfile.ranger-audit-ingestor
+++ b/dev-support/ranger-docker/Dockerfile.ranger-audit-ingestor
@@ -22,14 +22,9 @@ FROM ${RANGER_BASE_IMAGE}:${RANGER_BASE_VERSION}
ARG RANGER_VERSION
ARG KERBEROS_ENABLED
-# Install required packages including Kerberos client
+# Install additional packages not in the base image
RUN apt-get update && apt-get install -y \
- python3 \
- python3-pip \
- curl \
- vim \
net-tools \
- krb5-user \
&& rm -rf /var/lib/apt/lists/*
# Volume for keytabs
diff --git a/dev-support/ranger-docker/docker-compose.ranger-audit-ingestor.yml b/dev-support/ranger-docker/docker-compose.ranger-audit-ingestor.yml
index ebe6e964d..616f4c37b 100644
--- a/dev-support/ranger-docker/docker-compose.ranger-audit-ingestor.yml
+++ b/dev-support/ranger-docker/docker-compose.ranger-audit-ingestor.yml
@@ -70,177 +70,3 @@ networks:
ranger:
name: rangernw
external: true
-# Licensed to the Apache Software Foundation (ASF) under one
-# or more contributor license agreements. See the NOTICE file
-# distributed with this work for additional information
-# regarding copyright ownership. The ASF licenses this file
-# to you under the Apache License, Version 2.0 (the
-# "License"); you may not use this file except in compliance
-# with the License. You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-services:
- # Audit Ingestor Service - Receives audits from plugins and produces to Kafka (REFACTORED)
- ranger-audit-ingestor:
- build:
- context: .
- dockerfile: Dockerfile.ranger-audit-ingestor
- args:
- - RANGER_BASE_IMAGE=${RANGER_BASE_IMAGE}
- - RANGER_BASE_VERSION=${RANGER_BASE_VERSION}
- - RANGER_VERSION=${RANGER_VERSION}
- - KERBEROS_ENABLED=${KERBEROS_ENABLED}
- image: ranger-audit-ingestor:latest
- container_name: ranger-audit-ingestor
- hostname: ranger-audit-ingestor.rangernw
- networks:
- ranger:
- aliases:
- - ranger-audit-ingestor.rangernw
- stdin_open: true
- tty: true
- depends_on:
- ranger-kdc:
- condition: service_started
- ranger-kafka:
- condition: service_started
- ports:
- - "7081:7081"
- - "7182:7182"
- environment:
- JAVA_HOME: /opt/java/openjdk
- AUDIT_INGESTOR_HOME_DIR: /opt/ranger/audit-ingestor
- AUDIT_INGESTOR_CONF_DIR: /opt/ranger/audit-ingestor/conf
- AUDIT_INGESTOR_LOG_DIR: /var/log/ranger/audit-ingestor
- AUDIT_INGESTOR_HEAP: "-Xms512m -Xmx2g"
- RANGER_VERSION: ${RANGER_VERSION}
- KERBEROS_ENABLED: ${KERBEROS_ENABLED}
- KAFKA_BOOTSTRAP_SERVERS: ranger-kafka.rangernw:9092
- volumes:
- - ./dist/keytabs/ranger-audit-ingestor:/etc/keytabs
- - ranger-audit-ingestor-logs:/var/log/ranger/audit-ingestor
- - ranger-audit-ingestor-spool:/var/log/ranger/audit-ingestor/audit
- healthcheck:
- test: ["CMD", "curl", "-f", "http://localhost:7081/api/audit/health"]
- interval: 30s
- timeout: 10s
- retries: 3
- start_period: 60s
-
- # Solr Dispatcher Service (Unified Dispatcher)
- ranger-audit-dispatcher-solr:
- build:
- context: .
- dockerfile: Dockerfile.ranger-audit-dispatcher
- args:
- - RANGER_BASE_IMAGE=${RANGER_BASE_IMAGE}
- - RANGER_BASE_VERSION=${RANGER_BASE_VERSION}
- - RANGER_VERSION=${RANGER_VERSION}
- - KERBEROS_ENABLED=${KERBEROS_ENABLED}
- image: ranger-audit-dispatcher:latest
- container_name: ranger-audit-dispatcher-solr
- command: ["solr"]
- hostname: ranger-audit-dispatcher-solr.rangernw
- stdin_open: true
- tty: true
- depends_on:
- ranger-kdc:
- condition: service_started
- ranger-kafka:
- condition: service_started
- ranger-solr:
- condition: service_started
- ranger-audit-ingestor:
- condition: service_healthy
- ports:
- - "7091:7090"
- environment:
- JAVA_HOME: /opt/java/openjdk
- AUDIT_DISPATCHER_HOME_DIR: /opt/ranger/audit-dispatcher
- AUDIT_DISPATCHER_CONF_DIR: /opt/ranger/audit-dispatcher/conf
- AUDIT_DISPATCHER_LOG_DIR: /var/log/ranger/audit-dispatcher/solr
- AUDIT_DISPATCHER_HEAP: "-Xms512m -Xmx2g"
- RANGER_VERSION: ${RANGER_VERSION}
- KERBEROS_ENABLED: ${KERBEROS_ENABLED}
- KAFKA_BOOTSTRAP_SERVERS: ranger-kafka.rangernw:9092
- SOLR_URL: http://ranger-solr.rangernw:8983/solr
- networks:
- - ranger
- volumes:
- - ./dist/keytabs/ranger-audit-dispatcher-solr:/etc/keytabs
- - ranger-audit-dispatcher-solr-logs:/var/log/ranger/audit-dispatcher/solr
- - ./scripts/audit-dispatcher/ranger-audit-dispatcher-solr-site.xml:/opt/ranger/audit-dispatcher/conf/ranger-audit-dispatcher-solr-site.xml
- healthcheck:
- test: ["CMD", "curl", "-f", "http://localhost:7090/api/health/ping"]
- interval: 30s
- timeout: 10s
- retries: 3
- start_period: 60s
-
- # HDFS Dispatcher Service (Unified Dispatcher)
- ranger-audit-dispatcher-hdfs:
- build:
- context: .
- dockerfile: Dockerfile.ranger-audit-dispatcher
- args:
- - RANGER_BASE_IMAGE=${RANGER_BASE_IMAGE}
- - RANGER_BASE_VERSION=${RANGER_BASE_VERSION}
- - RANGER_VERSION=${RANGER_VERSION}
- - KERBEROS_ENABLED=${KERBEROS_ENABLED}
- image: ranger-audit-dispatcher:latest
- container_name: ranger-audit-dispatcher-hdfs
- command: ["hdfs"]
- hostname: ranger-audit-dispatcher-hdfs.rangernw
- stdin_open: true
- tty: true
- depends_on:
- ranger-kdc:
- condition: service_started
- ranger-kafka:
- condition: service_started
- ranger-hadoop:
- condition: service_healthy
- ranger-audit-ingestor:
- condition: service_healthy
- ports:
- - "7092:7090"
- environment:
- JAVA_HOME: /opt/java/openjdk
- AUDIT_DISPATCHER_HOME_DIR: /opt/ranger/audit-dispatcher
- AUDIT_DISPATCHER_CONF_DIR: /opt/ranger/audit-dispatcher/conf
- AUDIT_DISPATCHER_LOG_DIR: /var/log/ranger/audit-dispatcher/hdfs
- AUDIT_DISPATCHER_HEAP: "-Xms512m -Xmx2g"
- RANGER_VERSION: ${RANGER_VERSION}
- KERBEROS_ENABLED: ${KERBEROS_ENABLED}
- KAFKA_BOOTSTRAP_SERVERS: ranger-kafka.rangernw:9092
- HDFS_NAMENODE: ranger-hadoop.rangernw:9000
- networks:
- - ranger
- volumes:
- - ./dist/keytabs/ranger-audit-dispatcher-hdfs:/etc/keytabs
- - ranger-audit-dispatcher-hdfs-logs:/var/log/ranger/audit-dispatcher/hdfs
- - ./scripts/audit-dispatcher/ranger-audit-dispatcher-hdfs-site.xml:/opt/ranger/audit-dispatcher/conf/ranger-audit-dispatcher-hdfs-site.xml
- healthcheck:
- test: ["CMD", "curl", "-f", "http://localhost:7090/api/health/ping"]
- interval: 30s
- timeout: 10s
- retries: 3
- start_period: 60s
-
-volumes:
- ranger-audit-ingestor-logs:
- ranger-audit-ingestor-spool:
- ranger-audit-dispatcher-solr-logs:
- ranger-audit-dispatcher-hdfs-logs:
-
-networks:
- ranger:
- name: rangernw
- external: true