added help for base image changes
This commit is contained in:
Jenny Owen
GitHub
parent
5de5822faa
commit
771f8596cd
|
|
@ -4,25 +4,7 @@ Neo4j is the world's leading graph database, with native graph storage and proce
|
|||
|
||||
%%LOGO%%
|
||||
|
||||
# Available legacy images
|
||||
|
||||
As of 11th June 2019 all new Neo4j Docker images will be released with a base image of debian-slim instead of alpine linux.
|
||||
|
||||
Older Neo4j images have already been released with `openjdk:8-jre-alpine` as the base image, which is no longer officially supported by `openjdk`. This means our old images can no longer be listed as "supported" on docker hub, although **they are still available for download**.
|
||||
|
||||
In addition to the supported tags, we also have these legacy images of Neo4j available through docker hub:
|
||||
|
||||
* `3.5.5`, `3.5.5-enterprise` and earlier patches
|
||||
* `3.4.13`, `3.4.13-enterprise` and earlier patches
|
||||
* `3.3`, `3.3-enterprise`, `3.3.9`, `3.3.9-enterprise` and earlier patches
|
||||
* `3.2`, `3.2-enterprise`, `3.2.14`, `3.2.14-enterprise` and earlier patches
|
||||
|
||||
A complete list of all available Neo4j images can be found here:
|
||||
https://github.com/neo4j/docker-neo4j-publish/tree/master
|
||||
|
||||
# How to use this image
|
||||
|
||||
## Start an instance of Neo4j
|
||||
# Getting Started
|
||||
|
||||
You can start a Neo4j container like this:
|
||||
|
||||
|
|
@ -39,19 +21,47 @@ This binds two ports (`7474` and `7687`) for HTTP and Bolt access to the Neo4j A
|
|||
|
||||
By default, this requires you to login with `neo4j/neo4j` and change the password. You can, for development purposes, disable authentication by passing `--env=NEO4J_AUTH=none` to docker run.
|
||||
|
||||
## Note on version 2.3
|
||||
|
||||
Neo4j 3.0 introduced several major user-facing changes, primarily the new binary Bolt protocol. This is not available in 2.3 and as such, there is no need to expose the `7687` port. Due to changes made to the structure of configuration files, several environment variables used to configure the image has changed as well. Please see the [2.x specific section in the manual](http://neo4j.com/developer/docker-23/) for further details.
|
||||
|
||||
You can start an instance of Neo4j 2.3 like this:
|
||||
|
||||
```console
|
||||
docker run \
|
||||
--publish=7474:7474 \
|
||||
--volume=$HOME/neo4j/data:/data \
|
||||
%%IMAGE%%:2.3
|
||||
```
|
||||
|
||||
# Documentation
|
||||
|
||||
For more examples and complete documentation please go [here for 2.x](http://neo4j.com/developer/docker-23/) and [here for 3.x](http://neo4j.com/docs/operations-manual/current/deployment/single-instance/docker/).
|
||||
For more examples and complete documentation please go to our manual [here](https://neo4j.com/docs/operations-manual/current/docker/introduction/).
|
||||
|
||||
|
||||
# Releases after 3.4.14 and 3.5.6
|
||||
|
||||
As of 11th June 2019 all new Neo4j Docker images will be released with a base image of debian-slim instead of alpine linux. This was prompted by [security concerns](https://github.com/docker-library/openjdk/issues/320), which caused the docker maintainers to pull the alpine images from the official `openjdk` images.
|
||||
|
||||
Older Neo4j images have already been released with `openjdk:8-jre-alpine` as the base image. This means our old images can no longer be listed as "supported" on docker hub, although **they are still available for download**.
|
||||
|
||||
In addition to the supported tags, we also have these legacy images of Neo4j available through docker hub:
|
||||
|
||||
* `3.5.5`, `3.5.5-enterprise` and earlier patches
|
||||
* `3.4.13`, `3.4.13-enterprise` and earlier patches
|
||||
* `3.3`, `3.3-enterprise`, `3.3.9`, `3.3.9-enterprise` and earlier patches
|
||||
* `3.2`, `3.2-enterprise`, `3.2.14`, `3.2.14-enterprise` and earlier patches
|
||||
|
||||
A complete list of all available Neo4j images can be found here:
|
||||
https://github.com/neo4j/docker-neo4j-publish/tree/master
|
||||
|
||||
|
||||
## Migrating from Alpine Linux to Debian Slim
|
||||
|
||||
If you have created a custom Dockerfile based off a `neo4j` image, the main change to be aware of is that debian uses the `aptitude` package manager instead of `apk`.
|
||||
In most cases you can just replace uses of `apk` with `apt`, but be aware that not all packages in `apk` may be available or have the same name.
|
||||
|
||||
Alpine Linux provide a more complete comparison on their documentation page:
|
||||
|
||||
https://wiki.alpinelinux.org/wiki/Comparison_with_other_distros
|
||||
|
||||
|
||||
## Changes to file permission requirements
|
||||
|
||||
Several [security concerns](https://github.com/neo4j/docker-neo4j/issues/130) have been raised about the Neo4j image changing file access and ownership.
|
||||
|
||||
By default, Neo4j runs as the user `neo4j` who only exists in the container, not on the host. That means that it's hard to set up mount folders on the host which this new user has write permissions for.
|
||||
We have updated the error messaging with advice about how to fix file permission errors. We also introduced writability checks and reduced the amount of file permission changes the image will perform. This has been found to interfere with some Kubernetes setups, so is currently an opt-in feature.
|
||||
|
||||
To enforce stricter file permissions checking you can pass this environment variable to the container:
|
||||
`--env SECURE_FILE_PERMISSIONS=yes`
|
||||
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue