ElasticStack----使用Docker方式安装单节点的8.1.3版本的ElasticSearch

1 下载镜像

docker pull docker.elastic.co/elasticsearch/elasticsearch:8.1.3

2 创建挂载目录，将数据盘挂载出来

mkdir -p /docker/elasticsearch/usr/share/elasticsearch/data
chmod 777 -R /docker/elasticsearch

3 创建docker启动Elasticsearch服务

docker run -d --name elasticsearch -p 10013:9200 -p 10014:9300 -e "discovery.type=single-node" -e ES_JAVA_OPTS="-Xms512m -Xmx1024m" -e "http.host=0.0.0.0" --privileged --restart=always -v /docker/elasticsearch/usr/share/elasticsearch/data:/usr/share/elasticsearch/data docker.elastic.co/elasticsearch/elasticsearch:8.1.3

4 Elasticsearch从8开始不再提供默认密码，这里需要重置密码

使用如下命令一次性将 elastic，apm_system，kibana，kibana_system，logstash_system，beats_system，remote_monitoring_user 等用户密码都重新设置

docker exec -it elasticsearch /usr/share/elasticsearch/bin/elasticsearch-setup-passwords interactive

如下依次输入各个用户的密码，当然也可以设置为一个，自己需要记住：

[root@redrose2100 ~]# docker exec -it elasticsearch /usr/share/elasticsearch/bin/elasticsearch-setup-passwords interactive
******************************************************************************
Note: The 'elasticsearch-setup-passwords' tool has been deprecated. This       command will be removed in a future release.
******************************************************************************

Initiating the setup of passwords for reserved users elastic,apm_system,kibana,kibana_system,logstash_system,beats_system,remote_monitoring_user.
You will be prompted to enter passwords as the process progresses.
Please confirm that you would like to continue [y/N]y


Enter password for [elastic]:
Reenter password for [elastic]:
Enter password for [apm_system]:
Reenter password for [apm_system]:
Enter password for [kibana_system]:
Reenter password for [kibana_system]:
Enter password for [logstash_system]:
Reenter password for [logstash_system]:
Enter password for [beats_system]:
Reenter password for [beats_system]:
Enter password for [remote_monitoring_user]:
Reenter password for [remote_monitoring_user]:
Changed password for user [apm_system]
Changed password for user [kibana_system]
Changed password for user [kibana]
Changed password for user [logstash_system]
Changed password for user [beats_system]
Changed password for user [remote_monitoring_user]
Changed password for user [elastic]
[root@redrose2100 ~]#

5 由于Elasticsearch从8开始启用了安全证书机制，将证书拷贝到宿主机

mkdir -p /docker/elasticsearch/usr/share/elasticsearch/config/certs
docker cp elasticsearch:/usr/share/elasticsearch/config/certs/http_ca.crt /docker/elasticsearch/usr/share/elasticsearch/config/certs/

6 在命令行使用如下命令验证Elasticsearch是否安装成功

使用如下命令，然后在交互环境根据提示输入上面重置后的密码

curl --cacert /docker/elasticsearch/usr/share/elasticsearch/config/certs/http_ca.crt -u elastic https://127.0.0.1:10013

过程如下：

[root@redrose2100 ~]# curl --cacert /docker/elasticsearch/usr/share/elasticsearch/config/certs/http_ca.crt -u elastic https://127.0.0.1:10013
Enter host password for user 'elastic':
{
  "name" : "994bcface178",
  "cluster_name" : "docker-cluster",
  "cluster_uuid" : "xOFaXy78QxWuJ8b-qcUF1g",
  "version" : {
    "number" : "8.1.3",
    "build_flavor" : "default",
    "build_type" : "docker",
    "build_hash" : "39afaa3c0fe7db4869a161985e240bd7182d7a07",
    "build_date" : "2022-04-19T08:13:25.444693396Z",
    "build_snapshot" : false,
    "lucene_version" : "9.0.0",
    "minimum_wire_compatibility_version" : "7.17.0",
    "minimum_index_compatibility_version" : "7.0.0"
  },
  "tagline" : "You Know, for Search"
}
[root@redrose2100 ~]#

7 至此，Elasticsearch 8.1.3版本的安装就已经成功完成了

8 若后期想单独修改某个用户的密码时，使用如下命令即可

如下为修改用户elastic的密码

docker exec -it elasticsearch /usr/share/elasticsearch/bin/elasticsearch-reset-password -u elastic

9 为了简单使用，也可以将使用认证的开关关掉，首先将ElasticSearch中的配置文件拷贝出来

docker cp elasticsearch:/usr/share/elasticsearch/config/elasticsearch.yml /docker/elasticsearch/usr/share/elasticsearch/config/

10 编辑配置文件，

vi /docker/elasticsearch/usr/share/elasticsearch/config/elasticsearch.yml

将如下位置的配置的true修改为false

11 然后使用如下命令将修改后的配置重新拷贝到docker容器中

docker cp /docker/elasticsearch/usr/share/elasticsearch/config/elasticsearch.yml elasticsearch:/usr/share/elasticsearch/config/elasticsearch.yml

12 重启docker

 docker restart elasticsearch

13 此时，直接使用如下命令再次请求Elasticsearch，即不适用证书直接请求

curl http://127.0.0.1:10013 -u elastic

结果如下：

Enter host password for user 'elastic':
{
  "name" : "994bcface178",
  "cluster_name" : "docker-cluster",
  "cluster_uuid" : "xOFaXy78QxWuJ8b-qcUF1g",
  "version" : {
    "number" : "8.1.3",
    "build_flavor" : "default",
    "build_type" : "docker",
    "build_hash" : "39afaa3c0fe7db4869a161985e240bd7182d7a07",
    "build_date" : "2022-04-19T08:13:25.444693396Z",
    "build_snapshot" : false,
    "lucene_version" : "9.0.0",
    "minimum_wire_compatibility_version" : "7.17.0",
    "minimum_index_compatibility_version" : "7.0.0"
  },
  "tagline" : "You Know, for Search"
}
[root@redrose2100 elasticsearch]#

14 至此，可以在浏览器通过ip+端口访问了，如下：