基于 Docker 搭建 Elasticsearch + Kibana 环境

一、Elasticsearch

1. 下载镜像

elasticsearch镜像不支持latest标签，必须指定版本号

% docker pull elasticsearch:8.17.2

 2. 启动容器

 参考官方文档 https://www.elastic.co/guide/en/elasticsearch/reference/7.5/docker.html

% docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:8.17.2

3. 无法启动

#
# A fatal error has been detected by the Java Runtime Environment:
#
#  SIGILL (0x4) at pc=0x0000ffff7413ff68, pid=26, tid=27
#
# JRE version:  (22.0.2+9) (build )
# Java VM: OpenJDK 64-Bit Server VM (22.0.2+9-70, mixed mode, sharing, tiered, compressed oops, compressed class ptrs, g1 gc, linux-aarch64)
# Problematic frame:
# j  java.lang.System.registerNatives()V+0 java.base@22.0.2
#
# No core dump will be written. Core dumps have been disabled. To enable core dumping, try "ulimit -c unlimited" before starting Java again
#
# An error report file with more information is saved as:
# /tmp/hs_err_pid26.log
[0.013s][warning][os] Loading hsdis library failed
#
# The crash happened outside the Java Virtual Machine in native code.
# See problematic frame for where to report the bug.
#
/usr/share/elasticsearch/bin/elasticsearch-env: line 83:    26 Aborted                 "$JAVA" "$XSHARE" -cp "$ES_CLASSPATH" org.elasticsearch.tools.java_version_checker.JavaVersionChecker

 4. 解决方法

参考 https://github.com/elastic/elasticsearch/issues/118583#issuecomment-2567270484

% docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" -e "_JAVA_OPTIONS=-XX:UseSVE=0" elasticsearch:8.17.2

二、Kibana

1. 下载镜像

% docker pull kibana:8.17.2

2. 启动容器

% docker run -p 5601:5601 kibana:8.17.2

三、访问网页

1. 浏览器访问

        localhost:5601

2. 生成 Enrollment token

% docker exec -it container_name /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana

Picked up _JAVA_OPTIONS: -XX:UseSVE=0
WARNING: Owner of file [/usr/share/elasticsearch/config/users] used to be [root], but now is [elasticsearch]
WARNING: Owner of file [/usr/share/elasticsearch/config/users_roles] used to be [root], but now is [elasticsearch]
eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTcyLjE3LjAuNTo5MjAwIl0sImZnciI6IjhhYTdjZDdjNDg5NjgyYzlhMjU4ZmFkNjk0MzIzYWI2ZjRiNDUwZWRjMGE1ZGM0NjAwMGViNGZhYmMyZmM4ZTkiLCJrZXkiOiItc0tlLXBRQnVwZjNRa2kxWHlwLTpfNGo3VDhvLVI2ZUhrdlJzMjBPUGhBIn0=

3. 生成密码

% docker exec -it container_name /usr/share/elasticsearch/bin/elasticsearch-reset-password -u elastic

Picked up _JAVA_OPTIONS: -XX:UseSVE=0
This tool will reset the password of the [elastic] user to an autogenerated value.
The password will be printed in the console.
Please confirm that you would like to continue [y/N]y


Password for the [elastic] user successfully reset.
New value: _4Pfdz8+3wOXaXx2ULor