Docker下安装Elasticsearch8.2.2集群+Kibana8.2.2设置中文界面

矫情吗；* 2024-04-06 11:35 62阅读 0赞

*  **前提**

> 1.需要Linux中安装了Docker,且Docker中安装了Docker compose，如未安装请参见以下链接  
> [Docker中Docker compose步骤][Docker_Docker compose]  
> 2.服务器不能过小，本人使用的是4核8G

*  **在Linux中创建如下目录**

mkdir -p /usr/local/elasticsearch_8.2

*  **编写配置文件**

`.env`

# elastic账号的密码 (至少六个字符)
    ELASTIC_PASSWORD=1122334
    
    # kibana_system账号的密码 (至少六个字符)，该账号仅用于一些kibana的内部设置，不能用来查询es
    KIBANA_PASSWORD=4332211
    
    # es和kibana的版本
    STACK_VERSION=8.2.2
    
    # 集群名字
    CLUSTER_NAME=docker-cluster
    
    # x-pack安全设置，这里选择basic，基础设置，如果选择了trail，则会在30天后到期
    LICENSE=basic
    #LICENSE=trial
    
    # es映射到宿主机的的端口
    ES_PORT=9200
    
    # kibana映射到宿主机的的端口
    KIBANA_PORT=5601
    
    # es容器的内存大小，请根据自己硬件情况调整
    MEM_LIMIT=1073741824
    
    # 命名空间，出现在容器名的前缀上
    COMPOSE_PROJECT_NAME=es

`docker-compose.yml`

version: "2.2"
    
    services:
      setup:
        image: elasticsearch:${STACK_VERSION}
        volumes:
          - certs:/usr/share/elasticsearch/config/certs
        user: "0"
        command: >
          bash -c '
            if [ x${ELASTIC_PASSWORD} == x ]; then
              echo "Set the ELASTIC_PASSWORD environment variable in the .env file";
              exit 1;
            elif [ x${KIBANA_PASSWORD} == x ]; then
              echo "Set the KIBANA_PASSWORD environment variable in the .env file";
              exit 1;
            fi;
            if [ ! -f config/certs/ca.zip ]; then
              echo "Creating CA";
              bin/elasticsearch-certutil ca --silent --pem -out config/certs/ca.zip;
              unzip config/certs/ca.zip -d config/certs;
            fi;
            if [ ! -f config/certs/certs.zip ]; then
              echo "Creating certs";
              echo -ne \
              "instances:\n"\
              "  - name: es01\n"\
              "    dns:\n"\
              "      - es01\n"\
              "      - localhost\n"\
              "    ip:\n"\
              "      - 127.0.0.1\n"\
              "  - name: es02\n"\
              "    dns:\n"\
              "      - es02\n"\
              "      - localhost\n"\
              "    ip:\n"\
              "      - 127.0.0.1\n"\
              "  - name: es03\n"\
              "    dns:\n"\
              "      - es03\n"\
              "      - localhost\n"\
              "    ip:\n"\
              "      - 127.0.0.1\n"\
              > config/certs/instances.yml;
              bin/elasticsearch-certutil cert --silent --pem -out config/certs/certs.zip --in config/certs/instances.yml --ca-cert config/certs/ca/ca.crt --ca-key config/certs/ca/ca.key;
              unzip config/certs/certs.zip -d config/certs;
            fi;
            echo "Setting file permissions"
            chown -R root:root config/certs;
            find . -type d -exec chmod 750 \{\} \;;
            find . -type f -exec chmod 640 \{\} \;;
            echo "Waiting for Elasticsearch availability";
            until curl -s --cacert config/certs/ca/ca.crt https://es01:9200 | grep -q "missing authentication credentials"; do sleep 30; done;
            echo "Setting kibana_system password";
            until curl -s -X POST --cacert config/certs/ca/ca.crt -u elastic:${ELASTIC_PASSWORD} -H "Content-Type: application/json" https://es01:9200/_security/user/kibana_system/_password -d "{\"password\":\"${KIBANA_PASSWORD}\"}" | grep -q "^{}"; do sleep 10; done;
            echo "All done!";
          '
        healthcheck:
          test: ["CMD-SHELL", "[ -f config/certs/es01/es01.crt ]"]
          interval: 1s
          timeout: 5s
          retries: 120
    
      es01:
        depends_on:
          setup:
            condition: service_healthy
        image: elasticsearch:${STACK_VERSION}
        volumes:
          - certs:/usr/share/elasticsearch/config/certs
          - esdata01:/usr/share/elasticsearch/data
        ports:
          - ${ES_PORT}:9200
        environment:
          - node.name=es01
          - cluster.name=${CLUSTER_NAME}
          - cluster.initial_master_nodes=es01,es02,es03
          - discovery.seed_hosts=es02,es03
          - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
          - bootstrap.memory_lock=true
          - xpack.security.enabled=true
          - xpack.security.http.ssl.enabled=true
          - xpack.security.http.ssl.key=certs/es01/es01.key
          - xpack.security.http.ssl.certificate=certs/es01/es01.crt
          - xpack.security.http.ssl.certificate_authorities=certs/ca/ca.crt
          - xpack.security.http.ssl.verification_mode=certificate
          - xpack.security.transport.ssl.enabled=true
          - xpack.security.transport.ssl.key=certs/es01/es01.key
          - xpack.security.transport.ssl.certificate=certs/es01/es01.crt
          - xpack.security.transport.ssl.certificate_authorities=certs/ca/ca.crt
          - xpack.security.transport.ssl.verification_mode=certificate
          - xpack.license.self_generated.type=${LICENSE}
        mem_limit: ${MEM_LIMIT}
        ulimits:
          memlock:
            soft: -1
            hard: -1
        healthcheck:
          test:
            [
              "CMD-SHELL",
              "curl -s --cacert config/certs/ca/ca.crt https://localhost:9200 | grep -q 'missing authentication credentials'",
            ]
          interval: 10s
          timeout: 10s
          retries: 120
    
      es02:
        depends_on:
          - es01
        image: elasticsearch:${STACK_VERSION}
        volumes:
          - certs:/usr/share/elasticsearch/config/certs
          - esdata02:/usr/share/elasticsearch/data
        environment:
          - node.name=es02
          - cluster.name=${CLUSTER_NAME}
          - cluster.initial_master_nodes=es01,es02,es03
          - discovery.seed_hosts=es01,es03
          - bootstrap.memory_lock=true
          - xpack.security.enabled=true
          - xpack.security.http.ssl.enabled=true
          - xpack.security.http.ssl.key=certs/es02/es02.key
          - xpack.security.http.ssl.certificate=certs/es02/es02.crt
          - xpack.security.http.ssl.certificate_authorities=certs/ca/ca.crt
          - xpack.security.http.ssl.verification_mode=certificate
          - xpack.security.transport.ssl.enabled=true
          - xpack.security.transport.ssl.key=certs/es02/es02.key
          - xpack.security.transport.ssl.certificate=certs/es02/es02.crt
          - xpack.security.transport.ssl.certificate_authorities=certs/ca/ca.crt
          - xpack.security.transport.ssl.verification_mode=certificate
          - xpack.license.self_generated.type=${LICENSE}
        mem_limit: ${MEM_LIMIT}
        ulimits:
          memlock:
            soft: -1
            hard: -1
        healthcheck:
          test:
            [
              "CMD-SHELL",
              "curl -s --cacert config/certs/ca/ca.crt https://localhost:9200 | grep -q 'missing authentication credentials'",
            ]
          interval: 10s
          timeout: 10s
          retries: 120
    
      es03:
        depends_on:
          - es02
        image: elasticsearch:${STACK_VERSION}
        volumes:
          - certs:/usr/share/elasticsearch/config/certs
          - esdata03:/usr/share/elasticsearch/data
        environment:
          - node.name=es03
          - cluster.name=${CLUSTER_NAME}
          - cluster.initial_master_nodes=es01,es02,es03
          - discovery.seed_hosts=es01,es02
          - bootstrap.memory_lock=true
          - xpack.security.enabled=true
          - xpack.security.http.ssl.enabled=true
          - xpack.security.http.ssl.key=certs/es03/es03.key
          - xpack.security.http.ssl.certificate=certs/es03/es03.crt
          - xpack.security.http.ssl.certificate_authorities=certs/ca/ca.crt
          - xpack.security.http.ssl.verification_mode=certificate
          - xpack.security.transport.ssl.enabled=true
          - xpack.security.transport.ssl.key=certs/es03/es03.key
          - xpack.security.transport.ssl.certificate=certs/es03/es03.crt
          - xpack.security.transport.ssl.certificate_authorities=certs/ca/ca.crt
          - xpack.security.transport.ssl.verification_mode=certificate
          - xpack.license.self_generated.type=${LICENSE}
        mem_limit: ${MEM_LIMIT}
        ulimits:
          memlock:
            soft: -1
            hard: -1
        healthcheck:
          test:
            [
              "CMD-SHELL",
              "curl -s --cacert config/certs/ca/ca.crt https://localhost:9200 | grep -q 'missing authentication credentials'",
            ]
          interval: 10s
          timeout: 10s
          retries: 120
    
      kibana:
        depends_on:
          es01:
            condition: service_healthy
          es02:
            condition: service_healthy
          es03:
            condition: service_healthy
        image: kibana:${STACK_VERSION}
        volumes:
          - certs:/usr/share/kibana/config/certs
          - kibanadata:/usr/share/kibana/data
        ports:
          - ${KIBANA_PORT}:5601
        environment:
          - SERVERNAME=kibana
          - ELASTICSEARCH_HOSTS=https://es01:9200
          - ELASTICSEARCH_USERNAME=kibana_system
          - ELASTICSEARCH_PASSWORD=${KIBANA_PASSWORD}
          - ELASTICSEARCH_SSL_CERTIFICATEAUTHORITIES=config/certs/ca/ca.crt
        mem_limit: ${MEM_LIMIT}
        healthcheck:
          test:
            [
              "CMD-SHELL",
              "curl -s -I http://localhost:5601 | grep -q 'HTTP/1.1 302 Found'",
            ]
          interval: 10s
          timeout: 10s
          retries: 120
    
    volumes:
      certs:
        driver: local
      esdata01:
        driver: local
      esdata02:
        driver: local
      esdata03:
        driver: local
      kibanadata:
        driver: local

**注：以上`docker-compose.yml`文件中配置的`command`，是一份脚本，其主要作用在于，检查`.env`文件中是否配置了  
`ELASTIC_PASSWORD ('elastic' 用户的密码)`  
`KIBANA_PASSWORD ('kibana_system' 用户的密码)`  
这两项，另外的作用就是生成所需要的证书**

*  **将文件放置在同一目录下**  
    ![在这里插入图片描述][63fcd8faf1be48a4ab1e21637d465645.png]
 *  **检查配置文件是否有问题**

#有问题会输出，没有输出内容，就说明没问题
    docker-compose config -q

*  **后台启动es**

docker-compose up -d

![在这里插入图片描述][c86757f1f7dd4901a821f0a8c6942e06.png]

*  **设置kibana中文界面**（如不需要，可跳过此步骤）  
    1.拷贝配置文件

docker cp  es_kibana_1:/usr/share/kibana/config/kibana.yml /usr/local/microservices/elasticsearch_8.1/

命令解释：  
`docker cp`:docker下执行拷贝  
`es_kibana_1`:kibana的容器实例名称  
`/usr/share/kibana/config/kibana.yml`:需要拷贝的容器文件路径  
`/usr/local/microservices/elasticsearch_8.1/`:需要拷贝到宿主机的目标路径  
2.在拷贝出来的`kibana.yml`文件中，新增如下内容

i18n.locale: "zh-CN"

完整`kibana.yml`

#
    # ** THIS IS AN AUTO-GENERATED FILE **
    #
    
    # Default Kibana configuration for docker target
    server.host: "0.0.0.0"
    server.shutdownTimeout: "5s"
    elasticsearch.hosts: [ "http://elasticsearch:9200" ]
    monitoring.ui.container.elasticsearch.enabled: true
    i18n.locale: "zh-CN"

3.在`docker-compose.yml`文件中新增如下内容

- ./kibana.yml:/usr/share/kibana/config/kibana.yml

新增位置如下：  
![在这里插入图片描述][1e5a2c7e491c429eae58a769c429fe72.png]

4.在`/usr/local/microservices/elasticsearch_8.1`目录下执行如下命令，停止es容器实例

docker-compose stop

重新启动容器

docker-compose up -d

*  **查看ES集群状态**

https://Docker宿主机IP:9200/

返回结果：

{
        
      "name" : "es01",
      "cluster_name" : "docker-cluster",
      "cluster_uuid" : "I7F96wYBR7mjZNq0wfedEQ",
      "version" : {
        
        "number" : "8.2.2",
        "build_flavor" : "default",
        "build_type" : "docker",
        "build_hash" : "9876968ef3c745186b94fdabd4483e01499224ef",
        "build_date" : "2022-05-25T15:47:06.259735307Z",
        "build_snapshot" : false,
        "lucene_version" : "9.1.0",
        "minimum_wire_compatibility_version" : "7.17.0",
        "minimum_index_compatibility_version" : "7.0.0"
      },
      "tagline" : "You Know, for Search"
    }

`注意：此处的请求协议是https`

*  **访问`kibana`**  
    http://Docker宿主机IP:5601/  
    ![在这里插入图片描述][1b2ec9c552894715af249ee14f9487e0.png]  
    **用户名**：elastic  
    **密码**：`.env`文件下配置的`ELASTIC_PASSWORD`
 *  **测试集群是否成功**  
    ![在这里插入图片描述][45818683534d47d3b18e2f7f2127d317.png]  
    显示3台节点  
    ![在这里插入图片描述][b6de1e94266c49dbb4c4ab2a900b2f53.png]  
    至此安装成功
 *  **使用**  
    ![在这里插入图片描述][353dbae290664a89945c5832179ced66.png]  
    输入命令，展示集群状态

GET _cat/nodes

![在这里插入图片描述][05c72137f3244de8be81cc430a6d8597.png]  
`注：出现这种字体堆叠情况，应该是显示器大小的原因，本人出现了这种情况，换了个电脑访问就没问题`  
![在这里插入图片描述][e5f2d67908ab4b22bbb71b61efd9f454.png]

[Docker_Docker compose]: https://blog.csdn.net/qq_46122292/article/details/124961251
[63fcd8faf1be48a4ab1e21637d465645.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/28176440f7c742b9bcdc41a37b14c6a3.png
[c86757f1f7dd4901a821f0a8c6942e06.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/ff0f10d50a65456686ac96916ceebff7.png
[1e5a2c7e491c429eae58a769c429fe72.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/3d7c7eff98dc421e8323a99214e7c312.png
[1b2ec9c552894715af249ee14f9487e0.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/7d95920682064fccbc17b1063c1627bb.png
[45818683534d47d3b18e2f7f2127d317.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/92dd3eeb15914132b9b2a96edaa0a156.png
[b6de1e94266c49dbb4c4ab2a900b2f53.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/bf0d182ac1e84fc8a8c8a31aeb6deb84.png
[353dbae290664a89945c5832179ced66.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/9d0314f366b24dc58e402aee576e4f0e.png
[05c72137f3244de8be81cc430a6d8597.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/8bc0c1841a1e4246bc79016cf6c91249.png
[e5f2d67908ab4b22bbb71b61efd9f454.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/61463deb6ff347289d767e71fb552bc6.png