readystack/opensearch repository overview

⁠OpenSearch

readystack/opensearch:3.7.0-CE-ubuntu24.04-r1

A hardened, cosign-signed, offline-rebuildable build of github.com/opensearch-project/OpenSearch 3.7.0 (Apache-2.0 — the OSS fork of Elasticsearch), built clean-room from official upstream source by ReadyStack⁠.

⁠What you get

• Docker Scout Grade A — all 8 default policies pass, 0 fixable Critical/High.
• Signed — cosign signature by the ReadyStack release key; verify with cosign verify --key <(curl -fsSL https://readystack.dev/keys/cosign.pub) readystack/opensearch:3.7.0-CE-ubuntu24.04-r1.
• Built from source, non-root, on the current toolchain.

⁠Pulling

docker pull readystack/opensearch:3.7.0-CE-ubuntu24.04-r1

⁠Deployment

Single container, JVM (system OpenJDK 21) search + analytics engine, foreground bin/opensearch. HTTP REST API on :9200, transport on :9300. Indices persist under /opt/opensearch/data. NO SQL DB, NO sidecar (single-node). This is the OpenSearch ENGINE only (OpenSearch Dashboards is a separate product). The lean CE image drops the bundled JDK (uses our dist-upgraded system OpenJDK 21) and the two heavy security/security-analytics plugins.

docker run -d --name opensearch -p 9200:9200 -p 9300:9300 -v opensearch-data:/opt/opensearch/data readystack/opensearch:3.7.0-CE-ubuntu24.04-r1

⁠The full ReadyStack Agent-ready Archive

The complete --network=none build kit to recreate this exact image yourself — plus admin/DB/API handbooks, seed data, a validated test suite, and signed provenance — is at readystack.dev/buy.html⁠.

— ReadyStack · readystack.dev