siweiwang/nifi repository overview

⁠dockerfile-apache-nifi

⁠Version 1.1.2

⁠Apache NiFi Dockerfile

Provides a Dockerfile and associated scripts for configuring an instance of Apache NiFi⁠ to run with certificate authentication.

⁠Sample Usage

From your checkout directory:

1. Build the image

    docker build .
   

   Copy

2. Run the image

    standalone mode
   
    docker run -i -t --rm \
   	 	-p 8443:8443 \
    	-v ${cert_path}:/opt/certs \
    	-v $(readlink -f ./authorized-users.xml):/opt/nifi/conf/authorized-users.xml \
    	-e KEYSTORE_PATH=/opt/certs/keystore.jks \
    	-e KEYSTORE_TYPE=JKS \
    	-e KEYSTORE_PASSWORD=password \
    	-e TRUSTSTORE_PATH=/opt/certs/truststore.jks \
    	-e TRUSTSTORE_PASSWORD=password \
    	-e TRUSTSTORE_TYPE=JKS \
    	-e JVM_HEAP_START=-Xms300m \
    	-e JVM_HEAP_MAX=-Xmx500m \
    		-e ARCHIVE_ENABLED=false \
    		-e REPOSITORY_INDEX_THREADS=2 \
    		-e NIFI_LOGGING_LEVEL=ERROR \
    	aldrin/apache-nifi
   
    cluster mode (without security)
   
    docker run -i -t --rm \
    -p 8443:8443 \
    -e DISABLE_SSL=true \
    -e JVM_HEAP_START=-Xms300m \
    -e JVM_HEAP_MAX=-Xmx500m \
    -e ARCHIVE_ENABLED=false \
    -e REPOSITORY_INDEX_THREADS=2 \
    -e NIFI_LOGGING_LEVEL=ERROR \
    -e NIFI_CLUSTER_IS_NODE=true \
    -e NIFI_CLUSTER_NODE_ADDRESS=localhost \
    -e NIFI_CLUSTER_NODE_PROTOCOL_PORT=8888 \
    -e NIFI_ZOOKEEPER_CONNECT_STRING=zookeeper:2181 \
    aldrin/apache-nifi
   

   Copy

   -p 8443:8443 exposes the UI at port 8443 on the Docker host system

   -v ${cert_path}:/opt/certs maps the 'cert_path' location on the host system to the container as the source of the relevant keystores

   -i -t Allocates a TTY and keeps STDIN open

   -v $(readlink -f ./authorized-users.xml):/opt/nifi/conf/authorized-users.xml Maps an authorized-users.xml into the container over the default one provided

3. Wait for the image to initalize

    2015-03-21 18:14:37,879 INFO [main] org.apache.nifi.web.server.JettyServer NiFi has started. The UI is available at the following URLs:
    2015-03-21 18:14:37,880 INFO [main] org.apache.nifi.web.server.JettyServer https://172.17.0.37:443/nifi
    2015-03-21 18:14:37,880 INFO [main] org.apache.nifi.web.server.JettyServer https://127.0.0.1:443/nifi
    2015-03-21 18:14:37,880 INFO [main] org.apache.nifi.NiFi Controller initialization took 4572051363 nanoseconds.
   

   Copy

4. Access through your Docker host system

    https://localhost:8443/nifi
   

   Copy

5. Stopping

• From the terminal used to start the container above, perform a Ctrl+C to send the interrupt to the container.
• Alternatively, execute a docker command for the container via a docker stop <container id> or docker kill <container id>

⁠Conventions

⁠$NIFI_HOME

• The Dockerfile specifies an environment variable NIFI_HOME via the ENV command

⁠Volumes

• The following directories are exposed as volumes which may optionally be mounted to a specified location
  • /opt/certs
  • ${NIFI_HOME}/flowfile_repository
  • ${NIFI_HOME}/content_repository
  • ${NIFI_HOME}/database_repository
  • ${NIFI_HOME}/provenance_repository