docker images

bes/Dockerfile

@@ -0,0 +1,23 @@
+FROM openjdk:11
+
+ENV BES_HOME="/bes"
+
+RUN mkdir ${BES_HOME}
+
+ADD BES-9.5.2.4703.tar.gz ${BES_HOME}/
+
+COPY entrypoint.sh ${BES_HOME}/entrypoint.sh
+
+RUN chmod +x ${BES_HOME}/entrypoint.sh
+
+RUN echo "export JAVA_HOME=/usr/local/openjdk-11" >> /etc/profile
+RUN echo "export PATH=$JAVA_HOME/bin:$PATH" >> /etc/profile
+RUN echo "export CLASSPATH=$JAVA_HOME/lib/tools.jar:$JAVA_HOME/lib/dt.jar:$CLASSPATH" >> /etc/profile
+
+WORKDIR ${BES_HOME}
+
+EXPOSE 1900
+EXPOSE 8080
+EXPOSE 8443
+
+ENTRYPOINT ["sh","-c","${BES_HOME}/entrypoint.sh"]

bes/build.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+docker build -t bes:9.5.2 .

bes/entrypoint.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+cd ${BES_HOME}/bin
+
+./iastool start --server --passport "${BES_PASSPORT:-B#2008_2108#es}" --user "${BES_ADMIN_USERNAME:-admin}" --password "${BES_ADMIN_PASSWORD:-B#2008_2108#es}"
+
+tail -f /dev/null

bes/server.config

@@ -0,0 +1,273 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!-- server -->
+<server>
+    <!-- web-container -->
+    <web-container enabled="true">
+        <http-service>
+            <access-log format="%h %l %u %t &quot;%r&quot; %s %b %D" rotation-enabled="true" rotation-enabled-by-size="false" max-history-files="10"  rotation-size="10458760" file-date-format=".yyyy-MM" buffered="true" encoding="UTF-8"></access-log>
+            <jar-scanner scan-all-directories="false" scan-all-files="false" scan-class-path="true" scan-bootstrap-class-path="false">
+                <jar-scan-filter default-pluggability-scan="true" default-tld-scan="true">
+                </jar-scan-filter>
+            </jar-scanner>
+            <http-file cache-ttl="5000" caching-allowed="true" cache-max-size="262144" allow-linking="false"/>
+        </http-service>
+
+        <http-listener name="admin-listener" io-mode="NIO" address="0.0.0.0" port="1900" enabled="true" jk-enabled="false" security-enabled="false" default-virtual-server="__admin" thread-pool="admin-thread-pool">
+            <http-protocol allow-trace="false" async-timeout="10000" dns-lookup-enabled="false" max-parameter-count="10000" max-post-size="2097152"
+                           uri-encoding="UTF-8" request-character-encoding="ISO-8859-1" response-character-encoding="ISO-8859-1" compression="off" compression-min-size="2048" ssl-enabled="false">
+            </http-protocol>
+            <http2-protocol max-trailer-size="8192" read-timeout="10000" compressible-mime-type="text/html,text/xml,text/plain,text/css,text/javascript,application/javascript" initial-window-size="65535" write-timeout="10000" max-trailer-count="100"
+                           max-concurrent-stream="200" compression-min-size="2048" max-header-size="8192" max-header-count="100" max-concurrent-stream-execution="200" no-compression-user-agents="" compression="off">
+            </http2-protocol>
+            <keep-alive keep-alive-timeout="60" max-keep-alive-requests="100" />
+            <ssl keystore-file="${com.bes.instanceRoot}/conf/security/keystore.jks" key-alias="bes" key-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-type="JKS" truststore-file="${com.bes.instanceRoot}/conf/security/cacerts.jks" truststore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" truststore-type="JKS" client-auth="false"
+                 ssl3-enabled="false" tls-enabled="true" tls11-enabled="true" tls12-enabled="true" cert-type="CER" certificate-file="${com.bes.instanceRoot}/conf/security/cert.pem"
+                 certificate-key-file="${com.bes.instanceRoot}/conf/security/key.pem" certificate-chain-file="${com.bes.instanceRoot}/conf/security/chain.pem">
+            </ssl>
+            <gmssl key-alias="bes" keystore-file="${com.bes.instanceRoot}/conf/security/keystore.bks" key-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==">
+            </gmssl>
+            <property name="pollerThreadCount" value="1"></property>
+        </http-listener>
+
+        <http-listener name="http-listener-1" io-mode="NIO" address="0.0.0.0" port="8080" enabled="true" jk-enabled="false" security-enabled="false" default-virtual-server="server" thread-pool="http-thread-pool">
+            <http-protocol allow-trace="false" async-timeout="10000" dns-lookup-enabled="false" max-parameter-count="10000" max-post-size="2097152"
+                           uri-encoding="UTF-8" request-character-encoding="ISO-8859-1" response-character-encoding="ISO-8859-1" compression="off" compression-min-size="2048">
+            </http-protocol>
+            <http2-protocol max-trailer-size="8192" read-timeout="10000" compressible-mime-type="text/html,text/xml,text/plain,text/css,text/javascript,application/javascript" initial-window-size="65535" write-timeout="10000" max-trailer-count="100"
+                           max-concurrent-stream="200" compression-min-size="2048" max-header-size="8192" max-header-count="100" max-concurrent-stream-execution="200" no-compression-user-agents="" compression="off">
+            </http2-protocol>
+            <keep-alive keep-alive-timeout="60" max-keep-alive-requests="100" />
+            <ssl keystore-file="${com.bes.instanceRoot}/conf/security/keystore.jks" key-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" key-alias="bes" keystore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-type="JKS" truststore-file="${com.bes.instanceRoot}/conf/security/cacerts.jks" truststore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" truststore-type="JKS" client-auth="false"
+                 ssl3-enabled="false" tls-enabled="true" tls11-enabled="true" tls12-enabled="true" cert-type="CER" certificate-file="${com.bes.instanceRoot}/conf/security/cert.pem"
+                 certificate-key-file="${com.bes.instanceRoot}/conf/security/key.pem" certificate-chain-file="${com.bes.instanceRoot}/conf/security/chain.pem">
+            </ssl>
+            <gmssl key-alias="bes" keystore-file="${com.bes.instanceRoot}/conf/security/keystore.bks" key-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==">
+            </gmssl>
+            <property name="pollerThreadCount" value="1"></property>
+        </http-listener>
+
+        <http-listener name="ajp-listener-1" io-mode="NIO" address="0.0.0.0" port="8009" enabled="false" jk-enabled="true" security-enabled="false" default-virtual-server="server" thread-pool="http-thread-pool">
+            <http-protocol allow-trace="false" async-timeout="1000" dns-lookup-enabled="false" max-parameter-count="10000" max-post-size="2097152"
+                           uri-encoding="UTF-8" request-character-encoding="ISO-8859-1" response-character-encoding="ISO-8859-1" compression="off" compression-min-size="2048">
+            </http-protocol>
+            <http2-protocol max-trailer-size="8192" read-timeout="10000" compressible-mime-type="text/html,text/xml,text/plain,text/css,text/javascript,application/javascript" initial-window-size="65535" write-timeout="10000" max-trailer-count="100"
+                           max-concurrent-stream="200" compression-min-size="2048" max-header-size="8192" max-header-count="100" max-concurrent-stream-execution="200" no-compression-user-agents="" compression="off">
+            </http2-protocol>
+            <keep-alive keep-alive-timeout="60" max-keep-alive-requests="100" />
+            <ssl keystore-file="${com.bes.instanceRoot}/conf/security/keystore.jks" key-alias="bes" key-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-type="JKS" truststore-file="${com.bes.instanceRoot}/conf/security/cacerts.jks" truststore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" truststore-type="JKS" client-auth="false"
+                 ssl3-enabled="false" tls-enabled="true" tls11-enabled="true" tls12-enabled="true" cert-type="CER" certificate-file="${com.bes.instanceRoot}/conf/security/cert.pem"
+                 certificate-key-file="${com.bes.instanceRoot}/conf/security/key.pem" certificate-chain-file="${com.bes.instanceRoot}/conf/security/chain.pem">
+            </ssl>
+            <gmssl key-alias="bes" keystore-file="${com.bes.instanceRoot}/conf/security/keystore.bks" key-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==">
+            </gmssl>
+            <property name="pollerThreadCount" value="1"></property>
+        </http-listener>
+
+        <http-listener name="http-listener-2" io-mode="NIO" address="0.0.0.0" port="8443" enabled="false" jk-enabled="false" security-enabled="true" default-virtual-server="server" thread-pool="http-thread-pool">
+            <http-protocol allow-trace="false" async-timeout="10000" dns-lookup-enabled="false" max-parameter-count="10000" max-post-size="2097152"
+                           uri-encoding="UTF-8" request-character-encoding="ISO-8859-1" response-character-encoding="ISO-8859-1" compression="off" compression-min-size="2048">
+            </http-protocol>
+            <http2-protocol max-trailer-size="8192" read-timeout="10000" compressible-mime-type="text/html,text/xml,text/plain,text/css,text/javascript,application/javascript" initial-window-size="65535" write-timeout="10000" max-trailer-count="100"
+                           max-concurrent-stream="200" compression-min-size="2048" max-header-size="8192" max-header-count="100" max-concurrent-stream-execution="200" no-compression-user-agents="" compression="off">
+            </http2-protocol>
+            <keep-alive keep-alive-timeout="60" max-keep-alive-requests="100" />
+            <ssl keystore-file="${com.bes.instanceRoot}/conf/security/keystore.jks" key-alias="bes" key-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-type="JKS" truststore-file="${com.bes.instanceRoot}/conf/security/cacerts.jks" truststore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" truststore-type="JKS" client-auth="false"
+                 ssl3-enabled="false" tls-enabled="true" tls11-enabled="true" tls12-enabled="true" cert-type="CER" certificate-file="${com.bes.instanceRoot}/conf/security/cert.pem"
+                 certificate-key-file="${com.bes.instanceRoot}/conf/security/key.pem" certificate-chain-file="${com.bes.instanceRoot}/conf/security/chain.pem">
+            </ssl>
+            <gmssl key-alias="bes" keystore-file="${com.bes.instanceRoot}/conf/security/keystore.bks" key-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==">
+            </gmssl>
+            <property name="pollerThreadCount" value="1"></property>
+        </http-listener>
+
+        <virtual-server name="server" state="on" http-listeners="http-listener-1,ajp-listener-1,http-listener-2" stuck-thread-max-time="0" stuck-thread-timer-interval="10">
+            <property name="accessLogEnabled" value="inherit" />
+            <property name="accessLogDirectory" value="${com.bes.instanceRoot}/logs/access" />
+            <property name="accessLogPrefix" value="server_access_log" />
+        </virtual-server>
+
+        <virtual-server name="__admin" state="on" http-listeners="admin-listener" stuck-thread-max-time="0" stuck-thread-timer-interval="10">
+            <property name="accessLogEnabled" value="inherit" />
+            <property name="accessLogDirectory" value="${com.bes.instanceRoot}/logs/access" />
+            <property name="accessLogPrefix" value="__admin_access_log" />
+        </virtual-server>
+        <session-config>
+           <cookie-processor allow-equals-in-value="false" allow-http-seps-in-vo="false" allow-name-only="false" always-add-expires="true" forward-slash-is-separator="false"></cookie-processor>
+        </session-config>
+
+        <session-managers>
+            <session-manager name="default" class-name="com.bes.enterprise.webtier.session.DefaultManager">
+                <manager-properties>
+                   <property name="maxInactiveInterval" value="1800"/>
+                   <property name="reapInterval" value="60"/>
+                   <property name="maxActiveSessions" value="-1"/>
+                </manager-properties>
+                <session-id-generator jvm-route="" session-id-length="16"></session-id-generator>
+            </session-manager>
+        </session-managers>
+    </web-container>
+
+    <!-- ejb-container -->
+    <ejb-container http-channel-enabled="true" enabled="true">
+        <singleton-container access-timeout-in-seconds="30"/>
+        <stateless-container access-timeout-in-seconds="30" max-size="10" min-size="0" max-age-in-seconds="0" idle-timeout-in-seconds="0"/>
+        <stateful-container access-timeout-in-seconds="30" timeout-in-seconds="1200" frequency-in-seconds="60" capacity="1000" bulk-passivate="100" session-store="${com.bes.instanceRoot}/repository/session"/>
+        <mdb-container enabled="true" resource-adapter="jmsra" message-listener-interface="javax.jms.MessageListener" activation-spec-class="com.bes.mq.ra.BESMQActivationSpec" instance-limit="10" fail-on-unknow-activation-spec="true" />
+        <ejb-listener name="ejb-listener-1" enabled="true" address="0.0.0.0" port="3000" mode="BIO" receive-buffer-size="-1" send-buffer-size="-1" request-timeout="60" tcp-no-delay="true" backlog="200"  work-threads="200" max-threads="128" min-spare-threads="8" max-queue-size="4096" max-idle-time="120" request-timeout-warning="0" request-handle-buffer-size="8192"/>
+    </ejb-container>
+
+    <thread-pools>
+        <thread-pool name="admin-thread-pool" max-threads="128" min-spare-threads="4" max-queue-size="4096" max-idle-time="60000"/>
+        <thread-pool name="http-thread-pool" max-threads="128" min-spare-threads="8" max-queue-size="4096" max-idle-time="60000"/>
+    </thread-pools>
+
+    <!-- naming-service -->
+    <naming-service>
+    </naming-service>
+
+    <!-- monitor-service -->
+    <monitor-service enabled="false" persistence="false" sample-interval="5" data-online="90">
+        <monitor-module name="DataSource" enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="ProcessCPULoad"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="JVMMemory"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="ThreadPool"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="ApplicationSession"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="JVMFullGC"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="ClassLoading"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="Compilation"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="JVMMemoryPool"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="GarbageCollector"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="Runtime"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="OperatingSystem"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="BES"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="HttpListener"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="JcaThreadPool"  enabled="true" persistence="false" data-online="90"/>
+        <monitor-module name="JcaConnectionPool"  enabled="true" persistence="false" data-online="90"/>
+    </monitor-service>
+
+    <!-- health-check-service -->
+    <health-check-service enabled="false" check-interval="5" notification-way="JavaMail">
+        <health-check-module name="JVMMemory" enabled="true" threshold="80" />
+        <health-check-module name="ThreadPool" enabled="true" threshold="10" />
+        <health-check-module name="MachineMemory" enabled="true" threshold="80" />
+        <health-check-module name="CPU" enabled="true" threshold="80" />
+    </health-check-service>
+
+    <!-- security-service -->
+    <security-service lock-enabled="false" default-realm="file">
+        <auth-realm name="admin-realm" class-name="com.bes.enterprise.webtier.realm.UserDatabaseRealm" pathname="${com.bes.instanceRoot}/conf/security/admin-keyfile" />
+        <auth-realm name="file" class-name="com.bes.enterprise.webtier.realm.UserDatabaseRealm" pathname="${com.bes.instanceRoot}/conf/security/keyfile" />
+    </security-service>
+
+    <!-- transaction-service -->
+    <!--
+    <transaction-service>
+        <transaction-manager></transaction-manager>
+        <transaction-config></transaction-config>
+    </transaction-service>
+    -->
+
+    <!-- system-properties -->
+    <system-property name="com.bes.resource.leakDetect" value="false"/>
+    <system-property name="com.bes.resource.ejb.leakDetect" value="false"/>
+
+    <!-- system-property-encrypted -->
+    <system-property-encrypted name="javax.net.ssl.keyStorePassword" value="{AES}PrzBD+FLE0Wheq7AAaghXw=="/>
+    <system-property-encrypted name="javax.net.ssl.trustStorePassword" value="{AES}PrzBD+FLE0Wheq7AAaghXw=="/>
+
+    <!-- log-service -->
+    <log-service log-file="${com.bes.instanceRoot}/logs/server.log" rotation-enabled="true" rotation-time="0" max-history-files="10">
+        <module-log-level module-name="server" level="INFO" logger-names="com.bes.enterprise.appserver.common;com.bes.enterprise.appserver.webmodule.remote;com.bes.enterprise.ejb.server;com.bes.xbean"/>
+        <module-log-level module-name="core" level="INFO" logger-names="com.bes.enterprise.appserver.admin.launcher;com.bes.enterprise.appserver.startup;com.bes.patch;com.bes.appserv.lic"/>
+        <module-log-level module-name="configuration" level="INFO" logger-names="com.bes.enterprise.config;com.bes.enterprise.remoting;com.bes.enterprise.appserver.serverbeans"/>
+        <module-log-level module-name="web" level="INFO" logger-names="com.bes.enterprise.server.builder;com.bes.enterprise.web;com.bes.enterprise.webtier;org.apache.el;com.bes.enterprise.naming;com.bes.enterprise.webext;com.bes.enterprise.jasper;com.bes.web.sm"/>
+        <module-log-level module-name="ejb" level="INFO" logger-names="com.bes.enterprise.ejb;com.bes.enterprise.appserver.gatherconfig.ejbmodule.builder"/>
+        <module-log-level module-name="deployment" level="INFO" logger-names="com.bes.enterprise.appserv.deployment"/>
+        <module-log-level module-name="jdbc" level="INFO" logger-names="com.bes.enterprise.gjc;com.bes.enterprise.ejb.resource.jdbc;com.bes.enterprise.jdbc"/>
+        <module-log-level module-name="security" level="INFO" logger-names="com.bes.enterprise.webext.realm;com.bes.enterprise.ejb.core.security.jaas;com.bes.enterprise.webtier.realm"/>
+        <module-log-level module-name="log" level="INFO" logger-names="com.bes.enterprise.logging;com.bes.enterprise.jul;com.bes.enterprise.server.logging;com.bes.enterprise.ejb.log"/>
+        <module-log-level module-name="cli" level="INFO" logger-names="com.bes.enterprise.admin.command;com.bes.enterprise.admin.cli;com.bes.enterprise.command.api"/>
+        <module-log-level module-name="timer" level="INFO" logger-names="com.bes.enterprise.ejb.core.timer"/>
+        <module-log-level module-name="jmx" level="INFO" logger-names="com.bes.enterprise.admin.mbeanserver"/>
+        <module-log-level module-name="cdi" level="INFO" logger-names="com.bes.enterprise.ejb.cdi;com.bes.webbeans;com.bes.openwebbeans"/>
+        <module-log-level module-name="jpa" level="INFO" logger-names="com.bes.enterprise.ejb.core.cmp.jpa;com.bes.enterprise.ejb.jee.jpa;com.bes.enterprise.ejb.jpa;com.bes.enterprise.ejb.persistence"/>
+        <module-log-level module-name="transaction" level="INFO" logger-names="com.bes.enterprise.ejb.core.transaction;com.bes.enterprise.transaction"/>
+        <module-log-level module-name="jsf" level="INFO" logger-names="com.bes.enterprise.myfaces"/>
+        <module-log-level module-name="gmssl" level="WARNING" logger-names="com.bes.enterprise.cipher.jsse"/>
+        <module-log-level module-name="jms" level="INFO" logger-names="com.bes.mq;com.bes.mss;com.bes.enterprise.module"/>
+        <module-log-level module-name="connector" level="INFO" logger-names="com.bes.enterprise.connector"/>
+        <module-log-level module-name="diagnose" level="INFO" logger-names="com.bes.enterprise.appserv.monitor;com.bes.enterprise.appserv.healthcheck"/>
+    </log-service>
+
+    <!-- jmx-connector -->
+    <jmx-connector  enabled="true" address="0.0.0.0" port="6600" security-enabled="false" auth-realm-name="admin-realm">
+          <ssl keystore-file="${com.bes.instanceRoot}/conf/security/keystore.jks" key-alias="bes" key-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" keystore-type="JKS" truststore-file="${com.bes.instanceRoot}/conf/security/cacerts.jks" truststore-pass="{AES}PrzBD+FLE0Wheq7AAaghXw==" truststore-type="JKS" client-auth="false"
+                 ssl3-enabled="false" tls-enabled="true" tls11-enabled="true" tls12-enabled="true">
+            </ssl>
+    </jmx-connector>
+
+    <!-- java-config -->
+    <java-config debug-options="-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=0.0.0.0:9009" debug-enabled="false" java-home="${com.bes.javaRoot}">
+        <jvm-options>-XX:MaxMetaspaceSize=2048m</jvm-options>
+        <jvm-options>-XX:MetaspaceSize=128m</jvm-options>
+        <jvm-options>-server</jvm-options>
+        <jvm-options>-Djava.awt.headless=true</jvm-options>
+        <jvm-options>-XX:+UnlockDiagnosticVMOptions</jvm-options>
+        <jvm-options>-XX:+LogVMOutput</jvm-options>
+        <jvm-options>-XX:LogFile=${com.bes.instanceRoot}/logs/jvm.log</jvm-options>
+        <jvm-options>-Djava.endorsed.dirs=${com.bes.installRoot}/lib/endorsed</jvm-options>
+        <jvm-options>-Djava.security.policy=${com.bes.instanceRoot}/conf/security/server.policy</jvm-options>
+        <jvm-options>-Xmx4096m</jvm-options>
+        <jvm-options>-Xms512m</jvm-options>
+        <jvm-options>-Djavax.net.ssl.keyStore=${com.bes.instanceRoot}/conf/security/keystore.jks</jvm-options>
+        <jvm-options>-Djavax.net.ssl.trustStore=${com.bes.instanceRoot}/conf/security/cacerts.jks</jvm-options>
+        <jvm-options>-Djavax.net.ssl.certificateFile=${com.bes.instanceRoot}/conf/security/cert.pem</jvm-options>
+        <jvm-options>-Djavax.net.ssl.certificateKeyFile=${com.bes.instanceRoot}/conf/security/key.pem</jvm-options>
+        <jvm-options>-Djavax.net.ssl.certificateChainFile=${com.bes.instanceRoot}/conf/security/chain.pem</jvm-options>
+        <jvm-options>-Djava.ext.dirs=${com.bes.javaRoot}/lib/ext${path.separator}${com.bes.javaRoot}/jre/lib/ext${path.separator}${com.bes.installRoot}/lib/ext</jvm-options>
+        <jvm-options>-Djavax.xml.stream.XMLInputFactory=com.bes.wstx.stax.WstxInputFactory</jvm-options>
+        <jvm-options>-Djdbc.drivers=org.apache.derby.jdbc.ClientDriver</jvm-options>
+        <jvm-options>-DANTLR_USE_DIRECT_CLASS_LOADING=true</jvm-options>
+        <jvm-options>-Djava.net.preferIPv4Stack=true</jvm-options>
+        <jvm-options>-XX:NewRatio=2</jvm-options>
+        <jvm-options>-XX:+HeapDumpOnOutOfMemoryError</jvm-options>
+        <jvm-options>-Duser.timezone=Asia/Shanghai</jvm-options>
+    </java-config>
+
+    <!-- resources -->
+     <resources>
+        <resource-adapter resource-adapter-definition-name="BESMQResourceAdapter" resource-adapter-name="jmsra" object-type="system" thread-pool="default-thread-pool" >
+            <property name="ServerUrl" value="tcp://localhost:3200"/>
+            <property name="userName" value="admin"/>
+            <property name="password" value="{AES}H/eSUbYWJQOYQp7rbNMrVQ=="/>
+        </resource-adapter>
+        <jca-thread-pools>
+            <jca-thread-pool name="default-thread-pool" max-threads="128" min-spare-threads="4" max-queue-size="4096" max-idle-time="60000"/>
+        </jca-thread-pools>
+    </resources>
+
+    <jms-service enabled="false">
+        <system-usage>
+            <memory-usage limit="64"></memory-usage >
+            <store-usage limit="10240"></store-usage>
+            <temp-usage limit="1024"></temp-usage>
+        </system-usage>
+        <message-stores store-type="file">
+            <file-store journal-max-file-length="10" directory="${com.bes.mq.brokerRoot}/data/hsdb" enable-journal-disk-sync="true"></file-store>
+        </message-stores>
+        <policies>
+            <queue-policy name="defaultQueuePolicy" producer-flow-control="true" memory-limit="-1" flush-to-disk="true"></queue-policy>
+            <topic-policy name="defaultTopicPolicy" producer-flow-control="true" memory-limit="-1" flush-to-disk="true"></topic-policy>
+        </policies>
+    </jms-service>
+
+    <hotdeploy-config directory="${com.bes.instanceRoot}/hotdeploy" enabled="true" virtual-server="server" session-manager="default" watched-resources="*" check-interval="3000" jsp-precompile="false" delegate="false" />
+
+    <applications app-location="${com.bes.instanceRoot}/deployments/__internal" location="${com.bes.instanceRoot}/deployments">
+        <web-module name="admin-root" enable="true" location="${com.bes.installRoot}/lib/system/apps/admin-root" context-root="/" virtual-server="__admin" object-type="system"/>
+        <web-module name="console" enabled="false" location="${com.bes.installRoot}/lib/system/apps/console" context-root="/console"  virtual-server="__admin" object-type="system"/>
+        <web-module name="sysapp" enabled="true" location="${com.bes.installRoot}/lib/system/apps/sysapp" context-root="/sysapp"  virtual-server="__admin" object-type="system"/>
+    </applications>
+
+</server>

dmdb/Dockerfile

@@ -0,0 +1,29 @@
+FROM ubuntu:22.04
+
+ENV DM8_TMP_PATH="/dm8-tmp"
+
+RUN mkdir -p ${DM8_TMP_PATH}
+
+COPY DMInstall.bin ${DM8_TMP_PATH}/
+
+COPY install_setting.xml ${DM8_TMP_PATH}/
+
+COPY entrypoint.sh /entrypoint.sh
+
+RUN chmod +x ${DM8_TMP_PATH}/DMInstall.bin
+
+RUN chmod +x /entrypoint.sh
+
+RUN useradd -m dmdba
+
+RUN ${DM8_TMP_PATH}/DMInstall.bin -q ${DM8_TMP_PATH}/install_setting.xml
+
+RUN rm -rf ${DM8_TMP_PATH}
+
+RUN mkdir -p /init.db
+
+WORKDIR /
+
+EXPOSE 5236
+
+ENTRYPOINT ["sh","-c","/entrypoint.sh"]

dmdb/build.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+docker build -t dmdb:8 .

dmdb/entrypoint.sh

@@ -0,0 +1,56 @@
+#!/bin/bash
+set -e
+
+DM_PATH="/opt/dmdbms"
+
+DM_DATA_PATH="${DM_PATH}/data"
+
+DB_NAME="DAMENG"
+
+DM_INI_PATH="${DM_DATA_PATH}/${DB_NAME}/dm.ini"
+
+DM_INIT_PWD="${DM_INIT_PWD:-Aa123456}"
+
+DM_LICENSE_PATH="/license/dm.key"
+
+mkdir -p ${DM_DATA_PATH}
+
+chown -R dmdba ${DM_PATH}
+
+if [ ! -f "$DM_INI_PATH" ]; then
+  echo "初始化数据库..."
+  su - dmdba -c "${DM_PATH}/bin/dminit PATH=${DM_DATA_PATH} DB_NAME=${DB_NAME} SYSDBA_PWD=${DM_INIT_PWD} SYSAUDITOR_PWD=${DM_INIT_PWD}"
+
+  if -f "$DM_LICENSE_PATH"; then
+    echo "复制许可证..."
+    cp $DM_LICENSE_PATH ${DM_PATH}/bin/dm.key
+    chown dmdba ${DM_PATH}/bin/dm.key
+  fi
+
+  echo "启动 DM Server..."
+  su - dmdba -c "${DM_PATH}/bin/dmserver ${DM_INI_PATH} &"
+
+  echo "等待 DM Server 启动..."
+  until $DM_PATH/bin/disql SYSDBA/${DM_INIT_PWD}@localhost:5236 -e "select 1 from dual;" >/dev/null 2>&1; do
+      sleep 1
+  done
+
+  echo "DM server is ready."
+
+  echo "执行初始化 SQL..."
+  for sql_file in /init.db/*.sql; do
+      echo "执行 $sql_file..."
+      $DM_PATH/bin/disql SYSDBA/${DM_INIT_PWD}@localhost:5236 \`${sql_file}
+  done
+  echo "初始化完成."
+else
+  if -f "$DM_LICENSE_PATH"; then
+    echo "复制许可证..."
+    cp $DM_LICENSE_PATH ${DM_PATH}/bin/dm.key
+    chown dmdba ${DM_PATH}/bin/dm.key
+  fi
+  echo "数据库已存在，直接启动..."
+  su - dmdba -c "${DM_PATH}/bin/dmserver ${DM_INI_PATH} &"
+fi
+
+tail -f /dev/null

dmdb/install_setting.xml

@@ -0,0 +1,16 @@
+<?xml version="1.0"?>
+<DATABASE>
+
+<LANGUAGE>EN</LANGUAGE>
+<TIME_ZONE>+08:00</TIME_ZONE>
+<!-- key 文件路径 -->
+<KEY></KEY>
+<!--安装程序组件类型，取值范围：0、1、2，0 表示安装全部，1 表示安装服务器，2 表示安装
+客户端。缺省为 0 -->
+<INSTALL_TYPE>0</INSTALL_TYPE>
+<!--安装路径，不允许为空。合法的安装路径允许字符的范围是小写字母(a-z)、大写字母(A-Z)、
+数字(0-9)、下划线(_)、空格( )和中文 -->
+<INSTALL_PATH>/opt/dmdbms</INSTALL_PATH>
+<!--是否初始化库，取值范围：Y/N、y/n，不允许为空 -->
+<INIT_DB>n</INIT_DB>
+</DATABASE>

node/Dockerfile

@@ -0,0 +1,4 @@
+FROM node:20
+
+RUN npm install -g pnpm
+

node/build.sh

@@ -0,0 +1,3 @@
+#/bin/bash
+
+docker build -t node:20-pnpm .

rabbitmq/Dockerfile

@@ -0,0 +1,17 @@
+FROM rabbitmq:3.12-management
+
+# 复制 delayed message exchange 插件
+COPY plugins/rabbitmq_delayed_message_exchange-3.12.0.ez /opt/rabbitmq/plugins/
+
+# 复制 enabled_plugins 配置文件
+COPY enabled_plugins /etc/rabbitmq/enabled_plugins
+
+# 设置权限
+RUN chmod 644 /etc/rabbitmq/enabled_plugins && \
+    chmod 755 /opt/rabbitmq/plugins/rabbitmq_delayed_message_exchange-3.12.0.ez
+
+# 暴露端口
+EXPOSE 5672 15672
+
+# 启动 RabbitMQ
+CMD ["rabbitmq-server"]

rabbitmq/build.sh

@@ -0,0 +1,3 @@
+#/bin/bash
+
+docker build -t rabbitmq:3.12-management-local .

rabbitmq/enabled_plugins

@@ -0,0 +1 @@
+[rabbitmq_delayed_message_exchange,rabbitmq_management,rabbitmq_prometheus].

ubuntu-tools/Dockerfile

@@ -0,0 +1,7 @@
+FROM ubuntu:22.04
+
+RUN apt-get update \
+ && apt-get install -y --no-install-recommends gettext-base \
+ && rm -rf /var/lib/apt/lists/*
+
+CMD ["sh", "-c", "top"]

ubuntu-tools/build.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+docker build -t ubuntu-tools:22.04 .

ylgh-calculate/Dockerfile

@@ -0,0 +1,17 @@
+FROM openjdk:11
+
+ENV APP_DIR="/calculate"
+
+ENV JAVA_OPTS=""
+
+RUN mkdir -p ${APP_DIR}
+
+RUN mkdir -p ${APP_DIR}/logs
+
+ADD calculate.jar ${APP_DIR}/app.jar
+
+WORKDIR ${APP_DIR}
+
+EXPOSE 8080
+
+ENTRYPOINT ["sh", "-c", "java ${JAVA_OPTS} -Dspring.config.location=${APP_DIR}/application.properties -jar ${APP_DIR}/app.jar > ${APP_DIR}/logs/application.log 2>&1"]

ylgh-calculate/build.sh

@@ -0,0 +1,3 @@
+#/bin/bash
+
+docker build -t ylgh-calculate:1.0 .