@@ -14,7 +14,7 @@ This container image uses a simplified version of the Oracle NoSQL Database call
14
14
15
15
This container image configures an Oracle NoSQL Database secure configuration
16
16
1 . Create a KVlite secured configuration with the
17
- [ password complexity policy] ( https://docs.oracle.com/en/database/other-databases/nosql-database/24.3 /security/password-complexity-policies.html )
17
+ [ password complexity policy] ( https://docs.oracle.com/en/database/other-databases/nosql-database/25.1 /security/password-complexity-policies.html )
18
18
enabled
19
19
2 . Create the ` root ` user and the file ` user.security ` that contain property settings for the login as admin
20
20
3 . Generate the ` certificate.pem ` file allowing to establish a HTTP secure communication between the proxy and the driver
@@ -86,7 +86,7 @@ For example, to check the version of KVLite, use the `version` command:
86
86
87
87
``` shell
88
88
$ docker run --rm -ti --link kvlite:store oracle/nosql:ce-sec java -Xmx64m -Xms64m -jar lib/kvstore.jar version
89
- 24.4.9 2024-11-21 17:06 :06 UTC Build id: 95fa28ea4441 Edition: Community
89
+ 25.1.13 2025-06-06 17:17 :06 UTC Build id: f24717f901b5 Edition: Community
90
90
```
91
91
92
92
To check the size of the storage shard:
@@ -113,13 +113,13 @@ $ docker run --rm -ti -v secfiles:/shared_conf:ro --link kvlite:store oracle/nos
113
113
114
114
Pinging components of store kvstore based upon topology sequence # 14
115
115
10 partitions and 1 storage nodes
116
- Time: 2025-03-17 09:08:59 UTC Version: 24.4.9
116
+ Time: 2025-06-10 07:56:11 UTC Version: 25.1.13
117
117
Shard Status: healthy: 1 writable-degraded: 0 read-only: 0 offline: 0 total: 1
118
118
Admin Status: healthy
119
119
Zone [name= KVLite id= zn1 type= PRIMARY allowArbiters= false masterAffinity= false] RN Status: online: 1 read-only: 0 offline: 0
120
- Storage Node [sn1] on kvlite : 5000 Zone: [name= KVLite id= zn1 type= PRIMARY allowArbiters= false masterAffinity= false] Status: RUNNING Ver: 24.4.9 2024-11-21 17:06 :06 UTC Build id: 95fa28ea4441 Edition: Community isMasterBalanced: true serviceStartTime: 2025-03-17 09:08:18 UTC
121
- Admin [admin1] Status: RUNNING,MASTER serviceStartTime: 2025-03-17 09:08:22 UTC stateChangeTime: 2025-03-17 09:08:22 UTC availableStorageSize: 2 GB
122
- Rep Node [rg1-rn1] Status: RUNNING,MASTER sequenceNumber: 121 haPort: 5011 availableStorageSize: 9 GB storageType: HD serviceStartTime: 2025-03-17 09:08:24 UTC stateChangeTime: 2025-03-17 09:08:25 UTC
120
+ Storage Node [sn1] on proxy-nosql : 5000 Zone: [name= KVLite id= zn1 type= PRIMARY allowArbiters= false masterAffinity= false] Status: RUNNING Ver: 25.1.13 2025-06-06 17:17 :06 UTC Build id: f24717f901b5 Edition: Community isMasterBalanced: true serviceStartTime: 2025-06-10 07:54:30 UTC
121
+ Admin [admin1] Status: RUNNING,MASTER serviceStartTime: 2025-06-10 07:54:35 UTC stateChangeTime: 2025-06-10 07:54:34 UTC availableStorageSize: 2 GB
122
+ Rep Node [rg1-rn1] Status: RUNNING,MASTER sequenceNumber: 121 haPort: 5011 availableStorageSize: 9 GB storageType: HD serviceStartTime: 2025-06-10 07:54:36 UTC stateChangeTime: 2025-06-10 07:54:37 UTC
123
123
124
124
125
125
kv-> put kv -key /SomeKey -value SomeValue
@@ -191,6 +191,8 @@ set environment variable NODE_EXTRA_CA_CERTS
191
191
```` bash
192
192
docker cp kvlite:/kvroot/proxy/certificate.pem /mylocalpath
193
193
export NODE_EXTRA_CA_CERTS=/mylocalpath/certificate.pem
194
+ docker cp kvlite:/kvroot/proxy/driver.trust /mylocalpath
195
+ docker cp kvlite:/kvroot/proxy/pwdin /mylocalpath
194
196
````
195
197
196
198
The certificate created is using the hostname of the container as a Subject. The endpoint must be the same hostname of the container.
@@ -205,8 +207,8 @@ $ openssl x509 -text -noout -in /mylocalpath/certificate.pem | grep CN
205
207
Subject: CN=kvlite
206
208
207
209
````
208
- Note: the certicate can be customized in the script setup-http-proxy-sec.sh
209
- (e.g adding [SAN](https://docs.oracle.com/en/database/other-databases/nosql-database/24.3 /security/ssl-using-openssl.html) )
210
+ Note: the certicate can be customized using the KV_ADDITIONAL_SAN variable
211
+ (e.g adding [SAN](https://docs.oracle.com/en/database/other-databases/nosql-database/25.1 /security/ssl-using-openssl.html)
210
212
211
213
## Advanced Scenario: connecting to Oracle NoSQL CE from another host
212
214
@@ -221,9 +223,9 @@ be made via the Oracle NoSQL Database Proxy on the `KV_PROXY_PORT`.
221
223
First, install the latest version of Oracle NoSQL on your remote host:
222
224
223
225
```shell
224
- KV_VERSION=24.4.9
226
+ KV_VERSION=25.1.13
225
227
rm -rf kv-$KV_VERSION
226
- DOWNLOAD_ROOT=http ://download.oracle. com/otn-pub/otn_software/ nosql-database
228
+ DOWNLOAD_ROOT="https ://github. com/oracle/ nosql/releases/download/v${KV_VERSION}/"
227
229
DOWNLOAD_FILE="kv-ce-${KV_VERSION}.zip"
228
230
DOWNLOAD_LINK="${DOWNLOAD_ROOT}/${DOWNLOAD_FILE}"
229
231
curl -OLs $DOWNLOAD_LINK
@@ -404,7 +406,7 @@ number used for the image tag:
404
406
405
407
406
408
```shell
407
- KV_VERSION=24.3.9 docker build --build-arg "$KV_VERSION" --tag "oracle/nosql-ce-sec:$KV_VERSION" .
409
+ KV_VERSION=25.1.13 docker build --build-arg "$KV_VERSION" --tag "oracle/nosql-ce-sec:$KV_VERSION" .
408
410
```
409
411
410
412
## More information
@@ -431,5 +433,5 @@ Copyright (c) 2017, 2025 Oracle and/or its affiliates.
431
433
432
434
[NOSQL]: http://www.oracle.com/technetwork/database/database-technologies/nosqldb/overview/index.html
433
435
[DOCS]: https://docs.oracle.com/en/database/other-databases/nosql-database/index.html
434
- [Apache-2.0]: https://docs.oracle. com/en/database/other-databases/ nosql-database/24.4/license/apache-license.html
436
+ [Apache-2.0]: https://github. com/oracle/ nosql/blob/main/LICENSE.txt
435
437
[GraalVM-License]: https://github.com/graalvm/container/blob/master/LICENSE.md
0 commit comments