/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.6" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:a993e2e2ad3cf26c4ca4b583710869f381ee3e7df7d41715015a96348230e455 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /usr/share/buildinfo/content-sets.json

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /root/buildinfo/content_manifests/content-sets.json

/bin/sh -c #(nop) COPY file:85de04d2096a64069474160b53ad5f2cfb18b7e3f3ec2a8d26b3946f32e004c9 in /root/buildinfo/labels.json

/bin/sh -c #(nop) LABEL "architecture"="aarch64" "vcs-type"="git" "vcs-ref"="d1b15a34ce69ea214e1d32f1f501304f6b8b8c59" "org.opencontainers.image.revision"="d1b15a34ce69ea214e1d32f1f501304f6b8b8c59" "build-date"="2025-10-15T08:10:36Z" "release"="1760515502"org.opencontainers.image.revision=d1b15a34ce69ea214e1d32f1f501304f6b8b8c59

RUN /bin/sh -c set -eux; arch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "${arch}" in 'x86_64') tini_url="https://github.com/krallin/tini/releases/download/v0.19.0/tini"; tini_sha="93dcc18adc78c65a028a84799ecf8ad40c936fdfc5f2a57b1acda5a8117fa82c"; ;; 'aarch64') tini_url="https://github.com/krallin/tini/releases/download/v0.19.0/tini-arm64"; tini_sha="07952557df20bfd2a95f9bef198b445e006171969499a1d361bd9e6f8e5e0e81"; ;; *) echo >&2 "Neo4j does not currently have a docker image for architecture $arch"; exit 1 ;; esac; microdnf install -y --nodocs findutils gcc git gzip hostname java-21-openjdk-headless jq make procps shadow-utils tar wget which; wget -q ${tini_url} -O /usr/bin/tini; wget -q ${tini_url}.asc -O tini.asc; echo "${tini_sha}" /usr/bin/tini | sha256sum -c --strict --quiet; chmod a+x /usr/bin/tini; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 595E85A6B1B4779EA4DAAEC70B588DFF0527A9B7 B42F6819007F00F88E364FD4036A9C25BF357DD4; gpg --batch --verify tini.asc /usr/bin/tini; git clone https://github.com/ncopa/su-exec.git; cd su-exec; git checkout 4c3bb42b093f14da70d8ab924b487ccfbb1397af; echo d6c40440609a23483f12eb6295b5191e94baf08298a856bab6e15b10c3b82891 su-exec.c | sha256sum -c; echo 2a87af245eb125aca9305a0b1025525ac80825590800f047419dc57bba36b334 Makefile | sha256sum -c; make; mv /su-exec/su-exec /usr/bin/su-exec; gpgconf --kill all; rm -rf "$GNUPGHOME" /tini.asc /su-exec; microdnf remove -y git* perl* make gcc glibc-headers glibc-devel libxcrypt-devel; microdnf clean all # buildkit

ENV NEO4J_SHA256=0b81f4601987925d0a7a844b4206fc75fefb8cd989bc95b00f1ecbf38afc3e4f NEO4J_TARBALL=neo4j-enterprise-2025.09.0-unix.tar.gz NEO4J_EDITION=enterprise NEO4J_HOME=/var/lib/neo4j LANG=C.UTF-8

ARG NEO4J_URI=https://dist.neo4j.org/neo4j-enterprise-2025.09.0-unix.tar.gz

COPY ./local-package/* /startup/ # buildkit

RUN |1 NEO4J_URI=https://dist.neo4j.org/neo4j-enterprise-2025.09.0-unix.tar.gz /bin/sh -c set -eux; groupadd --gid 7474 --system neo4j && useradd --uid 7474 --system --no-create-home --home "${NEO4J_HOME}" --gid neo4j neo4j; curl --fail --silent --show-error --location --remote-name ${NEO4J_URI}; echo "${NEO4J_SHA256} ${NEO4J_TARBALL}" | sha256sum -c --strict --quiet; tar --extract --file ${NEO4J_TARBALL} --directory /var/lib; mv /var/lib/neo4j-* "${NEO4J_HOME}"; rm ${NEO4J_TARBALL}; sed -i 's/Package Type:.*/Package Type: docker ubi9/' $NEO4J_HOME/packaging_info; mv /startup/neo4j-admin-report.sh "${NEO4J_HOME}"/bin/neo4j-admin-report; mv "${NEO4J_HOME}"/data /data; mv "${NEO4J_HOME}"/logs /logs; chown -R neo4j:neo4j /data; chmod -R 777 /data; chown -R neo4j:neo4j /logs; chmod -R 777 /logs; chown -R neo4j:neo4j "${NEO4J_HOME}"; chmod -R 777 "${NEO4J_HOME}"; chmod -R 755 "${NEO4J_HOME}/bin"; ln -s /data "${NEO4J_HOME}"/data; ln -s /logs "${NEO4J_HOME}"/logs # buildkit

ENV PATH=/var/lib/neo4j/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

WORKDIR /var/lib/neo4j

VOLUME [/data /logs]

EXPOSE map[7473/tcp:{} 7474/tcp:{} 7687/tcp:{}]

ENTRYPOINT ["tini" "-g" "--" "/startup/docker-entrypoint.sh"]

CMD ["neo4j"]