/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.7" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:7899936d8a255ef23a03d65107dd50f0ce4a76df58676bb1ea68c1d8f5eabde0 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /usr/share/buildinfo/content-sets.json

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /root/buildinfo/content_manifests/content-sets.json

/bin/sh -c #(nop) COPY file:b64f911bc23faf159ec29ad1e64fddab46c614bc74ee27e80c6fc4beab268d18 in /usr/share/buildinfo/labels.json

/bin/sh -c #(nop) COPY file:b64f911bc23faf159ec29ad1e64fddab46c614bc74ee27e80c6fc4beab268d18 in /root/buildinfo/labels.json

/bin/sh -c #(nop) LABEL "architecture"="aarch64" "vcs-type"="git" "vcs-ref"="21849199b7179dc3074812b8e24698ec609d6a5c" "org.opencontainers.image.revision"="21849199b7179dc3074812b8e24698ec609d6a5c" "build-date"="2026-02-05T04:59:37Z" "org.opencontainers.image.created"="2026-02-05T04:59:37Z" "release"="1770267347"org.opencontainers.image.revision=21849199b7179dc3074812b8e24698ec609d6a5c,org.opencontainers.image.created=2026-02-05T04:59:37Z

RUN /bin/sh -c set -eux; arch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "${arch}" in 'x86_64') tini_url="https://github.com/krallin/tini/releases/download/v0.19.0/tini"; tini_sha="93dcc18adc78c65a028a84799ecf8ad40c936fdfc5f2a57b1acda5a8117fa82c"; ;; 'aarch64') tini_url="https://github.com/krallin/tini/releases/download/v0.19.0/tini-arm64"; tini_sha="07952557df20bfd2a95f9bef198b445e006171969499a1d361bd9e6f8e5e0e81"; ;; *) echo >&2 "Neo4j does not currently have a docker image for architecture $arch"; exit 1 ;; esac; microdnf install -y --nodocs findutils gcc git gzip hostname java-21-openjdk-headless jq make procps shadow-utils tar wget which; wget -q ${tini_url} -O /usr/bin/tini; wget -q ${tini_url}.asc -O tini.asc; echo "${tini_sha}" /usr/bin/tini | sha256sum -c --strict --quiet; chmod a+x /usr/bin/tini; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 595E85A6B1B4779EA4DAAEC70B588DFF0527A9B7 B42F6819007F00F88E364FD4036A9C25BF357DD4; gpg --batch --verify tini.asc /usr/bin/tini; git clone https://github.com/ncopa/su-exec.git; cd su-exec; git checkout 4c3bb42b093f14da70d8ab924b487ccfbb1397af; echo d6c40440609a23483f12eb6295b5191e94baf08298a856bab6e15b10c3b82891 su-exec.c | sha256sum -c; echo 2a87af245eb125aca9305a0b1025525ac80825590800f047419dc57bba36b334 Makefile | sha256sum -c; make; mv /su-exec/su-exec /usr/bin/su-exec; gpgconf --kill all; rm -rf "$GNUPGHOME" /tini.asc /su-exec; microdnf remove -y git* perl* make gcc glibc-headers glibc-devel libxcrypt-devel; microdnf clean all # buildkit

ENV NEO4J_SHA256=fd9376186034a84eeca384971b2e9e3e80f8e41166529843f49c48e390a48694 NEO4J_TARBALL=neo4j-community-2026.01.3-unix.tar.gz NEO4J_EDITION=community NEO4J_HOME=/var/lib/neo4j LANG=C.UTF-8

ARG NEO4J_URI=https://dist.neo4j.org/neo4j-community-2026.01.3-unix.tar.gz

COPY ./local-package/* /startup/ # buildkit

RUN |1 NEO4J_URI=https://dist.neo4j.org/neo4j-community-2026.01.3-unix.tar.gz /bin/sh -c set -eux; groupadd --gid 7474 --system neo4j && useradd --uid 7474 --system --no-create-home --home "${NEO4J_HOME}" --gid neo4j neo4j; curl --fail --silent --show-error --location --remote-name ${NEO4J_URI}; echo "${NEO4J_SHA256} ${NEO4J_TARBALL}" | sha256sum -c --strict --quiet; tar --extract --file ${NEO4J_TARBALL} --directory /var/lib; mv /var/lib/neo4j-* "${NEO4J_HOME}"; rm ${NEO4J_TARBALL}; sed -i 's/Package Type:.*/Package Type: docker ubi9/' $NEO4J_HOME/packaging_info; mv /startup/neo4j-admin-report.sh "${NEO4J_HOME}"/bin/neo4j-admin-report; mv "${NEO4J_HOME}"/data /data; mv "${NEO4J_HOME}"/logs /logs; chown -R neo4j:neo4j /data; chmod -R 777 /data; chown -R neo4j:neo4j /logs; chmod -R 777 /logs; chown -R neo4j:neo4j "${NEO4J_HOME}"; chmod -R 777 "${NEO4J_HOME}"; chmod -R 755 "${NEO4J_HOME}/bin"; ln -s /data "${NEO4J_HOME}"/data; ln -s /logs "${NEO4J_HOME}"/logs # buildkit

ENV PATH=/var/lib/neo4j/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

WORKDIR /var/lib/neo4j

VOLUME [/data /logs]

EXPOSE map[7473/tcp:{} 7474/tcp:{} 7687/tcp:{}]

ENTRYPOINT ["tini" "-g" "--" "/startup/docker-entrypoint.sh"]

CMD ["neo4j"]