/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.7" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:5911db9f5450531429169fb3bc4d156204437f84bcda3e7b49af077219ecb148 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /usr/share/buildinfo/content-sets.json

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /root/buildinfo/content_manifests/content-sets.json

/bin/sh -c #(nop) COPY file:57f009d4f4cb77bc277e064b341ab6fdc0d69d350d43f8a21909f2baad049960 in /usr/share/buildinfo/labels.json

/bin/sh -c #(nop) COPY file:57f009d4f4cb77bc277e064b341ab6fdc0d69d350d43f8a21909f2baad049960 in /root/buildinfo/labels.json

/bin/sh -c #(nop) LABEL "architecture"="aarch64" "vcs-type"="git" "vcs-ref"="812a20485e9d8d728e95b468c2886da21352b9fc" "org.opencontainers.image.revision"="812a20485e9d8d728e95b468c2886da21352b9fc" "build-date"="2026-01-22T04:46:44Z" "org.opencontainers.image.created"="2026-01-22T04:46:44Z" "release"="1769056855"org.opencontainers.image.revision=812a20485e9d8d728e95b468c2886da21352b9fc,org.opencontainers.image.created=2026-01-22T04:46:44Z

RUN /bin/sh -c set -eux; arch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "${arch}" in 'x86_64') tini_url="https://github.com/krallin/tini/releases/download/v0.19.0/tini"; tini_sha="93dcc18adc78c65a028a84799ecf8ad40c936fdfc5f2a57b1acda5a8117fa82c"; ;; 'aarch64') tini_url="https://github.com/krallin/tini/releases/download/v0.19.0/tini-arm64"; tini_sha="07952557df20bfd2a95f9bef198b445e006171969499a1d361bd9e6f8e5e0e81"; ;; *) echo >&2 "Neo4j does not currently have a docker image for architecture $arch"; exit 1 ;; esac; microdnf install -y --nodocs findutils gcc git gzip hostname java-17-openjdk-headless jq make procps shadow-utils tar wget which; wget -q ${tini_url} -O /usr/bin/tini; wget -q ${tini_url}.asc -O tini.asc; echo "${tini_sha}" /usr/bin/tini | sha256sum -c --strict --quiet; chmod a+x /usr/bin/tini; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 595E85A6B1B4779EA4DAAEC70B588DFF0527A9B7 B42F6819007F00F88E364FD4036A9C25BF357DD4; gpg --batch --verify tini.asc /usr/bin/tini; git clone https://github.com/ncopa/su-exec.git; cd su-exec; git checkout 4c3bb42b093f14da70d8ab924b487ccfbb1397af; echo d6c40440609a23483f12eb6295b5191e94baf08298a856bab6e15b10c3b82891 su-exec.c | sha256sum -c; echo 2a87af245eb125aca9305a0b1025525ac80825590800f047419dc57bba36b334 Makefile | sha256sum -c; make; mv /su-exec/su-exec /usr/bin/su-exec; gpgconf --kill all; rm -rf "$GNUPGHOME" /tini.asc /su-exec; microdnf remove -y git* perl* make gcc glibc-headers glibc-devel libxcrypt-devel; microdnf clean all # buildkit

ENV NEO4J_SHA256=38e5643bf76a8fa714421be8be2b12d6280b7f891b2d29ae16172e57de0e9432 NEO4J_TARBALL=neo4j-community-5.26.20-unix.tar.gz NEO4J_EDITION=community NEO4J_HOME=/var/lib/neo4j LANG=C.UTF-8

ARG NEO4J_URI=https://dist.neo4j.org/neo4j-community-5.26.20-unix.tar.gz

COPY ./local-package/* /startup/ # buildkit

RUN |1 NEO4J_URI=https://dist.neo4j.org/neo4j-community-5.26.20-unix.tar.gz /bin/sh -c set -eux; groupadd --gid 7474 --system neo4j && useradd --uid 7474 --system --no-create-home --home "${NEO4J_HOME}" --gid neo4j neo4j; curl --fail --silent --show-error --location --remote-name ${NEO4J_URI}; echo "${NEO4J_SHA256} ${NEO4J_TARBALL}" | sha256sum -c --strict --quiet; tar --extract --file ${NEO4J_TARBALL} --directory /var/lib; mv /var/lib/neo4j-* "${NEO4J_HOME}"; rm ${NEO4J_TARBALL}; sed -i 's/Package Type:.*/Package Type: docker ubi9/' $NEO4J_HOME/packaging_info; mv /startup/neo4j-admin-report.sh "${NEO4J_HOME}"/bin/neo4j-admin-report; mv "${NEO4J_HOME}"/data /data; mv "${NEO4J_HOME}"/logs /logs; chown -R neo4j:neo4j /data; chmod -R 777 /data; chown -R neo4j:neo4j /logs; chmod -R 777 /logs; chown -R neo4j:neo4j "${NEO4J_HOME}"; chmod -R 777 "${NEO4J_HOME}"; chmod -R 755 "${NEO4J_HOME}/bin"; ln -s /data "${NEO4J_HOME}"/data; ln -s /logs "${NEO4J_HOME}"/logs # buildkit

ENV PATH=/var/lib/neo4j/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

WORKDIR /var/lib/neo4j

VOLUME [/data /logs]

EXPOSE map[7473/tcp:{} 7474/tcp:{} 7687/tcp:{}]

ENTRYPOINT ["tini" "-g" "--" "/startup/docker-entrypoint.sh"]

CMD ["neo4j"]