/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi9-minimal-container" name="ubi9/ubi-minimal" version="9.7" cpe="cpe:/a:redhat:enterprise_linux:9::appstream" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 9."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 9 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel9"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:ac0ab1292a52ccb276077ed994531e1a3deef7d271c3502d95032264a0448d19 in /

/bin/sh -c #(nop) COPY file:1376702515d596f414e3aa494e0daa6d408a6d2475c4aeca96bf9392f5287f69 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /usr/share/buildinfo/content-sets.json

/bin/sh -c #(nop) COPY file:93583a9ebbaeff1e36b48820b647eea1eef523f6627dacfb0b21af79f5a41b35 in /root/buildinfo/content_manifests/content-sets.json

/bin/sh -c #(nop) COPY file:b6e9611fd18f4ab100ec73ea6037b1118108a414096af83dfb78d47ad0a2b249 in /usr/share/buildinfo/labels.json

/bin/sh -c #(nop) COPY file:b6e9611fd18f4ab100ec73ea6037b1118108a414096af83dfb78d47ad0a2b249 in /root/buildinfo/labels.json

/bin/sh -c #(nop) LABEL "architecture"="aarch64" "vcs-type"="git" "vcs-ref"="0ced2bbee24d5463d4530756a57f8db895246c48" "org.opencontainers.image.revision"="0ced2bbee24d5463d4530756a57f8db895246c48" "build-date"="2026-02-17T16:45:31Z" "org.opencontainers.image.created"="2026-02-17T16:45:31Z" "release"="1771346502"org.opencontainers.image.revision=0ced2bbee24d5463d4530756a57f8db895246c48,org.opencontainers.image.created=2026-02-17T16:45:31Z

RUN /bin/sh -c set -eux; arch="$(rpm --query --queryformat='%{ARCH}' rpm)"; case "${arch}" in 'x86_64') tini_url="https://github.com/krallin/tini/releases/download/v0.19.0/tini"; tini_sha="93dcc18adc78c65a028a84799ecf8ad40c936fdfc5f2a57b1acda5a8117fa82c"; ;; 'aarch64') tini_url="https://github.com/krallin/tini/releases/download/v0.19.0/tini-arm64"; tini_sha="07952557df20bfd2a95f9bef198b445e006171969499a1d361bd9e6f8e5e0e81"; ;; *) echo >&2 "Neo4j does not currently have a docker image for architecture $arch"; exit 1 ;; esac; microdnf install -y --nodocs findutils gcc git gzip hostname java-21-openjdk-headless jq make procps shadow-utils tar wget which; wget -q ${tini_url} -O /usr/bin/tini; wget -q ${tini_url}.asc -O tini.asc; echo "${tini_sha}" /usr/bin/tini | sha256sum -c --strict --quiet; chmod a+x /usr/bin/tini; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 595E85A6B1B4779EA4DAAEC70B588DFF0527A9B7 B42F6819007F00F88E364FD4036A9C25BF357DD4; gpg --batch --verify tini.asc /usr/bin/tini; git clone https://github.com/ncopa/su-exec.git; cd su-exec; git checkout 4c3bb42b093f14da70d8ab924b487ccfbb1397af; echo d6c40440609a23483f12eb6295b5191e94baf08298a856bab6e15b10c3b82891 su-exec.c | sha256sum -c; echo 2a87af245eb125aca9305a0b1025525ac80825590800f047419dc57bba36b334 Makefile | sha256sum -c; make; mv /su-exec/su-exec /usr/bin/su-exec; gpgconf --kill all; rm -rf "$GNUPGHOME" /tini.asc /su-exec; microdnf remove -y git* perl* make gcc glibc-headers glibc-devel libxcrypt-devel; microdnf clean all # buildkit

ENV NEO4J_SHA256=f026977b1559a9a5e796faf6b0d3da3ecf8fae4d2bfb3a3c01ce9980f8010de2 NEO4J_TARBALL=neo4j-community-2026.01.4-unix.tar.gz NEO4J_EDITION=community NEO4J_HOME=/var/lib/neo4j LANG=C.UTF-8

ARG NEO4J_URI=https://dist.neo4j.org/neo4j-community-2026.01.4-unix.tar.gz

COPY ./local-package/* /startup/ # buildkit

RUN |1 NEO4J_URI=https://dist.neo4j.org/neo4j-community-2026.01.4-unix.tar.gz /bin/sh -c set -eux; groupadd --gid 7474 --system neo4j && useradd --uid 7474 --system --no-create-home --home "${NEO4J_HOME}" --gid neo4j neo4j; curl --fail --silent --show-error --location --remote-name ${NEO4J_URI}; echo "${NEO4J_SHA256} ${NEO4J_TARBALL}" | sha256sum -c --strict --quiet; tar --extract --file ${NEO4J_TARBALL} --directory /var/lib; mv /var/lib/neo4j-* "${NEO4J_HOME}"; rm ${NEO4J_TARBALL}; sed -i 's/Package Type:.*/Package Type: docker ubi9/' $NEO4J_HOME/packaging_info; mv /startup/neo4j-admin-report.sh "${NEO4J_HOME}"/bin/neo4j-admin-report; mv "${NEO4J_HOME}"/data /data; mv "${NEO4J_HOME}"/logs /logs; chown -R neo4j:neo4j /data; chmod -R 777 /data; chown -R neo4j:neo4j /logs; chmod -R 777 /logs; chown -R neo4j:neo4j "${NEO4J_HOME}"; chmod -R 777 "${NEO4J_HOME}"; chmod -R 755 "${NEO4J_HOME}/bin"; ln -s /data "${NEO4J_HOME}"/data; ln -s /logs "${NEO4J_HOME}"/logs # buildkit

ENV PATH=/var/lib/neo4j/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

WORKDIR /var/lib/neo4j

VOLUME [/data /logs]

EXPOSE map[7473/tcp:{} 7474/tcp:{} 7687/tcp:{}]

ENTRYPOINT ["tini" "-g" "--" "/startup/docker-entrypoint.sh"]

CMD ["neo4j"]