
sonarqube
Quick reference
Maintained by: SonarSource
Where to get help: the SonarSource Community forum, the Docker Community Forums, the Docker Community Slack, or Stack Overflow
Supported tags and respective Dockerfile
links
7.9.3-community
,7.9-community
,lts
8.3.1-community
,8.3-community
,8-community
,community
,latest
8.3.1-developer
,8.3-developer
,8-developer
,developer
8.3.1-enterprise
,8.3-enterprise
,8-enterprise
,enterprise
Quick reference (cont.)
Where to file issues: https://github.com/SonarSource/docker-sonarqube/issues
Published image artifact details: repo-info repo's
repos/sonarqube/
directory (history) (image metadata, transfer size, etc)Image updates: official-images PRs with label
library/sonarqube
official-images repo'slibrary/sonarqube
file (history)Source of this description: docs repo's
sonarqube/
directory (history)
What is SonarQube?
SonarQube is an open source product for continuous inspection of code quality.
How to use this image
Here you'll find the Docker images for the Community Edition, Developer Edition, and Enterprise Edition of SonarQube.
Docker Host Requirements
Because SonarQube uses an embedded Elasticsearch, make sure that your Docker host configuration complies with the Elasticsearch production mode requirements and File Descriptors configuration.
For example, on Linux, you can set the recommended values for the current session by running the following commands as root on the host:
sysctl -w vm.max_map_count=262144
sysctl -w fs.file-max=65536
ulimit -n 65536
ulimit -u 4096
Get Started in Two Minutes Guide
To quickly run a demo instance, see Using Docker on the Get Started in Two Minutes Guide page. When you are ready to move to a more sustainable setup, take some time to read the Configuration section below.
Configuration
Database
By default, the image will use an embedded H2 database that is not suited for production.
Warning: Only a single instance of SonarQube can connect to a database schema. If you're using a Docker Swarm or Kubernetes, make sure that multiple SonarQube instances are never running on the same database schema simultaneously. This will cause SonarQube to behave unpredictably and data will be corrupted. There is no safeguard until SONAR-10362.
Set up a database by following the "Installing the Database" section of https://docs.sonarqube.org/latest/setup/install-server/.
Use volumes
We recommend creating volumes for the following directories:
/opt/sonarqube/conf
: for Version 7.9.x only, configuration files, such assonar.properties
./opt/sonarqube/data
: data files, such as the embedded H2 database and Elasticsearch indexes/opt/sonarqube/logs
: contains SonarQube logs about access, web process, CE process, Elasticsearch logs/opt/sonarqube/extensions
: plugins, such as language analyzers
Warning: You cannot use the same volumes on multiple instances of SonarQube.
First Installation
For installation instructions, see Installing the Server from the Docker Image on the Install the Server page.
Upgrading
For upgrade instructions, see Upgrading from the Docker Image on the Upgrade the Server page.
Advanced configuration
Customized image
In some environments, it may make more sense to prepare a custom image containing your configuration. A Dockerfile
to achieve this may be as simple as:
FROM sonarqube:8.2-community
COPY sonar.properties /opt/sonarqube/conf/
You could then build and try the image with something like:
$ docker build --tag=sonarqube-custom .
$ docker run -ti sonarqube-custom
Avoid hard termination of SonarQube
Starting from SonarQube 7.8, SonarQube stops gracefully, waiting for any tasks in progress to finish. Waiting for in-progress tasks to finish can take a large amount of time which the docker does not expect by default when stopping. To avoid having the SonarQube instance killed by the Docker daemon after 10 seconds, it is best to configure a timeout to stop the container with --stop-timeout
. For example:
docker run --stop-timeout 3600 sonarqube
Administration
The administration guide can be found here.
License
View license information for the software contained in this image.
As with all Docker images, these likely also contain other software which may be under other licenses (such as Bash, etc from the base distribution, along with any direct or indirect dependencies of the primary software being contained).
Some additional license information which was able to be auto-detected might be found in the repo-info
repository's sonarqube/
directory.
As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within.