podman-compose.yml

---
version: "3"
networks:
  rac_pub1_nw:
    external: true
  rac_priv1_nw:
    external: true
  rac_priv2_nw:
    external: true
secrets:
  pwdsecret:
    external: pwdsecret
  keysecret:
    external: keysecret
volumes:
  racstorage:
    external: true
services:
  rac-dnsserver:
    container_name: ${DNS_CONTAINER_NAME}
    hostname: ${DNS_HOST_NAME}
    image: ${DNS_IMAGE_NAME}
    dns_search: ${DNS_DOMAIN}
    environment:
      SETUP_DNS_CONFIG_FILES: "setup_true"
      DOMAIN_NAME: ${DNS_DOMAIN}
      RAC_NODE_NAME_PREFIXP: ${RAC_NODE_NAME_PREFIXP}
      WEBMIN_ENABLED: false
      SETUP_DNS_CONFIG_FILES: "setup_true"
    cap_add:
      - AUDIT_WRITE
    healthcheck:
      test: ["CMD-SHELL", "pgrep named"]
      interval: ${HEALTHCHECK_INTERVAL}
      timeout: ${HEALTHCHECK_TIMEOUT}
      retries: ${HEALTHCHECK_RETRIES}
    privileged: false
    networks:
      rac_pub1_nw:
        ipv4_address: ${DNS_PUBLIC_IP}
  racnode-storage:
    container_name: ${STORAGE_CONTAINER_NAME}
    hostname: ${STORAGE_HOST_NAME}
    image: ${STORAGE_IMAGE_NAME}
    dns_search: ${DNS_DOMAIN}
    volumes:
      - ${NFS_STORAGE_VOLUME}:/oradata
    cap_add:
      - SYS_ADMIN
      - AUDIT_WRITE
      - NET_ADMIN
    restart: always
    healthcheck:
      test:
        - CMD-SHELL
        - /bin/bash -c "ls -lrt /oradata/ && showmount -e | grep '/oradata'"
      interval: ${HEALTHCHECK_INTERVAL}
      timeout: ${HEALTHCHECK_TIMEOUT}
      retries: ${HEALTHCHECK_RETRIES}
    networks:
      rac_pub1_nw:
        ipv4_address: ${STORAGE_PUBLIC_IP}
  racnodep1:
    container_name: ${RACNODE1_CONTAINER_NAME}
    hostname: ${RACNODE1_HOST_NAME}
    image: ${RAC_IMAGE_NAME}
    restart: always
    dns: ${DNS_PUBLIC_IP}
    dns_search: ${DNS_DOMAIN}
    shm_size: 4G
    secrets:
      - pwdsecret
      - keysecret
    volumes:
      - racstorage:/oradata
    environment:
      DNS_SERVERS: ${DNS_PUBLIC_IP}
      CRS_PRIVATE_IP1: ${RACNODE1_CRS_PRIVATE_IP1}
      CRS_PRIVATE_IP2: ${RACNODE1_CRS_PRIVATE_IP2}
      OP_TYPE: setuprac
      INSTALL_NODE: ${INSTALL_NODE}
      CRS_NODES: ${CRS_NODES}
      SCAN_NAME: ${SCAN_NAME}
      CRS_ASM_DEVICE_LIST: ${CRS_ASM_DEVICE_LIST}
      CRS_ASM_DISCOVERY_STRING: "/oradata"
      INIT_SGA_SIZE: 3G
      INIT_PGA_SIZE: 2G
      DB_PWD_FILE: pwdsecret
      PWD_KEY: keysecret
      CMAN_HOST: ${CMAN_HOST_NAME}
      CMAN_PORT: 1521
      ASM_ON_NAS: True
      DB_SERVICE: ${DB_SERVICE}
    sysctls:
        - kernel.shmall=2097152
        - kernel.shmmax=8589934592
        - kernel.shmmni=4096
        - 'kernel.sem=250 32000 100 128'
        - 'net.ipv4.conf.eth1.rp_filter=2'
        - 'net.ipv4.conf.eth2.rp_filter=2'
    ulimits:
      rtprio: 99
    cap_add:
      - SYS_RESOURCE
      - NET_ADMIN
      - SYS_NICE
      - AUDIT_WRITE
      - AUDIT_CONTROL
      - NET_RAW 
    networks:
      - rac_pub1_nw
      - rac_priv1_nw
      - rac_priv2_nw
    healthcheck:
      test: ["CMD", "/bin/python3", "/opt/scripts/startup/scripts/main.py", "--checkracstatus"]
      interval: ${HEALTHCHECK_INTERVAL}
      timeout: ${HEALTHCHECK_TIMEOUT}
      retries: ${HEALTHCHECK_RETRIES}
  racnodep2:
    container_name: ${RACNODE2_CONTAINER_NAME}
    hostname: ${RACNODE2_HOST_NAME}
    image: ${RAC_IMAGE_NAME}
    restart: always
    dns: ${DNS_PUBLIC_IP}
    dns_search: ${DNS_DOMAIN}
    shm_size: 4G
    secrets:
      - pwdsecret
      - keysecret
    volumes:
      - racstorage:${CRS_ASM_DISCOVERY_STRING}
    environment:
      DNS_SERVERS: ${DNS_PUBLIC_IP}
      CRS_PRIVATE_IP1: ${RACNODE2_CRS_PRIVATE_IP1}
      CRS_PRIVATE_IP2: ${RACNODE2_CRS_PRIVATE_IP2}
      INSTALL_NODE: ${INSTALL_NODE}
      CRS_NODES: ${CRS_NODES}
      SCAN_NAME: ${SCAN_NAME}
      CRS_ASM_DEVICE_LIST: ${CRS_ASM_DEVICE_LIST}
      CRS_ASM_DISCOVERY_STRING: "/oradata"
      INIT_SGA_SIZE: 3G
      INIT_PGA_SIZE: 2G
      DB_PWD_FILE: pwdsecret
      PWD_KEY: keysecret
      CMAN_HOST: ${CMAN_HOST_NAME}
      CMAN_PORT: 1521
      ASM_ON_NAS: True
      DB_SERVICE: ${DB_SERVICE}
    sysctls:
        - kernel.shmall=2097152
        - kernel.shmmax=8589934592
        - kernel.shmmni=4096
        - 'kernel.sem=250 32000 100 128'
        - 'net.ipv4.conf.eth1.rp_filter=2'
        - 'net.ipv4.conf.eth2.rp_filter=2'
    ulimits:
      rtprio: 99
    cap_add:
      - SYS_RESOURCE
      - NET_ADMIN
      - SYS_NICE
      - AUDIT_WRITE
      - AUDIT_CONTROL
      - NET_RAW 
    networks:
      - rac_pub1_nw
      - rac_priv1_nw
      - rac_priv2_nw
    healthcheck:
      test: ["CMD", "/bin/python3", "/opt/scripts/startup/scripts/main.py", "--checkracstatus"]
      interval: ${HEALTHCHECK_INTERVAL}
      timeout: ${HEALTHCHECK_TIMEOUT}
      retries: ${HEALTHCHECK_RETRIES}
  racnodepc1-cman:
    container_name: ${CMAN_CONTAINER_NAME}
    hostname: ${CMAN_HOST_NAME}
    image: ${CMAN_IMAGE_NAME}
    dns_search: ${DNS_DOMAIN}
    dns: ${DNS_PUBLIC_IP}
    environment:
      DOMAIN: ${DNS_DOMAIN}
      DNS_SERVER: ${DNS_PUBLIC_IP}
      PUBLIC_IP: ${CMAN_PUBLIC_IP}
      PUBLIC_HOSTNAME: ${CMAN_PUBLIC_HOSTNAME}
      DB_HOSTDETAILS: ${DB_HOSTDETAILS}
    privileged: false
    ports:
      - 1521:1521
    networks:
      rac_pub1_nw:
        ipv4_address: ${CMAN_PUBLIC_IP}
    cap_add:
      - AUDIT_WRITE
      - NET_RAW
    healthcheck:
      test: ["CMD-SHELL", "pgrep -f 'cmadmin'"]      
      interval: ${HEALTHCHECK_INTERVAL}
      timeout: ${HEALTHCHECK_TIMEOUT}
      retries: ${HEALTHCHECK_RETRIES}