docker --version && docker compose version

/opt/data/quzuo/tmp/netxms/stack/
├── compose.yaml          # 五服务编排
├── conf/
│   ├── netxmsd.conf      # 服务端配置（数据库连接在此）
│   └── nxagentd.conf     # 代理配置
└── data/                 # 持久化数据（部署后自动生成）
    ├── db/               # PostgreSQL 数据目录
    ├── server/           # 服务端运行数据（服务器密钥 .server_key 等）
    └── agent/            # 代理本地数据

## Logging
LogFile={stdout}

## Database configuration - PostgreSQL
DBDriver=pgsql.ddr
DBServer=db
DBName=netxms
DBLogin=netxms
DBPassword=q1w2e3r4
DebugLevel=5

[CORE]
# 允许来自监控服务器网段的连接（full access）
MasterServers=10.89.63.0/24

### Logging
LogFile={stdout}
#DebugLevel=0

SubAgent=filemgr

name: netxms-701-stack

services:
  db:
    image: postgres:17
    container_name: netxms-7.0.1-db
    restart: unless-stopped
    environment:
      POSTGRES_USER: netxms
      POSTGRES_PASSWORD: q1w2e3r4
      POSTGRES_DB: netxms
    volumes:
      - ./data/db:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U netxms"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - netxms-net

  # 一次性初始化任务：库未初始化时执行 nxdbmgr init（-p 指定 admin 初始密码）
  init:
    image: ghcr.io/netxms/server:7.0.1
    container_name: netxms-7.0.1-init
    depends_on:
      db:
        condition: service_healthy
    volumes:
      - ./conf/netxmsd.conf:/etc/netxmsd.conf
    entrypoint: ["/bin/sh", "-c", "nxdbmgr -q get DBLockStatus >/dev/null 2>&1; rc=$$?; if [ \"$$rc\" -ne 0 ]; then echo \"DB not initialized (rc=$$rc), running init...\"; nxdbmgr -p q1w2e3r4 init pgsql; else echo \"DB already initialized (rc=$$rc)\"; fi"]
    networks:
      - netxms-net

  server:
    image: ghcr.io/netxms/server:7.0.1
    container_name: netxms-7.0.1-server
    hostname: server
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy
      init:
        condition: service_completed_successfully
    volumes:
      - ./conf/netxmsd.conf:/etc/netxmsd.conf
      - ./data/server:/var/lib/netxms
    ports:
      - "4701:4701"
    networks:
      - netxms-net

  agent:
    image: ghcr.io/netxms/agent:7.0.1
    container_name: netxms-7.0.1-agent
    hostname: agent
    restart: unless-stopped
    depends_on:
      - server
    volumes:
      - ./conf/nxagentd.conf:/etc/nxagentd.conf
      - ./data/agent:/var/lib/netxms
    networks:
      - netxms-net

  web:
    image: ghcr.io/netxms/web:7.0.1
    container_name: netxms-7.0.1-web
    restart: unless-stopped
    depends_on:
      - server
    environment:
      KEYSTORE_PASSWORD: "changeit"
      JAVA_OPTIONS: "-Xms256m -Xmx512m"
    command:
      - /bin/sh
      - -c
      - |
        touch $${JETTY_BASE}/jetty-ssl.properties
        echo "jetty.sslContext.keyStorePassword=$${KEYSTORE_PASSWORD:-changeit}" > $${JETTY_BASE}/jetty-ssl.properties
        echo "jetty.ssl.sniRequired=false" >> $${JETTY_BASE}/jetty-ssl.properties
        echo "jetty.ssl.sniHostCheck=false" >> $${JETTY_BASE}/jetty-ssl.properties
        exec java $$JAVA_OPTIONS -jar $${JETTY_HOME}/start.jar $${JETTY_BASE}/jetty-ssl.properties
    ports:
      - "8137:8443"
    networks:
      - netxms-net

networks:
  netxms-net:
    driver: bridge
    ipam:
      config:
        - subnet: 10.89.63.0/24

mkdir -p /opt/data/quzuo/tmp/netxms/stack/conf
cd /opt/data/quzuo/tmp/netxms/stack

docker compose pull

 Image ghcr.io/netxms/web:7.0.1 Pulling
 Image postgres:17 Pulling
 Image ghcr.io/netxms/server:7.0.1 Pulling
 Image ghcr.io/netxms/agent:7.0.1 Pulling
 Image postgres:17 Pulled
 Image ghcr.io/netxms/web:7.0.1 Pulled
 Image ghcr.io/netxms/agent:7.0.1 Pulled
 Image ghcr.io/netxms/server:7.0.1 Pulled

docker compose up -d

docker logs netxms-7.0.1-init

DB already initialized (rc=0)
DB already initialized (rc=0)
DB already initialized (rc=0)

docker exec netxms-7.0.1-db psql -U netxms -c "CREATE DATABASE netxms_init_test;"

CREATE DATABASE

docker exec netxms-7.0.1-server nxdbmgr -c /tmp/init_test_netxmsd.conf -p q1w2e3r4 init pgsql

NetXMS Database Manager Version 7.0.1 Build 7.0-824-g44d7a0dfb5

Initializing database...
Database initialized successfully

docker exec netxms-7.0.1-db psql -U netxms -d netxms_init_test -t -c "SELECT count(*) FROM information_schema.tables WHERE table_schema='public';"

   213

docker compose ps

NAME                  IMAGE                         COMMAND                  SERVICE   CREATED             STATUS                       PORTS
netxms-7.0.1-agent      ghcr.io/netxms/agent:7.0.1    "/usr/bin/nxagentd -…"   agent     About an hour ago   Up 51 minutes                162/udp, 514/udp, 4700/tcp
netxms-7.0.1-db         postgres:17                   "docker-entrypoint.s…"   db        About an hour ago   Up About an hour (healthy)   5432/tcp
netxms-7.0.1-server     ghcr.io/netxms/server:7.0.1   "/usr/bin/netxmsd -c…"   server    About an hour ago   Up 55 minutes                0.0.0.0:4701->4701/tcp, [::]:4701->4701/tcp, 4703/tcp
netxms-7.0.1-web        ghcr.io/netxms/web:7.0.1      "/docker-entrypoint.…"   web       About an hour ago   Up About an hour             8080/tcp, 0.0.0.0:8137->8443/tcp, [::]:8137->8443/tcp

docker logs netxms-7.0.1-server 2>&1 | grep -E 'Database driver|Database lock'

2026.11.01 06:58:40.252 *I* [db.drv             ] Database driver "pgsql.ddr" loaded and initialized successfully
2026.11.01 06:58:40.313 *D* [db.cpool           ] Database Connection Pool initialized
2026.11.01 06:58:40.831 *D* [db.lock            ] Database lock set

curl -k -sL -o /dev/null -w 'FINAL %{url_effective} HTTP %{http_code}\n' https://localhost:8137/

FINAL https://localhost:8137/nxmc-light.app HTTP 200

docker exec netxms-7.0.1-server nxget agent Agent.Version

7.0.1

docker exec netxms-7.0.1-server nxget agent System.Uptime

20502

docker exec netxms-7.0.1-db pg_dump -U netxms netxms > /opt/data/quzuo/tmp/netxms/netxms_backup.sql

docker network create --subnet 10.89.63.0/24 netxms-net

docker run -d --name netxms-7.0.1-db --network netxms-net \
  -e POSTGRES_USER=netxms -e POSTGRES_PASSWORD=q1w2e3r4 -e POSTGRES_DB=netxms \
  -v /opt/data/quzuo/tmp/netxms/stack/data/db:/var/lib/postgresql/data \
  postgres:17

docker run --rm --name netxms-7.0.1-init --network netxms-net \
  -v /opt/data/quzuo/tmp/netxms/stack/conf/netxmsd.conf:/etc/netxmsd.conf \
  ghcr.io/netxms/server:7.0.1 \
  nxdbmgr -p q1w2e3r4 init pgsql

docker run -d --name netxms-7.0.1-server --network netxms-net --hostname server \
  -v /opt/data/quzuo/tmp/netxms/stack/conf/netxmsd.conf:/etc/netxmsd.conf \
  -v /opt/data/quzuo/tmp/netxms/stack/data/server:/var/lib/netxms \
  -p 4701:4701 \
  ghcr.io/netxms/server:7.0.1

docker run -d --name netxms-7.0.1-agent --network netxms-net --hostname agent \
  -v /opt/data/quzuo/tmp/netxms/stack/conf/nxagentd.conf:/etc/nxagentd.conf \
  -v /opt/data/quzuo/tmp/netxms/stack/data/agent:/var/lib/netxms \
  ghcr.io/netxms/agent:7.0.1

docker run -d --name netxms-7.0.1-web --network netxms-net \
  -e KEYSTORE_PASSWORD=changeit -e JAVA_OPTIONS="-Xms256m -Xmx512m" \
  -p 8137:8443 \
  ghcr.io/netxms/web:7.0.1 \
  /bin/sh -c 'touch $JETTY_BASE/jetty-ssl.properties && echo "jetty.sslContext.keyStorePassword=$KEYSTORE_PASSWORD" > $JETTY_BASE/jetty-ssl.properties && echo "jetty.ssl.sniRequired=false" >> $JETTY_BASE/jetty-ssl.properties && echo "jetty.ssl.sniHostCheck=false" >> $JETTY_BASE/jetty-ssl.properties && exec java $JAVA_OPTIONS -jar $JETTY_HOME/start.jar $JETTY_BASE/jetty-ssl.properties'

docker compose up -d web && docker exec netxms-7.0.1-web jps -v

1 start.jar -Djava.io.tmpdir=/tmp/jetty -Xms256m -Xmx512m
100 Jps -Dapplication.home=/usr/lib/jvm/java-25-amazon-corretto -Xms8m -Djdk.module.main=jdk.jcmd

docker compose pull && docker compose up -d

docker run --rm --network netxms-701-stack_netxms-net \
  -v /opt/data/quzuo/tmp/netxms/stack/conf/netxmsd.conf:/etc/netxmsd.conf \
  ghcr.io/netxms/server:7.0.2 nxdbmgr upgrade

2026.11.01 07:07:09.887 *E* [subagents          ] Initialization of subagent "FILEMGR" (/usr/lib/x86_64-linux-gnu/netxms/filemgr.nsm) failed
2026.11.01 07:07:09.888 *I* [startup            ] System hardware ID is 01B6CB61198C1584EE20BD17CE6330091A7A4833
2026.11.01 07:07:10.889 *E* [comm               ] Unable to bind IPv4 socket (98 Address already in use)
2026.11.01 07:07:10.889 *E* [sa                 ] Unable to bind socket (98 Address already in use)
2026.11.01 07:07:10.890 *E* [comm               ] Cannot bind at least one socket, terminating agent process

=== show objects ===
Authentication failed (server error 61: Internal error)
=== get DBLockStatus ===
Authentication failed (server error 61: Internal error)

=== show objects ===
Object ID 1 "Entire Network"
   Class=Network  Status=NORMAL  IsModified=0  IsDeleted=0
   Parents: <>
   Children: <4>
   Last change.........: 01.Nov.2026 06:58:41
=== get DBLockStatus ===
DBLockStatus = 10.89.63.3

docker compose down             # 停止并删除容器与网络（保留数据目录）
docker compose down -v          # 额外清理命名卷（本文数据在 bind mount，不受影响）
rm -rf /opt/data/quzuo/tmp/netxms/stack/data   # 彻底清除数据（不可恢复，先确认备份）
docker rmi ghcr.io/netxms/server:7.0.1 ghcr.io/netxms/agent:7.0.1 ghcr.io/netxms/web:7.0.1