# Beats in docker after 7.17

**URL:** <https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429>\
**Category:** Beats\
**Tags:** docker, beats-development\
**Created:** [April 14, 2022, 12:31pm UTC](https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429 "2022-04-14T12:31:04Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yustas](https://avatars.discourse-cdn.com/v4/letter/y/a8b319/32.png) [@Yustas](https://discuss.elastic.co/u/Yustas)\
**Post date:** [April 14, 2022, 12:31pm UTC](https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429/1 "2022-04-14T12:31:05Z")

</div>

Hello

Found problem with dockers image of beats from version 7.17 and higher.  
Early images was near 600 Mb size  
After 7.17 image baset on lightweight image near 300 Mb

But in new images:

- no tzdate, so cant use `-e TZ=Africa/Lusaka` always date show in"Europe" TZ
- no any text editor, so cant change any file inside docker

Now can't use new docker images becouse all logs timestemp different and hard to debuging

---

<div class="post-metadata">

**Author:** ![Yustas](https://avatars.discourse-cdn.com/v4/letter/y/a8b319/32.png) [@Yustas](https://discuss.elastic.co/u/Yustas)\
**Post date:** [April 27, 2022, 2:52pm UTC](https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429/2 "2022-04-27T14:52:14Z")

</div>

Did anybody have any idea?

---

<div class="post-metadata">

**Author:** ![cmacknz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cmacknz/32/103773_2.png) [@cmacknz](https://discuss.elastic.co/u/cmacknz)\
**Post date:** [April 27, 2022, 3:17pm UTC](https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429/3 "2022-04-27T15:17:17Z")

</div>

The docker base image was changed to Ubuntu 20 in 7.17. The change is in the changelog for 7.17: [Beats version 7.17.0 | Beats Platform Reference [8.1] | Elastic](https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-7.17.0.html)

I don't know that the commands you are missing were intentionally removed, they are just not provided by the standard Ubuntu 20 base image we use. To work around this you would have to create a new image with the packages you need installed using the filebeat container as a base image.

---

<div class="post-metadata">

**Author:** ![Yustas](https://avatars.discourse-cdn.com/v4/letter/y/a8b319/32.png) [@Yustas](https://discuss.elastic.co/u/Yustas)\
**Post date:** [April 29, 2022, 2:44pm UTC](https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429/4 "2022-04-29T14:44:41Z")

</div>

Changes in all images, and i don't know how corectly install additional packages in each container on each server in different time zones without corrupt main application. And that changes need to make after each version upgrade what make upgrades hard.

Perhaps there are containers based on more complete ubuntu images, where there is pre-installed: tzdate and any text editor?

---

<div class="post-metadata">

**Author:** ![cmacknz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cmacknz/32/103773_2.png) [@cmacknz](https://discuss.elastic.co/u/cmacknz)\
**Post date:** [May 2, 2022, 2:32pm UTC](https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429/5 "2022-05-02T14:32:38Z")

</div>

You can extend the filebeat docker image and just deploy that everywhere with a simple docker build command.

You should just need a dockerfile like this and then you can produce and deploy a new image with docker build.

```auto
FROM docker.elastic.co/beats/filebeat:7.17.3
RUN apt-get update && apt-get install -y \
  vim \
  tzdata \

```

---

<div class="post-metadata">

**Author:** ![Yustas](https://avatars.discourse-cdn.com/v4/letter/y/a8b319/32.png) [@Yustas](https://discuss.elastic.co/u/Yustas)\
**Post date:** [May 5, 2022, 4:07pm UTC](https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429/6 "2022-05-05T16:07:47Z")

</div>

I need only run this dockerfile, or need add at end of dockerfile command to run application?

```auto
CMD /usr/share/filebeat/filebaet
or
RUN /usr/share/filebeat/filebaet

```

May be you know is not any planes to add that packages to core image for future releases? Because it's not problem to make changes in one or two hosts, but it's to hard make changes in docker images on more than twenty servers.

---

<div class="post-metadata">

**Author:** ![Yustas](https://avatars.discourse-cdn.com/v4/letter/y/a8b319/32.png) [@Yustas](https://discuss.elastic.co/u/Yustas)\
**Post date:** [May 23, 2022, 8:03am UTC](https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429/7 "2022-05-23T08:03:18Z")

</div>

Are there any changes planned for the new docker images?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 20, 2022, 10:03am UTC](https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429/8 "2022-06-20T10:03:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
