{"id":1411,"date":"2024-09-13T22:00:00","date_gmt":"2024-09-13T20:00:00","guid":{"rendered":"https:\/\/demo.sidekick.be\/itenium\/docker-mongo\/"},"modified":"2025-11-28T13:31:42","modified_gmt":"2025-11-28T12:31:42","slug":"docker-mongo","status":"publish","type":"post","link":"https:\/\/demo.sidekick.be\/itenium\/blog\/docker\/docker-mongo\/","title":{"rendered":"Docker + Mongo: a guide"},"content":{"rendered":"

Simple Run<\/h1>\n
docker run --name some-mongo \n  -e MONGO_INITDB_ROOT_USERNAME=mongoadmin \n  -e MONGO_INITDB_ROOT_PASSWORD=pwd \n  -p 27017:27017\n  -d mongo\n<\/code><\/pre>\n
Initial Load<\/h1>\n
Scripts are executed in alphabetical order, executed on MONGO_INITDB_DATABASE<\/code>.<\/p>\n
For Mongo <6 by mongo<\/code> and by mongosh<\/code> for mongo >=6.<\/p>\n
See the Github Docker-Mongo Repository<\/a> for these examples.<\/p>\n
With JavaScript<\/h2>\n
Example compose.yaml<\/code> file:<\/p>\n
services:\n  mongo-js:\n    container_name: mongo-js-load\n    image: mongo\n    volumes:\n      - db-js:\/data\/db\n      - .\/load-js:\/docker-entrypoint-initdb.d\n    ports:\n      - \"27009:27017\"\n    environment:\n      MONGO_INITDB_DATABASE: jsapp\n      MONGO_INITDB_ROOT_USERNAME: ${MONGO_USER}\n      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_PWD}\n\nvolumes:\n  db-js: {}\n<\/code><\/pre>\n
The .env<\/code> file:<\/p>\n
MONGO_USER=mongoadmin\nMONGO_PWD=pwd\n<\/code><\/pre>\n
The load-js<\/code> directory contains a load.js<\/code> file:<\/p>\n
db.celebrities.insertMany([\n  { name: \"Jon Skeet\" },\n  { name: \"Martin Fowler\" },\n  { name: \"Erich Gamma\" }\n]);\n<\/code><\/pre>\n
With Shell<\/h2>\n
services:\n  mongo-sh:\n    container_name: mongo-sh-load\n    image: mongo\n    volumes:\n      - db-sh:\/data\/db\n      - .\/load-sh\/scripts:\/docker-entrypoint-initdb.d\n      - .\/load-sh\/data:\/mongo-seed-jsons\n    ports:\n      - \"27008:27017\"\n    environment:\n      MONGO_INITDB_DATABASE: shapp\n      MONGO_INITDB_ROOT_USERNAME: ${MONGO_USER}\n      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_PWD}\n\nvolumes:\n  db-sh: {}\n<\/code><\/pre>\n
In load-sh\/data<\/code> put your json files to be imported.<\/p>\n
You can either already provide the ids in the json with \"_id\": { \"$oid\": \"5bb0b3050581bf10c4bb89c3\" }<\/code> or omit the _id<\/code> to have mongo create one for you.<\/p>\n
In load-sh\/scripts<\/code> you can import the jsons with a .sh<\/code> file:<\/p>\n
# A json with an []\nmongoimport --db $MONGO_INITDB_DATABASE \n  --collection celebrities \n  --jsonArray \n  --file \/mongo-seed-jsons\/celebrities.json \n  --authenticationDatabase admin \n  --username $MONGO_INITDB_ROOT_USERNAME \n  --password $MONGO_INITDB_ROOT_PASSWORD\n\n# A json with a single {}\nmongoimport --db $MONGO_INITDB_DATABASE \n  --collection socials \n  --file \/mongo-seed-jsons\/socials.json \n  --authenticationDatabase admin \n  --username $MONGO_INITDB_ROOT_USERNAME \n  --password $MONGO_INITDB_ROOT_PASSWORD\n<\/code><\/pre>\n
Mongo Shell<\/h1>\n
# With mongo-js-load the name of the container\n# And jsapp the database name\ndocker exec -it mongo-js-load mongosh \n  --username mongoadmin \n  --password pwd \n  --authenticationDatabase admin \n  jsapp\n<\/code><\/pre>\n
In the shell:<\/p>\n
db.celebrities.find()\n\nuse admin\nshow collections\nexit\n<\/code><\/pre>\n
If you just want to bash into it:<\/p>\n
docker exec -it mongo-js-load sh\n<\/code><\/pre>\n
mongod.conf<\/h1>\n
By default mongo will not load any conf file. If you want to work with a custom mongod.conf<\/a>:<\/p>\n
services:\n  mongo-conf:\n    container_name: mongo-conf\n    image: mongo\n    command:\n      - '-f'\n      - '\/etc\/mongod.conf'\n    volumes:\n      - db-conf:\/data\/db\n      - .\/mongod.conf:\/etc\/mongod.conf\n    ports:\n      - \"27007:27007\"\n    environment:\n      MONGO_INITDB_ROOT_USERNAME: ${MONGO_USER}\n      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_PWD}\n\nvolumes:\n  db-conf: {}\n<\/code><\/pre>\n
The container port is 27007<\/code> because of this mongod.conf<\/code>:<\/p>\n
net:\n  port: 27007\n  bindIp: 127.0.0.1\n<\/code><\/pre>\n
Inside the container check \/etc\/mongod.conf.orig<\/code><\/a> for a basic one. Or if you have installed it locally:<\/p>\n\n\n\n\n\n\n\n\n
Platform<\/th>\nInstall Method<\/th>\nConfiguration File<\/th>\n<\/tr>\n<\/thead>\n
Linux<\/td>\napt, yum or zypper<\/td>\n\/etc\/mongod.conf<\/td>\n<\/tr>\n
macOS<\/td>\nbrew<\/td>\n\/usr\/local\/etc\/mongod.conf (Intel processor)<\/td>\n<\/tr>\n
<\/td>\n<\/td>\n\/opt\/homebrew\/etc\/mongod.conf (Apple M1 processors)<\/td>\n<\/tr>\n
Windows<\/td>\nMSI<\/td>\n<install directory>binmongod.cfg<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Security<\/h1>\n
Get into the mongosh<\/code> without credentials and then do everything in the shell itself.<\/p>\n
See User Management Methods<\/a> in the mongo docs for more!<\/p>\n
docker exec -it mongo-secure mongosh\n\nuse admin\ndb.auth(\"mongoadmin\", \"pwd\")\n\nuse otherDb\ndb.createUser({\n  user: 'otherDbReader',\n  pwd: 'pwd',\n  roles: [{\n    role: 'read',\n    db: 'otherDb'\n  }]\n})\n<\/code><\/pre>\n
With Initial Load<\/h2>\n
In a js<\/code> file. Mongo 6 supports process.env<\/code>:<\/p>\n
db.createUser({\n  user: 'user2',\n  pwd: process.env.USER2_PWD,\n  roles: [{\n    role: 'read',\n    db: 'someDb'\n  }]\n})\n<\/code><\/pre>\n
Before mongo 6, use a sh<\/code> file instead:<\/p>\n
mongosh <<EOF\nuse $MONGO_INITDB_DATABASE\ndb.createUser({\n  user: '$OTHER_USER',\n  pwd: '$OTHER_PWD',\n  roles: [{\n    role: 'read',\n    db: '$MONGO_INITDB_DATABASE'\n  }]\n})\nEOF\n<\/code><\/pre>\n
Roles<\/h2>\n
The official docs for Built-In Roles<\/a>.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Role<\/th>\nDescription<\/th>\n<\/tr>\n<\/thead>\n
<\/td>\nDatabase User Roles<\/strong><\/td>\n<\/tr>\n
read<\/td>\nRead data on all non-system collections (+ system.js<\/code><\/a>)<\/td>\n<\/tr>\n
readWrite<\/td>\nCan modify all collections from the read<\/code> role<\/td>\n<\/tr>\n
<\/td>\nDatabase Administration Roles<\/strong><\/td>\n<\/tr>\n
dbAdmin<\/td>\nSchema-related tasks, indexing and gathering statistics<\/td>\n<\/tr>\n
userAdmin<\/td>\nCreate and modify roles and users on the current db. Can grant any privilege to any user, including themselves (indirectly provides superuser<\/code> to the db\/cluster)<\/td>\n<\/tr>\n
dbOwner<\/td>\nCombines readWrite, dbAdmin and userAdmin<\/td>\n<\/tr>\n
backup<\/td>\nMinimal privileges for backing up data<\/td>\n<\/tr>\n
restore<\/td>\nMinimal privileges for restoring backups<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Other roles:<\/p>\n