build: more agent env setup improvements

.gitignore

@@ -34,6 +34,9 @@ custom_app_settings.py
 *.custom.yml
 urls_custom.py
 
+# Postgres secret files (not required for dev)
+conf/postgres/*.secret
+
 # Makefile var
 cms_name.var
 

AGENTS.md

@@ -37,6 +37,8 @@ DJANGO_SUPERUSER_PASSWORD=yourpass make setup
 - **Settings files** are gitignored. Created from `*.example.py` by `bin/setup-cms.sh` or manually.
 - The `secrets.py` Elasticsearch host should be `core_cms_elasticsearch` (the Docker hostname), not `elasticsearch`.
 - Docker commands may need `sudo` depending on the environment.
+- **Elasticsearch cgroups v2:** ES 7.17.0 crashes on kernels with cgroups v2 (`CgroupV2Subsystem` NPE). Use ES 7.17.9+ in `docker-compose.dev.yml`.
+- **Postgres secret files:** `docker-compose.dev.yml` mounts `./conf/postgres/*.secret` files. These are not required for development and can be ignored.
 
 ### Lint, test, build
 

docker-compose.dev.yml

@@ -30,7 +30,7 @@ services:
       - core_cms_net
 
   elasticsearch:
-    image: docker.elastic.co/elasticsearch/elasticsearch:7.17.0
+    image: docker.elastic.co/elasticsearch/elasticsearch:7.17.9
     ulimits:
       memlock: -1
     environment:

docker-compose.example-cms.yml

@@ -30,7 +30,7 @@ services:
       - core_cms_net
 
   elasticsearch:
-    image: docker.elastic.co/elasticsearch/elasticsearch:7.17.0
+    image: docker.elastic.co/elasticsearch/elasticsearch:7.17.9
     ulimits:
       memlock: -1
     environment: