Set up a proxied environment (HTTP proxy available)

Rebuild the datalore-database-command image.

Configure an HTTPS proxy server in the SQL runtime container using JVM options. See the example below.

Dockerfile

                FROM jetbrains/datalore-database-command:2025.3.1
                COPY init_databases_env.sh /opt/datalore/init_databases_env.sh
            

init_database_env.sh

                #!/bin/bash
                set -ex

                export DATALORE_HOME=/opt/datalore
                databases_lib_target_dir=$DATALORE_HOME/databases_lib_dir

                datagrip_driver_dir=$DATALORE_HOME/datagrip.driver.path

                MAX_HEAP_SIZE=${MAX_HEAP_SIZE:-512m}
                source setenv.sh

                export DATABASES_JAVA_OPTS="$MEMORY_JAVA_OPTS ${JIGSAW_JAVA_OPTS[*]} \
                -Dhttps.proxyHost=IP_ADDR_OF_YOUR_PROXY -Dhttps.proxyPort=PORT_OF_YOUR_PROXY \
                -Djava.util.logging.config.file=${DATALORE_HOME}/logging.properties \
                -Dlogback.configurationFile=${DATALORE_HOME}/logback.xml \
                -Didea.home.path=${databases_lib_target_dir} \
                -Ddatagrip.driver.path=${datagrip_driver_dir} \
                -Ddatagrip.disable.artifact.updates=true \
                -Dathena.aws.credentials.provider.jar.path=athena-aws-credentials-provider.jar \
                -Dathena3.aws.credentials.provider.jar.path=athena3_deploy.jar \
                -cp ${databases_lib_target_dir}/* \
                "
            

Rebuild the datalore-agent image.

Configure an HTTP/HTTPS proxy server in the computational agent container using environment variables and JVM options. See the example below.

Dockerfile

                FROM jetbrains/datalore-agent:2025.3.1
                COPY on_agent_start.sh /opt/datalore/on_agent_start.sh
            

on_agent_start.sh

                PROXY_HOST="your proxy host"
                PROXY_PORT="3128"
                PROXY_URL="http://$PROXY_HOST:$PROXY_PORT"

                # java
                java_opts=("-Dhttp.proxyHost=$PROXY_HOST" "-Dhttp.proxyPort=$PROXY_PORT" "${java_opts[@]}")
                java_opts=("-Dhttps.proxyHost=$PROXY_HOST" "-Dhttps.proxyPort=$PROXY_PORT" "${java_opts[@]}")

                # pip & conda
                export HTTP_PROXY="$PROXY_URL"
                export HTTPS_PROXY="$PROXY_URL"

                # apt
                echo "Acquire {
                  HTTP::proxy \"$PROXY_URL\";
                  HTTPS::proxy \"$PROXY_URL\";
                }" | sudo tee /etc/apt/apt.conf.d/proxy.conf
            

After the above-mentioned custom images are built, update the Datalore server configuration to use them.

Add the DATABASES_COMMAND_IMAGE variable to the Datalore environment and re-define the agent image in the corresponding section as shown in the examples below.

docker-compose.yaml

                        services:
                          datalore:
                            ...
                            volumes:
                              ...
                              - "agents-config.yaml:/opt/datalore/configs/agents-config.yaml"
                            environment:
                              ...
                              DATABASES_COMMAND_IMAGE: "datalore-db-command-custom:latest"
                        ...
                    

agent-config.yaml

                        docker:
                          network: datalore-agents-network
                          dataloreHost: datalore
                          instances:
                            - id: basic-agent
                              default: true
                              label: "Basic"
                              image: datalore-agent-custom:latest
                              ...
                    

datalore.values.yaml

                        ...
                        dataloreEnv:
                          ...
                          DATABASES_COMMAND_IMAGE: "datalore-db-command-custom:latest"

                        agentsConfig:
                          k8s:
                            instances:
                              - id: basic-agent
                                default: true
                                label: "Basic"
                                ...
                                yaml:
                                  apiVersion: v1
                                  kind: Pod
                                  metadata:
                                    name: k8s-agent
                                    labels:
                                      podType: dataloreKubernetesAgent
                                  spec:
                                    enableServiceLinks: false
                                    containers:
                                      - name: agent
                                        image: datalore-agent-custom:latest
                                        securityContext:
                                          privileged: true
                                        resources:
                                          limits:
                                            cpu: "1"
                                            memory: "2048Mi"
                                          requests:
                                            cpu: "200m"
                                            memory: "2048Mi"
                                        ...
                    

Restart the Datalore server to apply the changes.