Skip to content

Updated Dockerfile #55

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Updated Dockerfile #55

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 12 additions & 4 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,13 @@ FROM amazoncorretto:17-al2023-jdk
# Disable caching to make the dnf upgrade effective (the build job passes the build time as the value of this argument)
ARG CACHEBUST=1

# Add a custom trusted root ca certificate to the image
ARG CUSTOM_TRUSTED_ROOT_CA_CERTIFICATE_URL

# Upgrade the system
RUN dnf -y --releasever=latest --setopt=install_weak_deps=False upgrade && \
# Add less, vi, nano, ps, ping, netstat, ss, traceroute, telnet (curl is already included in the image)
dnf -y --releasever=latest --setopt=install_weak_deps=False install less vim nano procps-ng iputils net-tools iproute traceroute telnet findutils && \
# Add less, vi, nano, ps, ping, ss, traceroute, telnet, dig, find and unzip (curl is already included in the image)
dnf -y --releasever=latest --setopt=install_weak_deps=False install less vim nano procps-ng iputils iproute traceroute telnet bind-utils findutils unzip && \
# Create the non-root user to run the application
dnf -y --releasever=latest --setopt=install_weak_deps=False install shadow-utils && \
groupadd --system --gid 1000 javagroup && \
Expand All @@ -17,8 +20,14 @@ RUN dnf -y --releasever=latest --setopt=install_weak_deps=False upgrade && \
dnf -y clean all && \
rm -rf /var/cache/dnf

# Add the custom trusted root ca certificate
RUN if [ -n "${CUSTOM_TRUSTED_ROOT_CA_CERTIFICATE_URL}" ]; then \
curl "${CUSTOM_TRUSTED_ROOT_CA_CERTIFICATE_URL}" -o "/etc/pki/ca-trust/source/anchors/${CUSTOM_TRUSTED_ROOT_CA_CERTIFICATE_URL##*/}" && \
update-ca-trust ; \
fi

# Expose the application's listening port
EXPOSE 5000 8080
EXPOSE 8080

# Add a healthcheck (note that this only works locally, Kubernetes explicitly disables this one)
HEALTHCHECK CMD curl --fail http://localhost:8080/actuator/health || exit 1
Expand All @@ -31,4 +40,3 @@ USER javauser:javagroup

# Run the application
CMD java -jar *.jar