build: replace scaffold Dockerfiles with native multi-stage image
- Add Dockerfile using Mandrel jdk-21 builder and quarkus-micro-image:2.0 runtime - Run as non-root user 1001, expose 8080, set TZ=America/Santiago - Bind http host to 0.0.0.0 for container networking - Remove obsolete Quarkus-generated Dockerfiles (jvm, legacy-jar, native, native-micro) - Tighten .dockerignore to ship only build inputs (mvnw, .mvn, pom.xml, src) - Add api.http with /status and /q/health request samples
This commit is contained in:
+9
-5
@@ -1,5 +1,9 @@
|
|||||||
*
|
**
|
||||||
!target/*-runner
|
!mvnw
|
||||||
!target/*-runner.jar
|
!mvnw.cmd
|
||||||
!target/lib/*
|
!.mvn
|
||||||
!target/quarkus-app/*
|
!pom.xml
|
||||||
|
!src
|
||||||
|
!Dockerfile
|
||||||
|
!api.http
|
||||||
|
!README.md
|
||||||
|
|||||||
+29
@@ -0,0 +1,29 @@
|
|||||||
|
## Stage 1 : build with maven builder image with native capabilities
|
||||||
|
FROM quay.io/quarkus/ubi-quarkus-mandrel-builder-image:jdk-21 AS build
|
||||||
|
COPY --chown=quarkus:quarkus mvnw /code/mvnw
|
||||||
|
COPY --chown=quarkus:quarkus .mvn /code/.mvn
|
||||||
|
COPY --chown=quarkus:quarkus pom.xml /code/
|
||||||
|
USER quarkus
|
||||||
|
WORKDIR /code
|
||||||
|
RUN ./mvnw -B org.apache.maven.plugins:maven-dependency-plugin:3.1.2:go-offline
|
||||||
|
COPY src /code/src
|
||||||
|
RUN ./mvnw package -Dnative
|
||||||
|
|
||||||
|
## Stage 2 : create the docker final image
|
||||||
|
FROM quay.io/quarkus/quarkus-micro-image:2.0
|
||||||
|
WORKDIR /work/
|
||||||
|
COPY --from=build /code/target/*-runner /work/application
|
||||||
|
|
||||||
|
# set up permissions for user `1001`
|
||||||
|
RUN chmod 775 /work /work/application \
|
||||||
|
&& chown -R 1001 /work \
|
||||||
|
&& chmod -R "g+rwX" /work \
|
||||||
|
&& chown -R 1001:root /work
|
||||||
|
|
||||||
|
EXPOSE 8080
|
||||||
|
USER 1001
|
||||||
|
|
||||||
|
#TimeZone
|
||||||
|
ENV TZ="America/Santiago"
|
||||||
|
|
||||||
|
CMD ["./application", "-Dquarkus.http.host=0.0.0.0"]
|
||||||
@@ -0,0 +1,27 @@
|
|||||||
|
### Variables
|
||||||
|
@host = http://localhost:8080
|
||||||
|
@name = test-quarkus
|
||||||
|
|
||||||
|
###
|
||||||
|
# @name getStatus
|
||||||
|
# Application status: version, uptime, JVM metrics
|
||||||
|
GET {{host}}/status
|
||||||
|
Accept: application/json
|
||||||
|
|
||||||
|
###
|
||||||
|
# @name getHealth
|
||||||
|
# Aggregate MicroProfile Health (liveness + readiness)
|
||||||
|
GET {{host}}/q/health
|
||||||
|
Accept: application/json
|
||||||
|
|
||||||
|
###
|
||||||
|
# @name getReadiness
|
||||||
|
# Liveness probe
|
||||||
|
GET {{host}}/q/health/live
|
||||||
|
Accept: application/json
|
||||||
|
|
||||||
|
###
|
||||||
|
# @name getLiveness
|
||||||
|
# Readiness probe (includes application check)
|
||||||
|
GET {{host}}/q/health/ready
|
||||||
|
Accept: application/json
|
||||||
@@ -1,97 +0,0 @@
|
|||||||
####
|
|
||||||
# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
|
|
||||||
#
|
|
||||||
# Before building the container image run:
|
|
||||||
#
|
|
||||||
# ./mvnw package
|
|
||||||
#
|
|
||||||
# Then, build the image with:
|
|
||||||
#
|
|
||||||
# docker build -f src/main/docker/Dockerfile.jvm -t quarkus/test-quarkus-jvm .
|
|
||||||
#
|
|
||||||
# Then run the container using:
|
|
||||||
#
|
|
||||||
# docker run -i --rm -p 8080:8080 quarkus/test-quarkus-jvm
|
|
||||||
#
|
|
||||||
# If you want to include the debug port into your docker image
|
|
||||||
# you will have to expose the debug port (default 5005 being the default) like this : EXPOSE 8080 5005.
|
|
||||||
# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
|
|
||||||
# when running the container
|
|
||||||
#
|
|
||||||
# Then run the container using :
|
|
||||||
#
|
|
||||||
# docker run -i --rm -p 8080:8080 quarkus/test-quarkus-jvm
|
|
||||||
#
|
|
||||||
# This image uses the `run-java.sh` script to run the application.
|
|
||||||
# This scripts computes the command line to execute your Java application, and
|
|
||||||
# includes memory/GC tuning.
|
|
||||||
# You can configure the behavior using the following environment properties:
|
|
||||||
# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class")
|
|
||||||
# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
|
|
||||||
# in JAVA_OPTS (example: "-Dsome.property=foo")
|
|
||||||
# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
|
|
||||||
# used to calculate a default maximal heap memory based on a containers restriction.
|
|
||||||
# If used in a container without any memory constraints for the container then this
|
|
||||||
# option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
|
|
||||||
# of the container available memory as set here. The default is `50` which means 50%
|
|
||||||
# of the available memory is used as an upper boundary. You can skip this mechanism by
|
|
||||||
# setting this value to `0` in which case no `-Xmx` option is added.
|
|
||||||
# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
|
|
||||||
# is used to calculate a default initial heap memory based on the maximum heap memory.
|
|
||||||
# If used in a container without any memory constraints for the container then this
|
|
||||||
# option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
|
|
||||||
# of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
|
|
||||||
# is used as the initial heap size. You can skip this mechanism by setting this value
|
|
||||||
# to `0` in which case no `-Xms` option is added (example: "25")
|
|
||||||
# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
|
|
||||||
# This is used to calculate the maximum value of the initial heap memory. If used in
|
|
||||||
# a container without any memory constraints for the container then this option has
|
|
||||||
# no effect. If there is a memory constraint then `-Xms` is limited to the value set
|
|
||||||
# here. The default is 4096MB which means the calculated value of `-Xms` never will
|
|
||||||
# be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
|
|
||||||
# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
|
|
||||||
# when things are happening. This option, if set to true, will set
|
|
||||||
# `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
|
|
||||||
# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
|
|
||||||
# true").
|
|
||||||
# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
|
|
||||||
# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
|
|
||||||
# https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
|
|
||||||
# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
|
|
||||||
# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
|
|
||||||
# (example: "20")
|
|
||||||
# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
|
|
||||||
# (example: "40")
|
|
||||||
# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
|
|
||||||
# (example: "4")
|
|
||||||
# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
|
|
||||||
# previous GC times. (example: "90")
|
|
||||||
# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
|
|
||||||
# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
|
|
||||||
# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
|
|
||||||
# contain the necessary JRE command-line options to specify the required GC, which
|
|
||||||
# will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
|
|
||||||
# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
|
|
||||||
# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
|
|
||||||
# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
|
|
||||||
# accessed directly. (example: "foo.example.com,bar.example.com")
|
|
||||||
#
|
|
||||||
###
|
|
||||||
FROM registry.access.redhat.com/ubi8/openjdk-17:1.16
|
|
||||||
|
|
||||||
ENV LANGUAGE='en_US:en'
|
|
||||||
|
|
||||||
|
|
||||||
# We make four distinct layers so if there are application changes the library layers can be re-used
|
|
||||||
COPY --chown=185 target/quarkus-app/lib/ /deployments/lib/
|
|
||||||
COPY --chown=185 target/quarkus-app/*.jar /deployments/
|
|
||||||
COPY --chown=185 target/quarkus-app/app/ /deployments/app/
|
|
||||||
COPY --chown=185 target/quarkus-app/quarkus/ /deployments/quarkus/
|
|
||||||
|
|
||||||
EXPOSE 8080
|
|
||||||
USER 185
|
|
||||||
ENV JAVA_OPTS="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
|
|
||||||
ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
|
|
||||||
|
|
||||||
ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
|
|
||||||
|
|
||||||
@@ -1,93 +0,0 @@
|
|||||||
####
|
|
||||||
# This Dockerfile is used in order to build a container that runs the Quarkus application in JVM mode
|
|
||||||
#
|
|
||||||
# Before building the container image run:
|
|
||||||
#
|
|
||||||
# ./mvnw package -Dquarkus.package.type=legacy-jar
|
|
||||||
#
|
|
||||||
# Then, build the image with:
|
|
||||||
#
|
|
||||||
# docker build -f src/main/docker/Dockerfile.legacy-jar -t quarkus/test-quarkus-legacy-jar .
|
|
||||||
#
|
|
||||||
# Then run the container using:
|
|
||||||
#
|
|
||||||
# docker run -i --rm -p 8080:8080 quarkus/test-quarkus-legacy-jar
|
|
||||||
#
|
|
||||||
# If you want to include the debug port into your docker image
|
|
||||||
# you will have to expose the debug port (default 5005 being the default) like this : EXPOSE 8080 5005.
|
|
||||||
# Additionally you will have to set -e JAVA_DEBUG=true and -e JAVA_DEBUG_PORT=*:5005
|
|
||||||
# when running the container
|
|
||||||
#
|
|
||||||
# Then run the container using :
|
|
||||||
#
|
|
||||||
# docker run -i --rm -p 8080:8080 quarkus/test-quarkus-legacy-jar
|
|
||||||
#
|
|
||||||
# This image uses the `run-java.sh` script to run the application.
|
|
||||||
# This scripts computes the command line to execute your Java application, and
|
|
||||||
# includes memory/GC tuning.
|
|
||||||
# You can configure the behavior using the following environment properties:
|
|
||||||
# - JAVA_OPTS: JVM options passed to the `java` command (example: "-verbose:class")
|
|
||||||
# - JAVA_OPTS_APPEND: User specified Java options to be appended to generated options
|
|
||||||
# in JAVA_OPTS (example: "-Dsome.property=foo")
|
|
||||||
# - JAVA_MAX_MEM_RATIO: Is used when no `-Xmx` option is given in JAVA_OPTS. This is
|
|
||||||
# used to calculate a default maximal heap memory based on a containers restriction.
|
|
||||||
# If used in a container without any memory constraints for the container then this
|
|
||||||
# option has no effect. If there is a memory constraint then `-Xmx` is set to a ratio
|
|
||||||
# of the container available memory as set here. The default is `50` which means 50%
|
|
||||||
# of the available memory is used as an upper boundary. You can skip this mechanism by
|
|
||||||
# setting this value to `0` in which case no `-Xmx` option is added.
|
|
||||||
# - JAVA_INITIAL_MEM_RATIO: Is used when no `-Xms` option is given in JAVA_OPTS. This
|
|
||||||
# is used to calculate a default initial heap memory based on the maximum heap memory.
|
|
||||||
# If used in a container without any memory constraints for the container then this
|
|
||||||
# option has no effect. If there is a memory constraint then `-Xms` is set to a ratio
|
|
||||||
# of the `-Xmx` memory as set here. The default is `25` which means 25% of the `-Xmx`
|
|
||||||
# is used as the initial heap size. You can skip this mechanism by setting this value
|
|
||||||
# to `0` in which case no `-Xms` option is added (example: "25")
|
|
||||||
# - JAVA_MAX_INITIAL_MEM: Is used when no `-Xms` option is given in JAVA_OPTS.
|
|
||||||
# This is used to calculate the maximum value of the initial heap memory. If used in
|
|
||||||
# a container without any memory constraints for the container then this option has
|
|
||||||
# no effect. If there is a memory constraint then `-Xms` is limited to the value set
|
|
||||||
# here. The default is 4096MB which means the calculated value of `-Xms` never will
|
|
||||||
# be greater than 4096MB. The value of this variable is expressed in MB (example: "4096")
|
|
||||||
# - JAVA_DIAGNOSTICS: Set this to get some diagnostics information to standard output
|
|
||||||
# when things are happening. This option, if set to true, will set
|
|
||||||
# `-XX:+UnlockDiagnosticVMOptions`. Disabled by default (example: "true").
|
|
||||||
# - JAVA_DEBUG: If set remote debugging will be switched on. Disabled by default (example:
|
|
||||||
# true").
|
|
||||||
# - JAVA_DEBUG_PORT: Port used for remote debugging. Defaults to 5005 (example: "8787").
|
|
||||||
# - CONTAINER_CORE_LIMIT: A calculated core limit as described in
|
|
||||||
# https://www.kernel.org/doc/Documentation/scheduler/sched-bwc.txt. (example: "2")
|
|
||||||
# - CONTAINER_MAX_MEMORY: Memory limit given to the container (example: "1024").
|
|
||||||
# - GC_MIN_HEAP_FREE_RATIO: Minimum percentage of heap free after GC to avoid expansion.
|
|
||||||
# (example: "20")
|
|
||||||
# - GC_MAX_HEAP_FREE_RATIO: Maximum percentage of heap free after GC to avoid shrinking.
|
|
||||||
# (example: "40")
|
|
||||||
# - GC_TIME_RATIO: Specifies the ratio of the time spent outside the garbage collection.
|
|
||||||
# (example: "4")
|
|
||||||
# - GC_ADAPTIVE_SIZE_POLICY_WEIGHT: The weighting given to the current GC time versus
|
|
||||||
# previous GC times. (example: "90")
|
|
||||||
# - GC_METASPACE_SIZE: The initial metaspace size. (example: "20")
|
|
||||||
# - GC_MAX_METASPACE_SIZE: The maximum metaspace size. (example: "100")
|
|
||||||
# - GC_CONTAINER_OPTIONS: Specify Java GC to use. The value of this variable should
|
|
||||||
# contain the necessary JRE command-line options to specify the required GC, which
|
|
||||||
# will override the default of `-XX:+UseParallelGC` (example: -XX:+UseG1GC).
|
|
||||||
# - HTTPS_PROXY: The location of the https proxy. (example: "myuser@127.0.0.1:8080")
|
|
||||||
# - HTTP_PROXY: The location of the http proxy. (example: "myuser@127.0.0.1:8080")
|
|
||||||
# - NO_PROXY: A comma separated lists of hosts, IP addresses or domains that can be
|
|
||||||
# accessed directly. (example: "foo.example.com,bar.example.com")
|
|
||||||
#
|
|
||||||
###
|
|
||||||
FROM registry.access.redhat.com/ubi8/openjdk-17:1.16
|
|
||||||
|
|
||||||
ENV LANGUAGE='en_US:en'
|
|
||||||
|
|
||||||
|
|
||||||
COPY target/lib/* /deployments/lib/
|
|
||||||
COPY target/*-runner.jar /deployments/quarkus-run.jar
|
|
||||||
|
|
||||||
EXPOSE 8080
|
|
||||||
USER 185
|
|
||||||
ENV JAVA_OPTS="-Dquarkus.http.host=0.0.0.0 -Djava.util.logging.manager=org.jboss.logmanager.LogManager"
|
|
||||||
ENV JAVA_APP_JAR="/deployments/quarkus-run.jar"
|
|
||||||
|
|
||||||
ENTRYPOINT [ "/opt/jboss/container/java/run/run-java.sh" ]
|
|
||||||
@@ -1,27 +0,0 @@
|
|||||||
####
|
|
||||||
# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode.
|
|
||||||
#
|
|
||||||
# Before building the container image run:
|
|
||||||
#
|
|
||||||
# ./mvnw package -Dnative
|
|
||||||
#
|
|
||||||
# Then, build the image with:
|
|
||||||
#
|
|
||||||
# docker build -f src/main/docker/Dockerfile.native -t quarkus/test-quarkus .
|
|
||||||
#
|
|
||||||
# Then run the container using:
|
|
||||||
#
|
|
||||||
# docker run -i --rm -p 8080:8080 quarkus/test-quarkus
|
|
||||||
#
|
|
||||||
###
|
|
||||||
FROM registry.access.redhat.com/ubi8/ubi-minimal:8.8
|
|
||||||
WORKDIR /work/
|
|
||||||
RUN chown 1001 /work \
|
|
||||||
&& chmod "g+rwX" /work \
|
|
||||||
&& chown 1001:root /work
|
|
||||||
COPY --chown=1001:root target/*-runner /work/application
|
|
||||||
|
|
||||||
EXPOSE 8080
|
|
||||||
USER 1001
|
|
||||||
|
|
||||||
ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"]
|
|
||||||
@@ -1,30 +0,0 @@
|
|||||||
####
|
|
||||||
# This Dockerfile is used in order to build a container that runs the Quarkus application in native (no JVM) mode.
|
|
||||||
# It uses a micro base image, tuned for Quarkus native executables.
|
|
||||||
# It reduces the size of the resulting container image.
|
|
||||||
# Check https://quarkus.io/guides/quarkus-runtime-base-image for further information about this image.
|
|
||||||
#
|
|
||||||
# Before building the container image run:
|
|
||||||
#
|
|
||||||
# ./mvnw package -Dnative
|
|
||||||
#
|
|
||||||
# Then, build the image with:
|
|
||||||
#
|
|
||||||
# docker build -f src/main/docker/Dockerfile.native-micro -t quarkus/test-quarkus .
|
|
||||||
#
|
|
||||||
# Then run the container using:
|
|
||||||
#
|
|
||||||
# docker run -i --rm -p 8080:8080 quarkus/test-quarkus
|
|
||||||
#
|
|
||||||
###
|
|
||||||
FROM quay.io/quarkus/quarkus-micro-image:2.0
|
|
||||||
WORKDIR /work/
|
|
||||||
RUN chown 1001 /work \
|
|
||||||
&& chmod "g+rwX" /work \
|
|
||||||
&& chown 1001:root /work
|
|
||||||
COPY --chown=1001:root target/*-runner /work/application
|
|
||||||
|
|
||||||
EXPOSE 8080
|
|
||||||
USER 1001
|
|
||||||
|
|
||||||
ENTRYPOINT ["./application", "-Dquarkus.http.host=0.0.0.0"]
|
|
||||||
Reference in New Issue
Block a user