Parcourir la source

conf:dockerfile

pudongliang il y a 4 mois
Parent
commit
d099d91657
1 fichiers modifiés avec 17 ajouts et 5 suppressions
  1. 17 5
      Dockerfile

+ 17 - 5
Dockerfile

@@ -1,11 +1,23 @@
-FROM liferay/jdk21:latest
+FROM eclipse-temurin:21-jre
 
+# 构建参数
 ARG env
 
-ENV ENVIRMENT=${env:-"pro"}
+# 运行时环境变量
+ENV ENVIRONMENT=${env:-"pro"} \
+    TZ=Asia/Shanghai
 
+# 设置时区
+RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
 
-RUN ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && echo 'Asia/Shanghai' >/etc/timezone
-COPY ./target/gdt-auto.jar /zhyx/gdt-auto.jar
+# 设置工作目录
+WORKDIR /app
 
-ENTRYPOINT ["java", "--add-opens", "java.base/java.lang=ALL-UNNAMED", "--add-opens", "java.base/java.util=ALL-UNNAMED", "--add-opens", "java.base/java.lang.reflect=ALL-UNNAMED", "-Dspring.profiles.active=${ENVIRMENT}", "-jar", "/zhyx/gdt-auto.jar"]
+# 复制 jar 文件
+COPY ./target/gdt-auto.jar app.jar
+
+# 创建非 root 用户
+RUN groupadd -r appgroup && useradd -r -g appgroup appuser
+USER appuser
+
+ENTRYPOINT ["java", "--add-opens", "java.base/java.lang=ALL-UNNAMED", "--add-opens", "java.base/java.util=ALL-UNNAMED", "--add-opens", "java.base/java.lang.reflect=ALL-UNNAMED", "-Dspring.profiles.active=${ENVIRONMENT}", "-jar", "app.jar"]