X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;f=nonrtric-gateway%2FDockerfile;h=4fc663d220c0d6f5f058184870d46be927f38f4c;hb=HEAD;hp=f803a9c2fc6d38ce1da263a9c609751c73362ce9;hpb=85132f5ec832e4d28a334a21a036e4b3a9ef7eca;p=portal%2Fnonrtric-controlpanel.git

diff --git a/nonrtric-gateway/Dockerfile b/nonrtric-gateway/Dockerfile
index f803a9c..4fc663d 100644
--- a/nonrtric-gateway/Dockerfile
+++ b/nonrtric-gateway/Dockerfile
@@ -17,7 +17,25 @@
 # SPDX-License-Identifier: Apache-2.0
 # ============LICENSE_END=========================================================
 #
-FROM openjdk:11-jre-slim
+FROM openjdk:17-jdk as jre-build
+
+RUN $JAVA_HOME/bin/jlink \
+--verbose \
+--add-modules ALL-MODULE-PATH \
+--strip-debug \
+--no-man-pages \
+--no-header-files \
+--compress=2 \
+--output /customjre
+
+# Use debian base image (same as openjdk uses)
+FROM debian:11-slim
+
+ENV JAVA_HOME=/jre
+ENV PATH="${JAVA_HOME}/bin:${PATH}"
+
+#copy JRE from the base image
+COPY --from=jre-build /customjre $JAVA_HOME
 
 ARG JAR
 
@@ -29,7 +47,14 @@ EXPOSE 9090
 ADD /config/application.yaml /opt/app/nonrtric-gateway/config/application.yaml
 ADD target/${JAR} /opt/app/nonrtric-gateway/nonrtric-gateway.jar
 
+ARG user=nonrtric
+ARG group=nonrtric
+
+RUN groupadd $user && \
+    useradd -r -g $group $user
+RUN chown -R $user:$group /opt/app/nonrtric-gateway
+RUN chown -R $user:$group /var/log/nonrtric-gateway
 
-RUN chmod -R 777 /opt/app/nonrtric-gateway/config/
+USER ${user}
 
-CMD ["java", "-jar", "/opt/app/nonrtric-gateway/nonrtric-gateway.jar"]
+CMD ["/jre/bin/java", "-jar", "/opt/app/nonrtric-gateway/nonrtric-gateway.jar"]