CI: Migrate Sonar Scan job to GHA

[portal/nonrtric-controlpanel.git] / nonrtric-gateway / Dockerfile

diff --git a/nonrtric-gateway/Dockerfile b/nonrtric-gateway/Dockerfile
index 9f2a545..4fc663d 100644 (file)
--- a/nonrtric-gateway/Dockerfile
+++ b/nonrtric-gateway/Dockerfile
@@ -17,19 +17,44 @@
 # SPDX-License-Identifier: Apache-2.0
 # ============LICENSE_END=========================================================
 #
-FROM openjdk:11-jre-slim
+FROM openjdk:17-jdk as jre-build
+
+RUN $JAVA_HOME/bin/jlink \
+--verbose \
+--add-modules ALL-MODULE-PATH \
+--strip-debug \
+--no-man-pages \
+--no-header-files \
+--compress=2 \
+--output /customjre
+
+# Use debian base image (same as openjdk uses)
+FROM debian:11-slim
+
+ENV JAVA_HOME=/jre
+ENV PATH="${JAVA_HOME}/bin:${PATH}"
+
+#copy JRE from the base image
+COPY --from=jre-build /customjre $JAVA_HOME
 
 ARG JAR
 
 WORKDIR /opt/app/nonrtric-gateway
 RUN mkdir -p /var/log/nonrtric-gateway
 
-EXPOSE 8081 8433
+EXPOSE 9090
 
 ADD /config/application.yaml /opt/app/nonrtric-gateway/config/application.yaml
 ADD target/${JAR} /opt/app/nonrtric-gateway/nonrtric-gateway.jar
 
+ARG user=nonrtric
+ARG group=nonrtric
+
+RUN groupadd $user && \
+    useradd -r -g $group $user
+RUN chown -R $user:$group /opt/app/nonrtric-gateway
+RUN chown -R $user:$group /var/log/nonrtric-gateway
 
-RUN chmod -R 777 /opt/app/nonrtric-gateway/config/
+USER ${user}
 
-CMD ["java", "-jar", "/opt/app/nonrtric-gateway/nonrtric-gateway.jar"]
+CMD ["/jre/bin/java", "-jar", "/opt/app/nonrtric-gateway/nonrtric-gateway.jar"]