Merge pull request #269 from oracle/no-docker-io-dockerfile

Update Dockerfile to be in line with other WKT projects

Author: rjeberhard

Dockerfile

@@ -1,36 +1,18 @@
-#   Copyright (c) 2021, 2022, Oracle and/or its affiliates.
+#   Copyright (c) 2021, 2023, Oracle and/or its affiliates.
 #   Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl.
 
-# First layer: dependencies for the project, cached in the /root/.m2 directory
-FROM maven:3-openjdk-18-slim as m2repo
-ARG MAVEN_OPTS
+FROM ghcr.io/oracle/oraclelinux:9-slim AS jre-build
 
-WORKDIR /project/
-COPY pom.xml .
-COPY build-helper-mojo/pom.xml build-helper-mojo/
-COPY wls-exporter-core/pom.xml wls-exporter-core/
-COPY wls-exporter-sidecar/pom.xml wls-exporter-sidecar/
-
-RUN mvn -B -e -C org.apache.maven.plugins:maven-dependency-plugin:3.1.2:go-offline -Ddocker-build
-
-# Now build the project on top of that first layer
-FROM maven:3-openjdk-18-slim as build
-ARG MAVEN_OPTS
-
-WORKDIR /project/
-COPY --from=m2repo /root/.m2 /root/.m2
-COPY pom.xml .
-COPY build-helper-mojo/ build-helper-mojo/
-COPY wls-exporter-core/ wls-exporter-core/
-COPY wls-exporter-sidecar/ wls-exporter-sidecar/
+ENV JAVA_URL="https://download.java.net/java/GA/jdk19.0.2/fdb695a9d9064ad6b064dc6df578380c/7/GPL/openjdk-19.0.2_linux-x64_bin.tar.gz"
 
 RUN set -eux; \
-    apt-get update; \
-    apt-get install git -y; \
-    mvn -B -e -C install -Ddocker-build -DskipTests=true; \
-    $JAVA_HOME/bin/jlink --verbose --compress 2 --strip-java-debug-attributes --no-header-files --no-man-pages --output /jre --add-modules java.base,java.logging,java.desktop,java.instrument,java.management,java.naming,java.net.http,java.security.jgss,java.sql,jdk.attach,jdk.jdi,jdk.jfr,jdk.management,jdk.management.jfr,jdk.net,jdk.unsupported,jdk.crypto.cryptoki,jdk.crypto.ec,jdk.zipfs
+    microdnf -y install gzip tar; \
+    curl -fL -o /jdk.tar.gz "$JAVA_URL"; \
+    mkdir -p /jdk; \
+    tar --extract --file /jdk.tar.gz --directory /jdk --strip-components 1; \
+    /jdk/bin/jlink --verbose --compress 2 --strip-java-debug-attributes --no-header-files --no-man-pages --output jre --add-modules java.base,java.logging,java.desktop,java.instrument,java.management,java.naming,java.net.http,java.security.jgss,java.sql,jdk.attach,jdk.jdi,jdk.jfr,jdk.management,jdk.management.jfr,jdk.net,jdk.unsupported,jdk.crypto.cryptoki,jdk.crypto.ec,jdk.zipfs
 
-FROM ghcr.io/oracle/oraclelinux:8-slim
+FROM ghcr.io/oracle/oraclelinux:9-slim
 
 LABEL "org.opencontainers.image.authors"="Ryan Eberhard <ryan.eberhard@oracle.com>, Russell Gold <russell.gold@oracle.com>" \
       "org.opencontainers.image.url"="https://github.com/oracle/weblogic-monitoring-exporter" \
@@ -40,8 +22,11 @@ LABEL "org.opencontainers.image.authors"="Ryan Eberhard <ryan.eberhard@oracle.co
       "org.opencontainers.image.description"="Oracle WebLogic Monitoring Exporter" \
       "org.opencontainers.image.documentation"="https://github.com/oracle/weblogic-monitoring-exporter"
 
-COPY --from=build /jre jre
+ENV LANG="en_US.UTF-8"
 
+COPY --from=jre-build /jre jre
+
+# Install Java and make the operator run with a non-root user id (1000 is the `oracle` user)
 RUN set -eux; \
     microdnf -y update; \
     microdnf clean all; \
@@ -50,12 +35,15 @@ RUN set -eux; \
         [ ! -e "/usr/bin/$base" ]; \
         alternatives --install "/usr/bin/$base" "$base" "$bin" 20000; \
     done; \
-    java -Xshare:dump
+    java -Xshare:dump; \
+    useradd -M -s /bin/bash -g root -u 1000 oracle
+
+USER oracle
 
-COPY --from=build project/wls-exporter-sidecar/target/wls-exporter-sidecar.jar ./
-COPY --from=build project/wls-exporter-sidecar/target/libs ./libs
-COPY start_exporter.sh .
+COPY --chown=oracle:root wls-exporter-sidecar/target/wls-exporter-sidecar.jar ./
+COPY --chown=oracle:root wls-exporter-sidecar/target/libs ./libs
+COPY --chown=oracle:root start_exporter.sh .
 
-ENTRYPOINT ["sh", "start_exporter.sh"]
+CMD ["/start_exporter.sh"]
 
-EXPOSE 8080
+EXPOSE 8080