From a939e673fcf0769d2404878c0f275081961bb521 Mon Sep 17 00:00:00 2001 From: liamfallon Date: Tue, 14 Feb 2023 11:20:40 +0000 Subject: Remove integration base images from PF base images The Docker base image from the integration project is now unmaintained. We replace the Integration base image by updating our own base image to work directly off Alpine. Issue-ID: POLICY-4558 Change-Id: I00097cede2536c88ade3f318479eab309695b41e Signed-off-by: liamfallon --- policy-jre/alpine/pom.xml | 96 +--------------------------- policy-jre/alpine/src/main/docker/Dockerfile | 64 +++++++++++++------ 2 files changed, 45 insertions(+), 115 deletions(-) (limited to 'policy-jre/alpine') diff --git a/policy-jre/alpine/pom.xml b/policy-jre/alpine/pom.xml index 21305758..1a1574bc 100644 --- a/policy-jre/alpine/pom.xml +++ b/policy-jre/alpine/pom.xml @@ -2,7 +2,7 @@ ============LICENSE_START======================================================= Copyright (C) 2019 Ericsson, Tieto. All rights reserved. Modifications Copyright (C) 2020 AT&T Intellectual Property. All rights reserved. - Modifications Copyright (C) 2022 Nordix Foundation. + Modifications Copyright (C) 2022-2023 Nordix Foundation. ================================================================================ Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. @@ -37,95 +37,8 @@ onap/policy-jre-alpine - onap/integration-java11 - 9.0.0 - - - - baseImage - - - aarch64 - - - - - - org.apache.maven.plugins - maven-scm-plugin - 1.13.0 - - - org.codehaus.plexus - plexus-utils - 3.4.2 - - - org.apache.maven.scm - maven-scm-provider-gitexe - 1.13.0 - - - - connection - src/main/resources/meta - - - - checkout-onap-python - validate - - scm:git:https://gerrit.onap.org/r/integration/docker/onap-java11 - ${project.build.directory}/onap-java11 - - - checkout - - - - - - io.fabric8 - docker-maven-plugin - - - - generate-base-image - initialize - - true - 1.23 - ${docker.pull.registry} - ${docker.push.registry} - - - ${integration.java.name} - - try - ${project.build.directory}/onap-java11 - BareAlpine.Dockerfile - - ${integration.java.version} - ${integration.java.version}-${maven.build.timestamp} - ${project.docker.latest.minmax.tag.version} - - - - - - - build - - - - - - - - - ${project.artifactId}-${project.version} @@ -169,10 +82,6 @@ ${project.version}-${maven.build.timestamp} ${project.docker.latest.minmax.tag.version} - - ${integration.java.name} - ${integration.java.version} - @@ -205,9 +114,6 @@ build push - - ${docker.jre.imagename} - diff --git a/policy-jre/alpine/src/main/docker/Dockerfile b/policy-jre/alpine/src/main/docker/Dockerfile index d4fed90c..f1bf2496 100644 --- a/policy-jre/alpine/src/main/docker/Dockerfile +++ b/policy-jre/alpine/src/main/docker/Dockerfile @@ -1,7 +1,7 @@ # ============LICENSE_START======================================================= # Copyright (C) 2019 Tieto. All rights reserved. # Modifications Copyright (C) 2020, 2021 AT&T Intellectual Property. All rights reserved. -# Modifications Copyright (C) 2020, 2022 Nordix Foundation. +# Modifications Copyright (C) 2020, 2022-2023 Nordix Foundation. # ================================================================================ # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. @@ -18,15 +18,7 @@ # SPDX-License-Identifier: Apache-2.0 # ============LICENSE_END========================================================= -# Docker file to build a base image for all policy components images -# -# $JAVA_HOME is set to /usr/lib/jvm/java-11-openjdk -# more details at https://hub.docker.com/_/openjdk - -ARG INTEGRATION_JAVA_NAME=${INTEGRATION_JAVA_NAME} -ARG INTEGRATION_JAVA_VERSION=${INTEGRATION_JAVA_VERSION} - -FROM ${INTEGRATION_JAVA_NAME}:${INTEGRATION_JAVA_VERSION} +FROM alpine:3.17 LABEL maintainer="Policy Team" LABEL org.opencontainers.image.title="Policy JRE Alpine" @@ -38,21 +30,53 @@ LABEL org.opencontainers.image.created="${git.build.time}" LABEL org.opencontainers.image.version="${git.build.version}" LABEL org.opencontainers.image.revision="${git.commit.id.abbrev}" +ENV JAVA_HOME /usr/lib/jvm/default-jvm +ENV JAVA_OPTS="-Xms256m -Xmx1g" +ENV JAVA_SEC_OPTS="" ENV POLICY_HOME=/opt/app/policy +ENV PATH $JAVA_HOME/bin:$PATH -USER root +ARG user=onap +ARG group=onap -RUN apk update \ - && apk add --no-cache \ +# Default to UTF-8 file.encoding +ENV LANG='en_US.UTF-8' LANGUAGE='en_US:en' LC_ALL='en_US.UTF-8' + +# Generic additions +RUN apk add --no-cache \ + libretls \ + musl-locales \ + musl-locales-lang \ + openjdk11-jre \ + openssl \ + ca-certificates && \ + rm -rf /var/cache/apk/* && \ +# ONAP additions + addgroup -S $group && \ + adduser -G $group -D $user && \ + mkdir /var/log/$user && \ + mkdir /app && \ + chown -R $user:$group /var/log/$user && \ + chown -R $user:$group /app && \ +# Policy Framework additions + apk update && \ + apk add --no-cache \ busybox-extras \ curl \ jq \ procps \ unzip \ - zip \ - && addgroup -S policy \ - && adduser -S --shell /bin/sh -G policy policy \ - && mkdir -p ${POLICY_HOME}/ \ - && chown policy:policy ${POLICY_HOME} \ - && mkdir -p /usr/lib/jvm/ \ - && ln -s /opt/java/openjdk /usr/lib/jvm/java-11-openjdk + zip && \ + rm -rf /var/cache/apk/* && \ + addgroup -S policy && \ + adduser -S --shell /bin/sh -G policy policy && \ + mkdir -p ${POLICY_HOME}/ && \ + chown policy:policy ${POLICY_HOME} && \ + mkdir -p /usr/lib/jvm/ && \ + ln -s /opt/java/openjdk /usr/lib/jvm/default-jvm + +# Tell docker that all future commands should be run as the onap user +USER $user +WORKDIR /app + +ENTRYPOINT exec java $JAVA_SEC_OPTS $JAVA_OPTS -jar /app/app.jar -- cgit 1.2.3-korg