122 lines
4.1 KiB
Docker
122 lines
4.1 KiB
Docker
# Ver: 1.8 by Endial Fang (endial@126.com)
|
|
#
|
|
|
|
# 可变参数 ========================================================================
|
|
|
|
# 设置当前应用名称及版本
|
|
ARG app_name=openjdk
|
|
ARG app_version=8u262b10
|
|
|
|
# 设置默认仓库地址，默认为 阿里云 仓库
|
|
ARG registry_url="registry.cn-shenzhen.aliyuncs.com"
|
|
|
|
# 设置 apt-get 源：default / tencent / ustc / aliyun / huawei
|
|
ARG apt_source=aliyun
|
|
|
|
# 编译镜像时指定用于加速的本地服务器地址
|
|
ARG local_url=""
|
|
|
|
|
|
# 0. 预处理 ======================================================================
|
|
FROM ${registry_url}/colovu/dbuilder as builder
|
|
|
|
# 声明需要使用的全局可变参数
|
|
ARG app_name
|
|
ARG app_version
|
|
ARG registry_url
|
|
ARG apt_source
|
|
ARG local_url
|
|
|
|
# 选择软件包源(Optional)，以加速后续软件包安装
|
|
RUN select_source ${apt_source};
|
|
|
|
# 安装依赖的软件包及库(Optional)
|
|
#RUN install_pkg xz-utils
|
|
|
|
# 设置工作目录
|
|
WORKDIR /tmp
|
|
|
|
# 下载并解压软件包
|
|
RUN set -eux; \
|
|
appVersion=8u262b10; \
|
|
appName=OpenJDK8U-jdk_x64_linux_${appVersion}.tar.gz; \
|
|
appKeys="0xCA5F11C6CE22644D42C6AC4492EF8D39DC13168F 0xEAC843EBD3EFDB98CC772FADA5CD6035332FA671"; \
|
|
[ -n ${local_url} ] && localURL=${local_url}/openjdk; \
|
|
appUrls="${localURL:-} \
|
|
https://github.com/AdoptOpenJDK/openjdk8-upstream-binaries/releases/download/jdk8u262-b10 \
|
|
"; \
|
|
download_pkg unpack ${appName} "${appUrls}";
|
|
|
|
# 1. 生成镜像 =====================================================================
|
|
FROM ${registry_url}/colovu/debian:buster
|
|
|
|
# 声明需要使用的全局可变参数
|
|
ARG app_name
|
|
ARG app_version
|
|
ARG registry_url
|
|
ARG apt_source
|
|
ARG local_url
|
|
|
|
# 镜像所包含应用的基础信息，定义环境变量，供后续脚本使用
|
|
ENV APP_NAME=openjdk8 \
|
|
APP_VERSION=8u262-b10
|
|
|
|
ENV JAVA_HOME=/usr/local/${APP_NAME} \
|
|
JRE_HOME=/usr/local/${APP_NAME}/jre
|
|
|
|
ENV PATH="${JAVA_HOME}/bin:${JAVA_HOME}/jre/bin:${PATH}" \
|
|
CLASSPATH=".:${JAVA_HOME}/lib:${JAVA_HOME}/jre/lib"
|
|
|
|
LABEL \
|
|
"Version"="v${app_version}" \
|
|
"Description"="Docker image for ${app_name}(v${app_version})." \
|
|
"Dockerfile"="https://github.com/colovu/docker-${app_name}" \
|
|
"Vendor"="Endial Fang (endial@126.com)"
|
|
|
|
# 从预处理过程中拷贝软件包(Optional)，可以使用阶段编号或阶段命名定义来源
|
|
COPY --from=builder /tmp/openjdk-8u262-b10 ${JAVA_HOME}
|
|
|
|
# 选择软件包源(Optional)，以加速后续软件包安装
|
|
RUN select_source ${apt_source}
|
|
|
|
# 安装依赖的软件包及库(Optional)
|
|
RUN install_pkg p11-kit ca-certificates dmidecode
|
|
|
|
# 更新 OpenJDK 绑定的证书
|
|
# 8-jdk uses "${JAVA_HOME}/jre/lib/security/cacerts" and
|
|
# 8-jre and 11+ uses "${JAVA_HOME}/lib/security/cacerts" directly (no "jre" directory)
|
|
RUN set -eux; \
|
|
{ \
|
|
echo '#!/usr/bin/env bash'; \
|
|
echo 'set -Eeuo pipefail'; \
|
|
echo 'if ! [ -d "${JAVA_HOME}" ]; then echo >&2 "error: missing JAVA_HOME environment variable"; exit 1; fi'; \
|
|
echo 'cacertsFile=; for f in "${JAVA_HOME}/lib/security/cacerts" "${JAVA_HOME}/jre/lib/security/cacerts"; do if [ -e "$f" ]; then cacertsFile="$f"; break; fi; done'; \
|
|
echo 'if [ -z "$cacertsFile" ] || ! [ -f "$cacertsFile" ]; then echo >&2 "error: failed to find cacerts file in ${JAVA_HOME}"; exit 1; fi'; \
|
|
echo 'trust extract --overwrite --format=java-cacerts --filter=ca-anchors --purpose=server-auth "$cacertsFile"'; \
|
|
} > /etc/ca-certificates/update.d/docker-openjdk; \
|
|
chmod +x /etc/ca-certificates/update.d/docker-openjdk; \
|
|
/etc/ca-certificates/update.d/docker-openjdk; \
|
|
\
|
|
find "${JAVA_HOME}/lib" -name '*.so' -exec dirname '{}' ';' | sort -u > /etc/ld.so.conf.d/docker-openjdk.conf; \
|
|
ldconfig; \
|
|
\
|
|
# 解决应用安装jre-headless时错误：update-alternatives: error: error creating symbolic link '/usr/share/man/man
|
|
mkdir -p /usr/share/man/man1;
|
|
|
|
# 执行预处理脚本，并验证安装的软件包
|
|
RUN set -eux; \
|
|
override_file="/usr/local/overrides/overrides-${APP_VERSION}.sh"; \
|
|
[ -e "${override_file}" ] && /bin/bash "${override_file}"; \
|
|
java -version; \
|
|
javac -version;
|
|
|
|
# 使用 non-root 用户运行后续的命令
|
|
USER 1001
|
|
|
|
# 设置工作目录
|
|
WORKDIR /srv/data
|
|
|
|
# 应用程序的启动命令，必须使用非守护进程方式运行
|
|
CMD []
|
|
|