FROM eclipse-temurin:23-jdk-alpine AS builder

WORKDIR /usr/src/myapp

COPY . .

RUN apk add --no-cache maven binutils

RUN mvn clean package -DskipTests

RUN jlink \

--verbose \

--add-modules java.base,java.logging \

--compress=2 \

--no-header-files \

--no-man-pages \

--strip-debug \

--output /minimal-jre

FROM alpine:latest

ENV JAVA_HOME=/jre

ENV PATH="${JAVA_HOME}/bin:${PATH}"

RUN apk --no-cache add ca-certificates

ARG USER_NAME="appuser"

ARG USER_ID="1000"

ARG GROUP_NAME="apps"

ARG GROUP_ID="1000"

RUN addgroup --gid $GROUP_ID $GROUP_NAME && \

adduser --disabled-password --uid $USER_ID --ingroup $GROUP_NAME $USER_NAME

ARG APP_DIR=/app

RUN mkdir $APP_DIR && chown -R $USER_NAME:$GROUP_NAME $APP_DIR

WORKDIR $APP_DIR

COPY --from=builder /minimal-jre $JAVA_HOME

COPY --from=builder --chown=$USER_NAME:$GROUP_NAME /usr/src/myapp/target/*.jar ./app.jar

USER $USER_NAME:$GROUP_NAME

EXPOSE 8123

ENTRYPOINT ["java", "-XX:+UseZGC", "-XX:+ZGenerational", "-jar", "./app.jar"]