Skip to content

Commit eead21a

Browse files
committed
Temporarily added debug jre to docker
1 parent f6490b2 commit eead21a

1 file changed

Lines changed: 5 additions & 1 deletion

File tree

Dockerfile

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# sha from https://hub.docker.com/layers/library/eclipse-temurin/21.0.9_10-jre-alpine-3.23/images/sha256-f599f6fa11f007b6dcf6e85ec2c372c1eba2b6940a7828eb6e665665ea5edd1c
2-
FROM eclipse-temurin@sha256:243e711289b0f17e05a4df60454bbb1b8ed7b126db4de2d5535da994b7417111
2+
FROM eclipse-temurin@sha256:89517925fa675c6c4b770bee7c44d38a7763212741b0d6fca5a5103caab21a97
33

44
RUN apk add --no-cache gcompat
55

@@ -20,12 +20,16 @@ COPY ./target/${JAR_NAME}-${JAR_VERSION}-static.tar.gz /app/static.tar.gz
2020
COPY ./conf/default-config.json /app/conf/
2121
COPY ./conf/*.xml /app/conf/
2222

23+
# Fix CVE-2025-68973: Update gnupg to patched version
24+
RUN apk update && apk upgrade gnupg && rm -rf /var/cache/apk/*
25+
2326
RUN tar xzvf /app/static.tar.gz --no-same-owner --no-same-permissions && rm -f /app/static.tar.gz
2427

2528
RUN adduser -D uid2-operator && mkdir -p /opt/uid2 && chmod 777 -R /opt/uid2 && mkdir -p /app && chmod 705 -R /app && mkdir -p /app/file-uploads && chmod 777 -R /app/file-uploads && mkdir -p /app/pod_terminating && chmod 777 -R /app/pod_terminating
2629
USER uid2-operator
2730

2831
CMD java \
32+
-XX:+UnlockDiagnosticVMOptions -XX:+DebugNonSafepoints \
2933
-XX:MaxRAMPercentage=95 -XX:-UseCompressedOops -XX:+PrintFlagsFinal -XX:-OmitStackTraceInFastThrow \
3034
-Djava.security.egd=file:/dev/./urandom \
3135
-Dvertx.logger-delegate-factory-class-name=io.vertx.core.logging.SLF4JLogDelegateFactory \

0 commit comments

Comments
 (0)