docker修改为普通用户,文件统一存放到home目录

This commit is contained in:
三丙
2024-11-22 15:30:20 +08:00
parent 6f078284ea
commit c23b25e6c5
8 changed files with 35 additions and 38 deletions

View File

@@ -16,7 +16,9 @@ RUN java -Djarmode=tools -jar application.jar extract --layers --destination ext
# 执行
FROM registry.cn-hangzhou.aliyuncs.com/sanbing/openjdk:21-jdk-slim-bullseye
WORKDIR /app
RUN useradd -m sanbing
WORKDIR /home/sanbing
COPY --from=builder /app/extracted/dependencies/ ./
COPY --from=builder /app/extracted/spring-boot-loader/ ./
COPY --from=builder /app/extracted/snapshot-dependencies/ ./
@@ -24,22 +26,18 @@ COPY --from=builder /app/extracted/application/ ./
COPY --from=base /app/jcpp-app-bootstrap/target/conf ./config
COPY --from=base /app/docker/start.sh .
RUN mkdir -p /var/log/sanbing && \
mkdir -p /var/log/sanbing/jcpp && \
mkdir -p /var/log/sanbing/accesslog && \
mkdir -p /var/log/sanbing/gc && \
mkdir -p /var/log/sanbing/heapdump && \
chown -R sanbing:sanbing /tmp \
chmod 700 -R /var/log/*
RUN chmod a+x *.sh && mv start.sh /usr/bin
RUN chmod a+x start.sh && \
mkdir -p /home/sanbing/logs/jcpp && \
mkdir -p /home/sanbing/logs/accesslog && \
mkdir -p /home/sanbing/logs/gc && \
mkdir -p /home/sanbing/logs/heapdump && \
chmod 700 -R /home/sanbing/logs/* && \
chown -R sanbing:sanbing /home/sanbing
EXPOSE 8080 8080
USER sanbing
ENV APP_LOG_LEVEL=INFO
ENV PROTOCOLS_LOG_LEVEL=INFO
CMD ["start.sh"]
USER sanbing
CMD ["/bin/bash", "start.sh"]