Dockerfile

# syntax=docker/dockerfile:1

# Multi-stage docker file with separate build and run steps for image size optimisation
# https://docs.docker.com/develop/develop-images/multistage-build/
# Use Eclipse Temurin JDK/JRE as a vendor-agnostic, high-qulity solution
# with permissive FLOSS license
# https://whichjdk.com/#adoptium-eclipse-temurin

###################
### Build stage ###
###################

FROM clojure:temurin-21-tools-deps-bookworm-slim AS build

# Create a working directory
RUN mkdir -p /usr/src/app
WORKDIR /usr/src/app

# Install deps as a separate step for layer caching
COPY deps.edn /usr/src/app/

# Compile uber-jar
COPY . /usr/src/app
RUN clojure -T:build uberjar :uber-file '"app.jar"'

#################
### Run stage ###
#################

FROM eclipse-temurin:21-jre-alpine AS run

# Create app directory for unpriviledged user
RUN mkdir -p /usr/src/app
WORKDIR /usr/src/app

# Create unpriviledged system user
RUN adduser --disabled-password --no-create-home --uid 1000 dienstplan

# Copy uber-jar from the build stage
COPY --from=build /usr/src/app/app.jar /usr/src/app/
COPY --from=build /usr/src/app/resources /usr/src/app/resources
RUN chown -R 1000:1000 /usr/src/app

# Run as unpriviledged user
USER 1000

# Use system properties to configure logging, socket server, etc:
# java -Dlogback.configurationFile=resources/logback.json.xml -jar app.jar
CMD ["java", "-jar", "app.jar"]