👱🏻‍♀️ Monika: Isn't root anymore.

Monika does not need to be root, if we grant read access on the monitored file systems.
ijug-ev · May 10, 2024 · 423752e · 423752e
1 parent 6e6fe9a
commit 423752e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/main/docker/Dockerfile b/src/main/docker/Dockerfile
@@ -1,7 +1,7 @@
-FROM gcr.io/distroless/java17-debian12
+FROM gcr.io/distroless/java17-debian12:nonroot
 COPY monika-1.0-SNAPSHOT.jar /home
 RUN [ "java", "-XX:ArchiveClassesAtExit=monika.jsa", "-jar", "/home/monika-1.0-SNAPSHOT.jar", "--stop" ]
 RUN [ "java", "-XX:ArchiveClassesAtExit=healthcheck.jsa", "-jar", "/home/monika-1.0-SNAPSHOT.jar", "--check-health", "--ignore-errors" ]
 EXPOSE 8080
 ENTRYPOINT [ "java", "-XX:SharedArchiveFile=monika.jsa", "-jar", "/home/monika-1.0-SNAPSHOT.jar" ]
-HEALTHCHECK CMD [ "java", "-XX:SharedArchiveFile=healthcheck.jsa", "-jar", "/home/monika-1.0-SNAPSHOT.jar", "--check-health" ]
+HEALTHCHECK CMD [ "java", "-XX:SharedArchiveFile=healthcheck.jsa", "-jar", "/home/monika-1.0-SNAPSHOT.jar", "--check-health" ]