java_security_properties.go

/*
 * Copyright 2018-2020 the original author or authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      https://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package jvmvendors

import (
	"fmt"
	"os"
	"path/filepath"

	"github.com/buildpacks/libcnb/v2"
	"github.com/paketo-buildpacks/libpak/v2"
	"github.com/paketo-buildpacks/libpak/v2/log"
)

type JavaSecurityProperties struct {
	LayerContributor libpak.LayerContributor
}

func NewJavaSecurityProperties(info libcnb.BuildpackInfo, logger log.Logger) JavaSecurityProperties {
	return JavaSecurityProperties{LayerContributor: libpak.NewLayerContributor(
		"Java Security Properties",
		info,
		libcnb.LayerTypes{
			Launch: true,
		},
		logger,
	)}
}

func (j JavaSecurityProperties) Contribute(layer *libcnb.Layer) error {
	return j.LayerContributor.Contribute(layer, func(layer *libcnb.Layer) error {
		file := filepath.Join(layer.Path, "java-security.properties")
		// #nosec G306 - permissions need to be 644 as it should be readable by non-owners
		if err := os.WriteFile(file, []byte{}, 0644); err != nil {
			return fmt.Errorf("unable to touch file %s\n%w", file, err)
		}

		layer.LaunchEnvironment.Appendf("JAVA_TOOL_OPTIONS", " ", "-Djava.security.properties=%s", file)
		layer.LaunchEnvironment.Default("JAVA_SECURITY_PROPERTIES", file)

		return nil
	})
}

func (j JavaSecurityProperties) Name() string {
	return "java-security-properties"
}