How to build and configure custom JRE for Java Spring web application in Docker Image/containers
I am building my Java API server into a Docker image.
I am making my own custom JRE using this:
Then copying into a scratch container image so there is nothing else. I would like to keep it this way to minimize attack vectors and keep the image size on the smaller side as much as possible.
I am unfamiliar with Java applications, this is the first time I'm building an application with Java and I'd like to learn best practices.
What are some common arguments to pass into the JVM when you run your application in a container? I read briefly about how you should set the heap sizes and put on container support to prevent the JVM from adjusting the max heap size when running in a container.
Is this advised? What else would you run in addition to the container support and heap size arguments?
The goal is to keep attack vectors small while still maintaining good performance.
At the end, this is what I have for my final image:
I am making my own custom JRE using this:
Then copying into a scratch container image so there is nothing else. I would like to keep it this way to minimize attack vectors and keep the image size on the smaller side as much as possible.
I am unfamiliar with Java applications, this is the first time I'm building an application with Java and I'd like to learn best practices.
What are some common arguments to pass into the JVM when you run your application in a container? I read briefly about how you should set the heap sizes and put on container support to prevent the JVM from adjusting the max heap size when running in a container.
Is this advised? What else would you run in addition to the container support and heap size arguments?
The goal is to keep attack vectors small while still maintaining good performance.
At the end, this is what I have for my final image:
