Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Optimize position-service (Java) Dockerfile #259

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mathieu-benoit
Copy link
Contributor

@mathieu-benoit mathieu-benoit commented Mar 8, 2025

Optimize position-service (Java) Dockerfile.

Continuity of #232, towards helping for this #231.

Note: this is moving from openjdk to eclipse-temurin as the recommended approach.

263MB have been saved with the uncompressed container image on disk:

REPOSITORY                               TAG        SIZE
position-service                         after      257MB
position-service                         before     521MB

On a security standpoint, by using eclipse-temurin:21-jre-alpine base image, this is also reducing the number of packages included in the container: with Syft, from 210 packages to 140 packages (70 packages included in the container image saved).

Which is consequently reducing the number of CVEs too, with Trivy, from 62 to 0:

┌────────────────────────────────────────┬────────┬─────────────────┐
│                 Target                 │  Type  │ Vulnerabilities │
├────────────────────────────────────────┼────────┼─────────────────┤
│ position-service:before (ubuntu 22.04) │ ubuntu │       62        │
├────────────────────────────────────────┼────────┼─────────────────┤
│ position-service:after (alpine 3.21.3) │ alpine │       0         │
├────────────────────────────────────────┼────────┼─────────────────┤

Signed-off-by: Mathieu Benoit <mathieu-benoit@hotmail.fr>
Copy link

netlify bot commented Mar 8, 2025

Deploy Preview for lucky-concha-f3599f canceled.

Name Link
🔨 Latest commit b53d9fc
🔍 Latest deploy log https://app.netlify.com/sites/lucky-concha-f3599f/deploys/67cc7f91e4cd4d0008e18230

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant