Add extra logging, make builds use BUILDKIT and make the container more secure by using a different user
This commit is contained in:
parent
891ae1ae0b
commit
4ffa0021d4
|
@ -8,6 +8,7 @@ stages:
|
|||
variables:
|
||||
IMAGE_TAG: $CI_REGISTRY_IMAGE:latest
|
||||
NAME: $CI_PROJECT_NAME
|
||||
DOCKER_BUILDKIT: 1
|
||||
|
||||
build_and_push:
|
||||
stage: build
|
||||
|
|
|
@ -10,4 +10,10 @@ FROM openjdk:8-jre-stretch
|
|||
|
||||
COPY --from=build /app/build/libs/ottobot.jar /otto.jar
|
||||
|
||||
RUN chmod 444 /otto.jar
|
||||
|
||||
RUN useradd -r -u 1001 otto
|
||||
|
||||
USER otto
|
||||
|
||||
CMD java -jar /otto.jar
|
|
@ -6,7 +6,7 @@
|
|||
</appender>
|
||||
|
||||
|
||||
<root level="INFO">
|
||||
<root level="DEBUG">
|
||||
<appender-ref ref="STDOUT"/>
|
||||
<!--<appender-ref ref="FILE"/>-->
|
||||
</root>
|
||||
|
|
Loading…
Reference in a new issue