ARG BASE_IMAGE=172.31.198.7:10082/java-project/eclipse-temurin:17-jre-alpine FROM ${BASE_IMAGE} AS extractor WORKDIR /workspace ARG JAR_FILE COPY ${JAR_FILE} app.jar RUN java -Djarmode=layertools -jar app.jar extract FROM ${BASE_IMAGE} RUN addgroup -S app \ && adduser -S -G app -u 10001 app WORKDIR /app # 预建镜像内运行时数据和日志目录并归属 app 用户;宿主机 bind mount 的属主需在部署前单独设置为 UID 10001。 RUN mkdir -p /data/files && chown -R app:app /data # 依赖层稳定、业务代码层高频变化;Registry 只需传输实际变化的 Layer。 COPY --from=extractor --chown=app:app /workspace/dependencies/ ./ COPY --from=extractor --chown=app:app /workspace/spring-boot-loader/ ./ COPY --from=extractor --chown=app:app /workspace/snapshot-dependencies/ ./ COPY --from=extractor --chown=app:app /workspace/application/ ./ USER app ENV JAVA_OPTS="-XX:MaxRAMPercentage=75.0 -XX:+ExitOnOutOfMemoryError -Dfile.encoding=UTF-8" \ SERVER_PORT=8080 EXPOSE 8080 HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \ CMD busybox wget -q -O /dev/null "http://127.0.0.1:${SERVER_PORT}/actuator/health" || exit 1 ENTRYPOINT ["sh", "-c", "exec java $JAVA_OPTS org.springframework.boot.loader.launch.JarLauncher"]