签入版本

2025-09-18 21:04:09 +08:00
parent ecc08779a8
commit 417e010bb0
2 changed files with 338 additions and 0 deletions
@@ -0,0 +1,129 @@
+# 使用 Debian 13 (trixie) 作为基础镜像
+# debian:trixie-slim（Debian 13 的代号）
+FROM debian:trixie-slim
+
+# 维护者信息
+LABEL maintainer="小蚂蚁云团队" \
+      description="JDK 17 on Debian with Chinese support" \
+      version="1.0"
+
+# 设置环境变量
+ENV LANG zh_CN.UTF-8
+ENV LC_ALL zh_CN.UTF-8
+ENV JAVA_HOME /opt/jdk-17.0.16
+ENV PATH $JAVA_HOME/bin:$PATH
+ENV TZ Asia/Shanghai
+
+# 设置工作目录
+WORKDIR /tmp
+
+# 配置阿里云 Debian 镜像源并安装基础软件包
+RUN echo "deb http://mirrors.aliyun.com/debian/ trixie main non-free non-free-firmware" > /etc/apt/sources.list && \
+    echo "deb http://mirrors.aliyun.com/debian/ trixie-updates main non-free non-free-firmware" >> /etc/apt/sources.list && \
+    echo "deb http://mirrors.aliyun.com/debian/ trixie-backports main non-free non-free-firmware" >> /etc/apt/sources.list && \
+    echo "deb http://mirrors.aliyun.com/debian-security trixie-security main non-free non-free-firmware" >> /etc/apt/sources.list && \
+    apt-get update && \
+    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+        ca-certificates \
+        wget \
+        curl \
+        fontconfig \
+        locales \
+        tzdata \
+        && \
+    # 安装中文语言支持
+    apt-get install -y --no-install-recommends locales-all && \
+    # 生成中文locale
+    echo "zh_CN.UTF-8 UTF-8" > /etc/locale.gen && \
+    echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen && \
+    locale-gen && \
+    update-locale LANG=zh_CN.UTF-8 LC_ALL=zh_CN.UTF-8 && \
+    # 设置时区
+    ln -fs /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \
+    echo "Asia/Shanghai" > /etc/timezone && \
+    dpkg-reconfigure --frontend noninteractive tzdata && \
+    # 清理apt缓存
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+
+# 添加并精简 JDK
+ADD jdk-17.0.16_linux-x64_bin.tar.gz /opt/
+
+# 精简JDK：删除不必要的文件
+RUN set -eux && \
+    # 重命名JDK目录
+    mv /opt/jdk-17.0.16 /opt/jdk-17.0.16-original && \
+    \
+    # 创建新的精简JDK目录
+    mkdir -p /opt/jdk-17.0.16 && \
+    \
+    # 保留必要的目录和文件
+    cp -r /opt/jdk-17.0.16-original/bin /opt/jdk-17.0.16/ && \
+    cp -r /opt/jdk-17.0.16-original/lib /opt/jdk-17.0.16/ && \
+    cp -r /opt/jdk-17.0.16-original/conf /opt/jdk-17.0.16/ && \
+    cp -r /opt/jdk-17.0.16-original/include /opt/jdk-17.0.16/ && \
+    \
+    # 使用find命令删除调试文件（更可靠）
+    find /opt/jdk-17.0.16 -name "*.diz" -delete && \
+    find /opt/jdk-17.0.16 -name "*.debuginfo" -delete && \
+    find /opt/jdk-17.0.16 -name "*.pdb" -delete && \
+    \
+    # 删除不必要的模块和文件
+    rm -rf /opt/jdk-17.0.16/lib/src.zip \
+           /opt/jdk-17.0.16/lib/missioncontrol \
+           /opt/jdk-17.0.16/lib/visualvm \
+           /opt/jdk-17.0.16/lib/jfr \
+           \
+           # 删除演示和样例
+           /opt/jdk-17.0.16-original/demo \
+           /opt/jdk-17.0.16-original/sample \
+           /opt/jdk-17.0.16-original/man \
+           \
+           # 删除文档
+           /opt/jdk-17.0.16-original/legal \
+           /opt/jdk-17.0.16-original/README.md \
+           /opt/jdk-17.0.16-original/release && \
+    \
+    # 删除原始JDK目录
+    rm -rf /opt/jdk-17.0.16-original && \
+    \
+    # 设置权限
+    chmod -R 755 /opt/jdk-17.0.16 && \
+    chown -R root:root /opt/jdk-17.0.16 &&\
+    \
+    # 验证JDK安装
+    /opt/jdk-17.0.16/bin/java -version && \
+    /opt/jdk-17.0.16/bin/javac -version
+
+# 清理临时文件和缓存
+RUN rm -rf /tmp/* /var/tmp/* /var/log/*log \
+    /var/log/*.log /var/log/dmesg /var/log/audit/*log \
+    /root/.cache
+
+# 复制字体文件（如果需要）
+# COPY ./fonts/ /usr/share/fonts/
+# RUN fc-cache -fv
+
+# 创建非 root 用户运行应用
+RUN groupadd -r esxi && \
+    useradd -r -g esxi -m -d /app esxi && \
+    chown -R esxi:esxi /app && \
+    # 设置JDK目录权限
+    chown -R esxi:esxi $JAVA_HOME
+
+# 验证 JDK 安装
+RUN $JAVA_HOME/bin/java -version && \
+    $JAVA_HOME/bin/javac -version
+
+# 设置最终工作目录
+WORKDIR /opt/apps
+
+# # 切换到非root用户
+# USER esxi
+
+# 健康检查（可选）
+HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
+    CMD $JAVA_HOME/bin/java -version || exit 1
+
+# 默认命令
+CMD ["java", "-version"]