feat: switch default image to distroless and specify nonroot user

iBotPeaches · Jan 18, 2025 · 98709b8 · 98709b8
1 parent 3282e86
commit 98709b8
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -7,10 +7,12 @@ COPY . .
 RUN gradle build shadowJar proguard
 
 
-FROM openjdk:11
+FROM gcr.io/distroless/java:11
 
 WORKDIR /data
 
 COPY --from=build /src/brut.apktool/apktool-cli/build/libs/apktool-cli.jar /
 
+USER nonroot
+
 ENTRYPOINT ["java", "-Xmx1024M", "-Dfile.encoding=utf-8", "-Djdk.util.zip.disableZip64ExtraFieldValidation=true", "-Djdk.nio.zipfs.allowDotZipEntry=true", "-jar", "/apktool-cli.jar"]