Dockerfile_base

# Base docker environment for builder and deployment, used for a couple of things
# - Keep all files on same os / java version
# - Perform basic setup
# - Prevent re-pulling from docker hub, to avoid rate limiting.


FROM openjdk:15-ea-jdk-alpine3.12
# This docker image isn't maintained anymore, the latest version that's still getting updates is 17.
# Unfortunately, the current guice supports java <= 16, pending this issue:
# https://github.com/google/guice/issues/1536

# This is one of many reasons why I want to drop play framework.
# But until the patch is released, I'll manually upgrade the container image.

LABEL maintainer="reader@lucaskjaerozhang.com"
WORKDIR /app

# Upgrade to Alpine 3.13
RUN sed -i -e 's/v3\.12/v3.13/g' /etc/apk/repositories && \
    apk update && \
    apk add --upgrade apk-tools=2.12.7-r0

# The play framework runners are bash scripts, so we need this to run the service.
RUN apk add --no-cache bash=5.1.0-r0

# Manually upgrade all packages to avoid security vulnerabilities
RUN apk add --upgrade busybox=1.32.1-r7 \
                      libcrypto1.1=1.1.1l-r0 \
                      libssl1.1=1.1.1l-r0 \
                      musl-utils=1.2.2-r1 \
                      ssl_client=1.32.1-r7 \
                      p11-kit=0.23.22-r0 \
                      p11-kit-trust=0.23.22-r0