# limitations under the License.
#
-FROM openjdk:8-jre-alpine
+FROM nexus3.onap.org:10001/onap/integration-java11
-ARG SERVER_PORT
-ARG PKG_FILENAME=nbi-rest-services-4.0.0.jar
-ADD target/$PKG_FILENAME app.jar
+USER onap
-RUN addgroup -S appgroup
-RUN adduser -S appuser -G appgroup
-RUN mkdir temptoscafile
-RUN chown appuser:appgroup temptoscafile/
+ARG SERVER_PORT
+ARG PKG_FILENAME=nbi-rest-services-8.0.0-SNAPSHOT.jar
+ADD target/$PKG_FILENAME /opt/onap/app.jar
-COPY src/main/resources/certificate /certs
-ARG CERT_PASS=changeit
-RUN for cert in $(ls -d /certs/*); do \
- echo "adding $cert to java keystore..."; \
- keytool -import \
- -file "$cert" \
- -storepass "${CERT_PASS}" \
- -keystore $JAVA_HOME/lib/security/cacerts \
- -alias "$(basename $cert)" \
- --noprompt; \
- done
+RUN mkdir temptoscafile && chown onap:onap temptoscafile/
-USER appuser:appgroup
ENV SERVER_PORT=${SERVER_PORT:-8080}
-ENV JAVA_OPTS="-Djava.security.egd=file:/dev/./urandom"
+ENV JAVA_OPTS=${JAVA_OPTS:--Djava.security.egd=file:/dev/./urandom}
EXPOSE $SERVER_PORT
-ENTRYPOINT java -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap $JAVA_OPTS -jar /app.jar
+ENTRYPOINT exec java -XX:+UseContainerSupport $JAVA_OPTS -jar /opt/onap/app.jar