FROM moshangjunmowen/jdk-jre:v17.0.19

# 临时切换 root 创建日志目录，并授权给 appuser
USER root
RUN mkdir -p /home/logs && chown appuser:appuser /home/logs

# 恢复非 root 用户
USER appuser

ARG JAR_FILE
LABEL maintainer="moshangjunmowen@foxmail.com"

COPY --chown=appuser:appuser ${JAR_FILE} /app/app.jar

ENV JAVA_TOOL_OPTIONS="-Djava.security.egd=file:/dev/./urandom ${JAVA_TOOL_OPTIONS}"

CMD ["/app/app.jar"]