Hardcode uid, gid in Dockerfile

.gitignore

@@ -41,6 +41,7 @@ out/
 
 
 src/main/resources/application-local.properties
+src/main/resources/application-local.yaml
 
 src/main/resources/static
 !src/main/resources/static/index.html

.src.ci.yaml

@@ -1,31 +0,0 @@
-on:
-  push:
-    - workflows: build-package-workflow
-      filter:
-        branches: ["main"]
-  pull_request:
-    - workflows: build-package-workflow
-      filter:
-        source_branches: ["**", "!test**"]
-        target_branches: "main"
-
-workflows:
-  build-package-workflow:
-    tasks:
-      - build-package-task
-
-tasks:
-  - name: build-package-task
-    cubes:
-      - name: setup-jdk
-        script:
-          - sudo apt install openjdk-17-jdk -y
-      - name: test
-        script:
-          - ./gradlew check
-      - name: package
-        script:
-          - ./gradlew assemble
-        artifacts:
-          paths:
-            - build/libs/memevizor-0.0.1-SNAPSHOT.jar

Dockerfile

@@ -1,12 +1,15 @@
 FROM docker.io/eclipse-temurin:21
 
+ARG USER_ID=10001
+ARG GROUP_ID=10001
+
 RUN apt-get update \
     && apt-get install -y ffmpeg \
     && apt-get clean \
     && rm -rf /var/lib/apt/lists/*
 
-RUN groupadd --system app \
+RUN groupadd -g ${GROUP_ID} app \
-    && useradd --no-log-init --system --shell /sbin/nologin --gid app app
+    && useradd --no-log-init -u ${USER_ID} -g app --shell /sbin/nologin app
 
 WORKDIR /app
 
@@ -14,7 +17,7 @@ ARG JAR_FILE=build/libs/*.jar
 COPY --chown=app:app ${JAR_FILE} app.jar
 COPY --chown=app:app build/resources/main/static BOOT-INF/classes/static
 
-USER app:app
+USER ${USER_ID}:${GROUP_ID}
 
 ENTRYPOINT ["java","-jar","app.jar"]
 

build.gradle.kts

@@ -32,6 +32,8 @@ dependencies {
     implementation("io.github.kotlin-telegram-bot.kotlin-telegram-bot:telegram:6.3.0")
     implementation("io.github.oshai:kotlin-logging-jvm:7.0.3")
     implementation(awssdk.services.s3)
+    implementation("org.springframework.boot:spring-boot-starter-actuator")
+    implementation("org.springframework.boot:spring-boot-starter-webmvc")
     developmentOnly("org.springframework.boot:spring-boot-devtools")
     annotationProcessor("org.springframework.boot:spring-boot-configuration-processor")
     testImplementation("org.springframework.boot:spring-boot-starter-test")

src/main/resources/application-local.properties.dist

@@ -1,8 +0,0 @@
-bot.forward-chat-id=<?>
-bot.approver-user-ids[0]=<?>
-bot.token=
-s3.endpoint=https://storage.yandexcloud.net
-s3.region=ru-central1
-s3.bucket=memevizor-test
-s3.access-key-id=<?>
-s3.secret-access-key=<?>

src/main/resources/application-local.yaml.dist

@@ -0,0 +1,11 @@
+bot:
+  forward-chat-id: <?>
+  approver-user-ids:
+    - <?>
+  token: <?>
+s3:
+  endpoint: https://storage.yandexcloud.net
+  region: ru-central1
+  bucket: memevizor-test
+  access-key-id: <?>
+  secret-access-key: <?>

src/main/resources/application.properties

@@ -1,2 +0,0 @@
-spring.application.name=memevizor
-

src/main/resources/application.yaml

@@ -0,0 +1,2 @@
+spring.application.name: memevizor
+management.server.port: 7900