Block a user
nook-server (be734d4)
Published 2026-10-04 13:21:57 +04:00 by andrey
Installation
docker pull git.zlygostev.com/andrey/nook-server:be734d4sha256:933cdd9802668febdd8174eafd39dbd394afad80841263aa11a6bb1dc8828500
Image Layers
| ADD alpine-minirootfs-3.24.2-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| ENV JAVA_HOME=/opt/java/openjdk |
| ENV PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8 |
| RUN /bin/sh -c set -eux; apk add --no-cache fontconfig ttf-dejavu ca-certificates p11-kit-trust musl-locales musl-locales-lang tzdata coreutils openssl ; rm -rf /var/cache/apk/* # buildkit |
| ENV JAVA_VERSION=jdk-25.0.4.1+1 |
| RUN /bin/sh -c set -eux; ARCH="$(apk --print-arch)"; case "${ARCH}" in aarch64) ESUM='0200539904de3669dce5c435aa1ef71f530325d6461c76d85fe90d5424e4974e'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.4.1%2B1/OpenJDK25U-jre_aarch64_alpine-linux_hotspot_25.0.4.1_1.tar.gz'; ;; x86_64) ESUM='cde9e39d32cab07722cb3218d91980091012f16333f8a298c40896cd05e2ffea'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.4.1%2B1/OpenJDK25U-jre_x64_alpine-linux_hotspot_25.0.4.1_1.tar.gz'; ;; *) echo "Unsupported arch: ${ARCH}"; exit 1; ;; esac; apk add --no-cache --virtual .fetch-deps gnupg; wget -O /tmp/openjdk.tar.gz ${BINARY_URL}; wget -O /tmp/openjdk.tar.gz.sig ${BINARY_URL}.sig; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 3B04D753C9050D9A5D343F39843C48A565F8F04B; gpg --batch --verify /tmp/openjdk.tar.gz.sig /tmp/openjdk.tar.gz; rm -rf "${GNUPGHOME}" /tmp/openjdk.tar.gz.sig; echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -; mkdir -p "$JAVA_HOME"; tar --extract --file /tmp/openjdk.tar.gz --directory "$JAVA_HOME" --strip-components 1 --no-same-owner ; rm -f /tmp/openjdk.tar.gz; apk del --no-network .fetch-deps; # buildkit |
| RUN /bin/sh -c set -eux; echo "Verifying install ..."; echo "java --version"; java --version; echo "Complete." # buildkit |
| COPY --chmod=755 entrypoint.sh /__cacert_entrypoint.sh # buildkit |
| ENTRYPOINT ["/__cacert_entrypoint.sh"] |
| ARG PACKAGES_REFRESH=2026-10-04 |
| RUN |1 PACKAGES_REFRESH=2026-10-04 /bin/sh -c apk upgrade --no-cache && apk add --no-cache ffmpeg chromaprint libstdc++ libgomp gcompat && ffmpeg -version | head -1 > /app-tool-versions.txt && fpcalc -version | head -1 >> /app-tool-versions.txt && cat /app-tool-versions.txt # buildkit |
| RUN |1 PACKAGES_REFRESH=2026-10-04 /bin/sh -c addgroup -g 1000 nook && adduser -u 1000 -G nook -D -H -s /sbin/nologin nook # buildkit |
| WORKDIR /app |
| COPY --chown=nook:nook /app/target/*.jar app.jar # buildkit |
| RUN |1 PACKAGES_REFRESH=2026-10-04 /bin/sh -c mkdir -p /data && chown nook:nook /data # buildkit |
| USER nook |
| EXPOSE [8096/tcp] |
| HEALTHCHECK {Test:[CMD-SHELL wget -qO- http://127.0.0.1:8096/actuator/health || exit 1] Interval:15s Timeout:5s StartPeriod:40s StartInterval:0s Retries:3} |
| ENTRYPOINT ["java" "-jar" "/app/app.jar"] |