-FROM openjdk:11-slim
-MAINTAINER Michael Winsauer <e1429715@student.tuwien.ac.at>
+FROM openjdk:11-slim as service-twitter-builder
+LABEL maintainer="Michael Winsauer <e1429715@student.tuwien.ac.at>"
COPY . /build
WORKDIR /build
-RUN ["./mvnw", "-q", "-Dmaven.test.skip", "package"]
+RUN ["./mvnw", "--batch-mode", "--quiet", "-Dmaven.test.skip", "package"]
-FROM openjdk:11-jre-slim
-MAINTAINER Michael Winsauer <e1429715@student.tuwien.ac.at>
+FROM openjdk:11-jre-slim as service-twitter
+LABEL maintainer="Michael Winsauer <e1429715@student.tuwien.ac.at>"
-VOLUME /tmp
EXPOSE 8084
+VOLUME /tmp
+
+RUN ["useradd", "--no-create-home", "twitter"]
+USER twitter:twitter
-COPY --from=0 /build/target/service-twitter-0.1.0-SNAPSHOT.jar /app/service-twitter.jar
+COPY --from=service-twitter-builder /build/target/service-twitter-0.1.0-SNAPSHOT.jar /app/service-twitter.jar
WORKDIR /app
ENTRYPOINT ["java", "-Djava.security.egd=file:/dev/./urandom", "-jar", "service-twitter.jar"]