[CICD] Dockerfile 수정

Author: EunbeenDev

Dockerfile

@@ -1,10 +1,33 @@
-# Use Java 17 JRE as the base image
-FROM openjdk:17-jdk-slim
+# Use Gradle with JDK 17 for build stage
+FROM gradle:7.6-jdk17-alpine as builder
+WORKDIR /build
 
-# Copy the JAR file from the build output to the container
-# The build.gradle produces the JAR file under build/libs/
-ARG JAR_FILE=build/libs/*.jar
-COPY ${JAR_FILE} app.jar
+# Only download dependencies if build.gradle or settings.gradle changes
+COPY build.gradle settings.gradle /build/
+RUN gradle build -x test --parallel
 
-# Run the application
-ENTRYPOINT ["java", "-jar", "/app/app.jar"]
+# Build the application
+COPY . /build
+RUN gradle build -x test
+
+# Final runtime image
+FROM openjdk:17.0-slim
+WORKDIR /app
+
+# Copy JAR file from builder
+COPY --from=builder /build/build/libs/*-SNAPSHOT.jar ./app.jar
+
+# Set appropriate permissions for non-root user
+RUN chown nobody:nogroup /app
+
+# Run as non-root user
+USER nobody
+
+# Expose application port
+EXPOSE 8080
+
+# Environment variables for JVM options
+ENV JAVA_OPTS="-Djava.security.egd=file:/dev/./urandom -Dsun.net.inetaddr.ttl=0"
+
+# Application entrypoint
+ENTRYPOINT ["java", "-jar", "$JAVA_OPTS", "app.jar"]