Update base image jre 21 (#4099)

Add workflow for base image build and push

Author: yvoswillens

.github/workflows/docker-flowable-base-image-java.yml

@@ -0,0 +1,42 @@
+name: Flowable Base Image Multi-Arch Build and Push
+
+on:
+  schedule:
+    - cron: "0 1 * * *"
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Log into dockerhub
+        uses: docker/login-action@v1
+        with:
+          username: ${{ secrets.DOCKER_USER }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: ./docker/base-image
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: flowable/flowable-jre-test:21
+
+      - name: Scan image
+        uses: anchore/scan-action@v6
+        with:
+          image: flowable/flowable-jre-test:21
+          output-format: 'table'
+          severity-cutoff: 'high'
+

.github/workflows/docker-release-with-latest.yml

@@ -10,28 +10,27 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Set up JDK 17
+      - name: Set up JDK 21
         uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
-          java-version: '17'
+          java-version: '21'
 
       - name: Get current project meta
         id: meta
-        run: echo "::set-output name=version::$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)"
+        run: echo "::set-output name=version::$(./mvnw help:evaluate -Dexpression=project.version -q -DforceStdout)"
 
       - name: Build Docker images with Maven
         run: |
-          mvn clean package -B -Dstyle.color=always \
+          ./mvnw clean package -B -Dstyle.color=always \
           -P dockerDeps,dockerPublishWithLatest \
           -pl :flowable-app-rest \
           -Ddocker.publisher.user=${{ secrets.DOCKER_USER }} \
-          -Ddocker.publisher.password=${{ secrets.DOCKER_PASSWORD }}
+          -Ddocker.publisher.password=${{ secrets.DOCKER_PASSWORD }} \
+          -B -V --no-transfer-progress
 
-      - name: Install cosign
-        uses: sigstore/cosign-installer@d6a3abf1bdea83574e28d40543793018b6035605
-        with:
-          cosign-release: 'v1.7.1'
+      - name: Install Cosign
+        uses: sigstore/[email protected]
 
       - name: Write signing key to disk
         run: echo "${{ secrets.SIGNING_SECRET }}" > cosign.key
@@ -49,8 +48,10 @@ jobs:
           cosign sign --key cosign.key \
             -a "repo=${{ github.repository }}" \
             -a "ref=${{ github.sha }}" \
-            flowable/flowable-rest:${{ steps.meta.outputs.version }} 
+            flowable/flowable-rest:${{ steps.meta.outputs.version }} \
+            -y
           cosign sign --key cosign.key \
             -a "repo=${{ github.repository }}" \
             -a "ref=${{ github.sha }}" \
-            flowable/flowable-rest:latest
+            flowable/flowable-rest:latest \
+            -y

.github/workflows/docker-release.yml

@@ -10,28 +10,27 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Set up JDK 17
+      - name: Set up JDK 21
         uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
-          java-version: '17'
+          java-version: '21'
 
       - name: Get current project meta
         id: meta
-        run: echo "::set-output name=version::$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)"
+        run: echo "::set-output name=version::$(./mvnw help:evaluate -Dexpression=project.version -q -DforceStdout)"
 
       - name: Build Docker images with Maven
         run: |
-          mvn clean package -B -Dstyle.color=always  \
+          ./mvnw clean package -B -Dstyle.color=always  \
           -P dockerDeps,dockerPublish \
           -pl :flowable-app-rest \
           -D docker.publisher.user=${{ secrets.DOCKER_USER }} \
-          -D docker.publisher.password=${{ secrets.DOCKER_PASSWORD }}
+          -D docker.publisher.password=${{ secrets.DOCKER_PASSWORD }} \
+          -B -V --no-transfer-progress
 
-      - name: Install cosign
-        uses: sigstore/cosign-installer@d6a3abf1bdea83574e28d40543793018b6035605
-        with:
-          cosign-release: 'v1.7.1'
+      - name: Install Cosign
+        uses: sigstore/[email protected]
 
       - name: Write signing key to disk
         run: echo "${{ secrets.SIGNING_SECRET }}" > cosign.key
@@ -49,4 +48,5 @@ jobs:
           cosign sign --key cosign.key \
             -a "repo=${{ github.repository }}" \
             -a "ref=${{ github.sha }}" \
-            flowable/flowable-rest:${{ steps.meta.outputs.version }} 
+            flowable/flowable-rest:${{ steps.meta.outputs.version }} \
+            -y

docker/base-image/Dockerfile

@@ -1,6 +1,7 @@
-FROM azul/zulu-openjdk-alpine:17.0.9-jre
+FROM azul/zulu-openjdk-alpine:21-jre-latest
 LABEL maintainer="Flowable <[email protected]>"
-RUN apk add --no-cache ttf-dejavu && rm -rf /var/cache/apk/*
+
+RUN apk add --no-cache fontconfig ttf-dejavu && rm -rf /var/cache/apk/*
 
 RUN addgroup -S flowable && adduser -S flowable -G flowable
 

docker/base-image/README.md

@@ -1,6 +1,6 @@
 # Flowable Docker base image
 
-Extends from azul/zulu-openjdk-alpine:17.0.9-jre
+Extends from azul/zulu-openjdk-alpine:21-jre-latest
 
 Adds `flowable:flowable` user which can be used to 'step down' from root when executing Flowable applications.
 

docker/base-image/build.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 set -eou pipefail
 
-readonly IMAGE=${1:-"flowable/flowable-jre:17.0.9"}
+readonly IMAGE=${1:-"flowable/flowable-jre:21"}
 echo "Image name: ${IMAGE}"
 
 echo "Building image..."

docker/base-image/push.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 set -eou pipefail
 
-readonly IMAGE=${1:-"flowable/flowable-jre:17.0.9"}
+readonly IMAGE=${1:-"flowable/flowable-jre:21"}
 echo "Image name: ${IMAGE}"
 
 echo "Pushing image..."

modules/flowable-app-rest/pom.xml

@@ -531,7 +531,7 @@
                         <artifactId>jib-maven-plugin</artifactId>
                         <configuration>
                             <from>
-                                <image>flowable/flowable-jre:17.0.9</image>
+                                <image>flowable/flowable-jre:21</image>
                             </from>
                             <to>
                                 <image>flowable-rest</image>
@@ -573,7 +573,7 @@
                         <artifactId>jib-maven-plugin</artifactId>
                         <configuration>
                             <from>
-                                <image>flowable/flowable-jre:17.0.9</image>
+                                <image>flowable/flowable-jre:21</image>
                                 <platforms>
                                     <platform>
                                         <architecture>amd64</architecture>
@@ -629,7 +629,7 @@
                         <artifactId>jib-maven-plugin</artifactId>
                         <configuration>
                             <from>
-                                <image>flowable/flowable-jre:17.0.9</image>
+                                <image>flowable/flowable-jre:21</image>
                                 <platforms>
                                     <platform>
                                         <architecture>amd64</architecture>