Dockerfile.base

@@ -44,6 +44,11 @@ RUN apt-env.sh apt-get update ; \
     apt-env.sh apt-get upgrade -y ; \
     apt-clean.sh
 
+## perl-base: hardlink->symlink
+RUN d=/usr/bin ; \
+    find "$d/" -wholename "$d/perl5*" -exec ln -fsv perl {} ';' ; \
+    ls -li "$d/perl"*
+
 ## remove unwanted binaries
 RUN set -f ; \
     for i in \
@@ -152,6 +157,7 @@ RUN apt-remove.sh \
     apt-install.sh \
       ca-certificates \
       ca-certificates-java \
+      fontconfig \
       p11-kit \
       netbase \
       openssl \
@@ -179,21 +185,6 @@ RUN _lang=en_US.UTF8 ; \
     locale -a | grep -Fixq "${_lang}"
 ENV LANG='en_US.UTF-8' LANGUAGE='en_US:en' LC_ALL='en_US.UTF-8'
 
-RUN find /run/ -mindepth 1 -ls -delete || : ; \
-    install -d -m 01777 /run/lock
-
-## deduplicate (!)
-RUN apt-install.sh jdupes ; \
-    apt-clean.sh ; \
-    echo ; \
-    du -xd1 /usr/ | sort -Vk2 ; \
-    echo ; \
-    jdupes -1LSpr /usr/ ; \
-    echo ; \
-    du -xd1 /usr/ | sort -Vk2 ; \
-    echo ; \
-    apt-remove.sh jdupes
-
 RUN find /usr/local/sbin/ ! -type d -ls -delete ; \
     find /run/ -mindepth 1 -ls -delete || : ; \
     install -d -m 01777 /run/lock
@@ -231,13 +222,6 @@ RUN ca_file='/etc/ssl/certs/ca-certificates.crt' ; \
     echo ; \
     ls -l "${ca_file}" "${ca_file}.fp" "${java_ca_file}"
 
-ARG PSL_URI='https://publicsuffix.org/list/public_suffix_list.dat'
-ADD "${PSL_URI}" /tmp/public_suffix_list.dat
-
-RUN chmod 0644 /tmp/public_suffix_list.dat ; \
-    mkdir -p /usr/local/share/publicsuffix ; \
-    cp -f /tmp/public_suffix_list.dat /usr/local/share/publicsuffix/
-
 ## ---
 
 FROM base-intermediate AS base
@@ -247,7 +231,6 @@ COPY /scripts/*  /usr/local/sbin/
 COPY --from=certs /etc/ssl/certs/ca-certificates.*   /etc/ssl/certs/
 COPY --from=certs /etc/ssl/certs/java/cacerts        /etc/ssl/certs/java/
 COPY --from=certs /usr/local/share/ca-certificates/  /usr/local/share/ca-certificates/
-COPY --from=certs /usr/local/share/publicsuffix/     /usr/local/share/publicsuffix/
 
 ENTRYPOINT [ ]
 CMD [ "bash" ]

Dockerfile.jdk

@@ -6,9 +6,20 @@ FROM docker.io/rockdrilla/graalvm-debian:base-${IMAGE_VERSION} AS base
 FROM base as jdk-fetch
 SHELL [ "/bin/sh", "-ec" ]
 
+COPY /scripts/*  /usr/local/sbin/
+
+# ARG JAVA_VERSION_MAJOR
+# ARG GRAALVM_BASE_FILE="graalvm-jdk-${JAVA_VERSION_MAJOR}_linux-x64_bin.tar.gz"
+# ARG GRAALVM_BASE_URI="https://download.oracle.com/graalvm/${JAVA_VERSION_MAJOR}/latest"
+# ARG GRAALVM_URI="${GRAALVM_BASE_URI}/${GRAALVM_BASE_FILE}"
+# ADD "${GRAALVM_URI}" /tmp/graalvm.tar.gz
+
 ARG GRAALVM_BASE_FILE
 COPY "/artifact-cache/${GRAALVM_BASE_FILE}" /tmp/graalvm.tar.gz
 
+ARG PSL_URI='https://publicsuffix.org/list/public_suffix_list.dat'
+ADD "${PSL_URI}" /tmp/public_suffix_list.dat
+
 WORKDIR /opt/graalvm
 
 RUN tar --strip-components=1 -xf /tmp/graalvm.tar.gz ; \
@@ -17,11 +28,10 @@ RUN tar --strip-components=1 -xf /tmp/graalvm.tar.gz ; \
       license-information-user-manual.zip \
       lib/security/cacerts \
       lib/security/krb5.conf \
-      lib/security/public_suffix_list.dat \
     ; \
+    cp -f /tmp/public_suffix_list.dat lib/security/ ; \
     ln -sv /etc/ssl/certs/java/cacerts lib/security/ ; \
     ln -sv /etc/krb5.conf lib/security/ ; \
-    ln -sv /usr/local/share/publicsuffix/public_suffix_list.dat lib/security/ ; \
     find "${PWD}/" -name '*.so' -exec dirname '{}' '+' \
     | sort -uV > ld.so.conf ; \
     chmod -R go-w "${PWD}/"
@@ -64,23 +74,6 @@ RUN ln -s "${JAVA_HOME}/ld.so.conf" /etc/ld.so.conf.d/graalvm.conf ; \
 ENV PATH="${JAVA_HOME}/bin:${PATH}" \
     MALLOC_ARENA_MAX=4
 
-RUN apt-install.sh \
-      binutils \
-      curl \
-      elfutils \
-      fakechroot \
-      fakeroot \
-      faketime \
-      file \
-      fontconfig \
-      unzip \
-      wget \
-      xz-utils \
-      zip \
-      zstd \
-    ; \
-    apt-clean.sh
-
 ## qa/smoke
 RUN set -xv ; java -version ; \
     find /tmp/ -mindepth 1 -ls -delete

Dockerfile.jre

@@ -8,31 +8,22 @@ FROM docker.io/rockdrilla/graalvm-debian:jdk-${JAVA_VERSION_MAJOR}-${IMAGE_VERSI
 FROM jdk as jdk-to-jre
 SHELL [ "/bin/sh", "-ec" ]
 
-ARG JAVA_VERSION_MAJOR
-## modern "jlink --compress" approach
-ENV JLINK_COMPRESS='zip-1'
-
 RUN rm -rf /jre ; \
-    if [ "${JAVA_VERSION_MAJOR}" = 17 ] ; then \
-        ## legacy "jlink --compress" approach
-        JLINK_COMPRESS='1' ; \
-    fi ; \
     jlink \
       --add-modules ALL-MODULE-PATH \
       --no-man-pages \
       --no-header-files \
-      --compress=${JLINK_COMPRESS} \
+      --compress=1 \
       --output /jre \
     ; \
     cd /jre ; \
     rm -rf \
       lib/security/cacerts \
       lib/security/krb5.conf \
-      lib/security/public_suffix_list.dat \
     ; \
+    cp -f "${JAVA_HOME}/lib/security/public_suffix_list.dat" lib/security/ ; \
     ln -sv /etc/ssl/certs/java/cacerts lib/security/ ; \
     ln -sv /etc/krb5.conf lib/security/ ; \
-    ln -sv /usr/local/share/publicsuffix/public_suffix_list.dat lib/security/ ; \
     chmod -R go-w /jre
 
 RUN rm -rf "${JAVA_HOME}" ; \
@@ -70,6 +61,8 @@ SHELL [ "/bin/sh", "-ec" ]
 
 COPY /Dockerfile.jre /usr/local/share/
 
+COPY /scripts/*  /usr/local/sbin/
+
 ENV JAVA_HOME=/opt/graalvm
 
 COPY --from=jdk-to-jre "${JAVA_HOME}/" "${JAVA_HOME}/"