65 lines
2.0 KiB
Markdown
65 lines
2.0 KiB
Markdown
# Java Builder — CI Image
|
|
|
|
Pre-baked build environment for KollectAI-ETL backend and plugin CI jobs.
|
|
|
|
## What's included
|
|
|
|
- Java 21 (Eclipse Temurin)
|
|
- Maven 3.9.9
|
|
- Pre-cached Maven dependencies (Spring Boot, Flink, MyBatis, etc.)
|
|
- Pre-installed `plugin-api` in local Maven repo
|
|
- OWASP NVD database snapshot
|
|
- Node.js + pnpm (via corepack)
|
|
- [buf](https://buf.build) CLI — for `buf lint` parity with pre-push
|
|
- ORAS CLI (Harbor artifact uploads)
|
|
- git, jq, curl
|
|
|
|
> **Note**: Backend Java protobuf codegen lives in the Maven build via
|
|
> `protobuf-maven-plugin`, not buf — so this image deliberately omits
|
|
> protoc plugins. For TypeScript proto codegen and frontend CI jobs use
|
|
> the [`frontend-builder`](../frontend-builder/) image.
|
|
|
|
## Build
|
|
|
|
```bash
|
|
docker build -t 192.168.1.72/kollect-tools/ci/java-builder:latest ci/java-builder/
|
|
docker push 192.168.1.72/kollect-tools/ci/java-builder:latest
|
|
```
|
|
|
|
### Build args
|
|
|
|
| Arg | Default | Description |
|
|
|-----|---------|-------------|
|
|
| `JAVA_VERSION` | `25` | Eclipse Temurin JDK version |
|
|
| `MAVEN_VERSION` | `3.9.14` | Maven version |
|
|
| `OWASP_DC_VERSION` | `12.1.1` | OWASP Dependency-Check version |
|
|
| `NODE_MAJOR` | `24` | Node.js major version |
|
|
| `PNPM_VERSION` | `10.15.0` | pnpm version (corepack-activated) |
|
|
| `BUF_VERSION` | `1.55.0` | buf CLI version |
|
|
| `ORAS_VERSION` | `1.2.2` | ORAS CLI version |
|
|
| `NVD_API_KEY` | (empty) | Optional NVD API key — speeds up the OWASP database update during image build |
|
|
|
|
## Usage in CI
|
|
|
|
```yaml
|
|
jobs:
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: 192.168.1.72/kollect-tools/ci/java-builder:latest
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- run: ./mvnw -f backend/etl/pom.xml test -Dgroups=unit -q
|
|
```
|
|
|
|
## Maintenance
|
|
|
|
Rebuild weekly to keep the OWASP NVD database fresh:
|
|
|
|
```bash
|
|
docker build --no-cache -t 192.168.1.72/kollect-tools/ci/java-builder:latest ci/java-builder/
|
|
docker push 192.168.1.72/kollect-tools/ci/java-builder:latest
|
|
```
|
|
|
|
When `pom.xml` files change (new dependencies), rebuild to update the cached deps layer.
|