2.0 KiB

Raw Blame History

Java Builder — CI Image

Pre-baked build environment for KollectAI-ETL backend and plugin CI jobs.

What's included

Java 21 (Eclipse Temurin)
Maven 3.9.9
Pre-cached Maven dependencies (Spring Boot, Flink, MyBatis, etc.)
Pre-installed plugin-api in local Maven repo
OWASP NVD database snapshot
Node.js + pnpm (via corepack)
buf CLI — for buf lint parity with pre-push
ORAS CLI (Harbor artifact uploads)
git, jq, curl

Note: Backend Java protobuf codegen lives in the Maven build via protobuf-maven-plugin, not buf — so this image deliberately omits protoc plugins. For TypeScript proto codegen and frontend CI jobs use the frontend-builder image.

Build

docker build -t 192.168.1.72/kollect-tools/ci/java-builder:latest ci/java-builder/
docker push 192.168.1.72/kollect-tools/ci/java-builder:latest

Build args

Arg	Default	Description
`JAVA_VERSION`	`25`	Eclipse Temurin JDK version
`MAVEN_VERSION`	`3.9.14`	Maven version
`OWASP_DC_VERSION`	`12.1.1`	OWASP Dependency-Check version
`NODE_MAJOR`	`24`	Node.js major version
`PNPM_VERSION`	`10.15.0`	pnpm version (corepack-activated)
`BUF_VERSION`	`1.55.0`	buf CLI version
`ORAS_VERSION`	`1.2.2`	ORAS CLI version
`NVD_API_KEY`	(empty)	Optional NVD API key — speeds up the OWASP database update during image build

Usage in CI

jobs:
  test:
    runs-on: ubuntu-latest
    container:
      image: 192.168.1.72/kollect-tools/ci/java-builder:latest
    steps:
      - uses: actions/checkout@v6
      - run: ./mvnw -f backend/etl/pom.xml test -Dgroups=unit -q

Maintenance

Rebuild weekly to keep the OWASP NVD database fresh:

docker build --no-cache -t 192.168.1.72/kollect-tools/ci/java-builder:latest ci/java-builder/
docker push 192.168.1.72/kollect-tools/ci/java-builder:latest

When pom.xml files change (new dependencies), rebuild to update the cached deps layer.

2.0 KiB Raw Blame History