diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 2819edc..d0ecf72 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -40,16 +40,16 @@ jobs: password: ${{ secrets.QUAY_PASSWORD }} - name: Build and push id: build-push - uses: docker/build-push-action@v3 + uses: docker/build-push-action@v4 with: context: . push: ${{ github.event_name != 'pull_request' }} tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} - - uses: sigstore/cosign-installer@v2.4.1 + - uses: sigstore/cosign-installer@v3.5.0 - name: cosign if: ${{ github.event_name != 'pull_request' }} env: COSIGN_EXPERIMENTAL: 1 #run: cosign sign --oidc-issuer ${env.ACTIONS_ID_TOKEN_REQUEST_URL} ${{ env.IMAGE }} - run: cosign sign --oidc-issuer https://token.actions.githubusercontent.com ${{ env.IMAGE }}@${{ steps.build-push.outputs.digest }} + run: cosign sign -y --oidc-issuer https://token.actions.githubusercontent.com ${{ env.IMAGE }}@${{ steps.build-push.outputs.digest }} diff --git a/Dockerfile b/Dockerfile index c5c418f..ebcec9c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,10 +1,10 @@ -FROM quay.io/evryfs/base-ubuntu:jammy-20220531 +FROM quay.io/evryfs/base-ubuntu:jammy-20231128 LABEL maintainer "David J. M. Karlsen " -ARG JDK_VERSION=18.0.2+9 -ARG DOWNLOAD_URL=https://github.com/adoptium/temurin18-binaries/releases/download/jdk-18.0.2%2B9/OpenJDK18U-jdk_x64_linux_hotspot_18.0.2_9.tar.gz +ARG JDK_VERSION=8u352-b08 +ARG DOWNLOAD_URL=https://github.com/adoptium/temurin8-binaries/releases/download/jdk8u352-b08/OpenJDK8U-jdk_x64_linux_hotspot_8u352b08.tar.gz SHELL ["/bin/bash", "-o", "pipefail", "-c"] RUN mkdir -p /usr/lib/jvm && \ curl -Ls ${DOWNLOAD_URL} | tar xzv -C /usr/lib/jvm && \ - sh -c 'for bin in /usr/lib/jvm/jdk-${JDK_VERSION}/bin/*; do update-alternatives --install /usr/bin/$(basename $bin) $(basename $bin) $bin 100 ;done' && \ - sh -c 'for bin in /usr/lib/jvm/jdk-${JDK_VERSION}/bin/*; do update-alternatives --set $(basename $bin) $bin; done' && \ + sh -c 'for bin in /usr/lib/jvm/jdk${JDK_VERSION}/bin/*; do update-alternatives --install /usr/bin/$(basename $bin) $(basename $bin) $bin 100 ;done' && \ + sh -c 'for bin in /usr/lib/jvm/jdk${JDK_VERSION}/bin/*; do update-alternatives --set $(basename $bin) $bin; done' && \ java -Xshare:dump