Skip to content

Fixes #6819: harden Dockerfiles for example and integrated test images #7152

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
BobSong-dev wants to merge 9 commits into
base: master
Choose a base branch
from
Open

Fixes #6819: harden Dockerfiles for example and integrated test images #7152

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
8acefde
fix(docker): harden example and integrated test images (#6819)
Sep 21, 2026
48246e0
Merge branch 'master' into fix/6819-dockerfile-hardening
847850277 Sep 21, 2026
0d90087
Merge branch 'master' into fix/6819-dockerfile-hardening
yuluo-yx Sep 21, 2026
de58561
fix(docker): use meaningful image health checks (#6819)
Sep 21, 2026
d99bf76
Merge remote-tracking branch 'fork/fix/6819-dockerfile-hardening' int…
Sep 21, 2026
1423fb8
Merge branch 'master' into fix/6819-dockerfile-hardening
Aias00 Sep 21, 2026
b34bae1
Merge branch 'master' into fix/6819-dockerfile-hardening
BobSong-dev Sep 21, 2026
49cdbf3
fix(it): order upload plugin Docker image builds (#6819)
Sep 22, 2026
c695a83
fix(ci): handle independent test reactor modules (#6819)
Sep 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 21 additions & 1 deletion .github/scripts/resolve-ci-modules.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,9 +41,24 @@ add_module() {
modules+=("${module}")
}

is_root_reactor_module() {
local module="$1"
local candidate="${module}"

while [[ "${candidate}" == */* ]]; do
if grep -Fq "<module>${candidate}</module>" pom.xml; then
return 0
fi
candidate="${candidate%/*}"
done

grep -Fq "<module>${candidate}</module>" pom.xml
}

find_module() {
local path="$1"
local dir
local module

if [[ -d "${path}" ]]; then
dir="${path}"
Expand All @@ -53,7 +68,10 @@ find_module() {

while [[ "${dir}" != "." && "${dir}" != "/" ]]; do
if [[ -f "${dir}/pom.xml" ]]; then
printf '%s\n' "${dir#./}"
module="${dir#./}"
if is_root_reactor_module "${module}"; then
printf '%s\n' "${module}"
fi
return
fi
dir="$(dirname "${dir}")"
Expand Down Expand Up @@ -95,6 +113,8 @@ while IFS= read -r file; do
module="$(find_module "${file}")"
if [[ -n "${module:-}" ]]; then
add_module "${module}"
else
full_build_required=true
fi
fi
done < <(printf '%s' "${changed_files_json}" | jq -r '.[]')
Expand Down
8 changes: 8 additions & 0 deletions shenyu-examples/shenyu-examples-dubbo/shenyu-examples-apache-dubbo-service-xml/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM amazoncorretto:17.0.11-alpine3.19

ENV APP_NAME shenyu-examples-apache-dubbo-service-xml
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN addgroup -S shenyu && \
adduser -S shenyu -G shenyu -h /home/shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:8011/actuator/health | grep -q UP"]
EXPOSE 8011
EXPOSE 20888

Expand Down
8 changes: 8 additions & 0 deletions shenyu-examples/shenyu-examples-dubbo/shenyu-examples-apache-dubbo-service/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM amazoncorretto:17.0.11-alpine3.19

ENV APP_NAME shenyu-examples-apache-dubbo-service
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN addgroup -S shenyu && \
adduser -S shenyu -G shenyu -h /home/shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:8011/actuator/health | grep -q UP"]
EXPOSE 8011
EXPOSE 20888

Expand Down
8 changes: 8 additions & 0 deletions shenyu-examples/shenyu-examples-eureka/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-eureka
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["bash", "-c", ": >/dev/tcp/127.0.0.1/8761"]
EXPOSE 8761

CMD java -jar ${APP_NAME}.jar
8 changes: 8 additions & 0 deletions shenyu-examples/shenyu-examples-grpc/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-grpc
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:55290/actuator/health | grep -q UP"]
EXPOSE 55290
EXPOSE 8080

Expand Down
8 changes: 8 additions & 0 deletions shenyu-examples/shenyu-examples-http-swagger3/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-http-swagger3
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:8190/actuator/health | grep -q UP"]
EXPOSE 8190

CMD java -jar ${APP_NAME}.jar
8 changes: 8 additions & 0 deletions shenyu-examples/shenyu-examples-http/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-http
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:8189/actuator/health | grep -q UP"]
EXPOSE 8189

CMD java --add-opens java.base/java.lang=ALL-UNNAMED -jar ${APP_NAME}.jar
8 changes: 8 additions & 0 deletions shenyu-examples/shenyu-examples-https/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-https
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget --no-check-certificate -q -O - https://127.0.0.1:8190/actuator/health | grep -q UP"]

EXPOSE 8080
EXPOSE 8190
Expand Down
8 changes: 8 additions & 0 deletions ...amples-sdk/shenyu-examples-sdk-dubbo/shenyu-examples-sdk-apache-dubbo-consumer/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-sdk-apache-dubbo-consumer
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:8899/actuator/health | grep -q UP"]
EXPOSE 8899

CMD java -jar ${APP_NAME}.jar
8 changes: 8 additions & 0 deletions ...amples-sdk/shenyu-examples-sdk-dubbo/shenyu-examples-sdk-apache-dubbo-provider/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-sdk-apache-dubbo-provider
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:8011/actuator/health | grep -q UP"]
EXPOSE 8011
EXPOSE 20888

Expand Down
8 changes: 8 additions & 0 deletions shenyu-examples/shenyu-examples-sdk/shenyu-examples-sdk-feign/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-sdk-feign
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:8898/actuator/health | grep -q UP"]
EXPOSE 8898

CMD java -jar ${APP_NAME}.jar
8 changes: 8 additions & 0 deletions ...shenyu-examples-sdk/shenyu-examples-sdk-grpc/shenyu-examples-sdk-grpc-consumer/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-sdk-grpc-consumer
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:8899/actuator/health | grep -q UP"]
EXPOSE 8899

CMD java -jar ${APP_NAME}.jar
8 changes: 8 additions & 0 deletions ...shenyu-examples-sdk/shenyu-examples-sdk-grpc/shenyu-examples-sdk-grpc-provider/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-sdk-grpc-provider
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:55222/actuator/health | grep -q UP"]
EXPOSE 8899

CMD java -jar ${APP_NAME}.jar
8 changes: 8 additions & 0 deletions shenyu-examples/shenyu-examples-sdk/shenyu-examples-sdk-http/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-sdk-http
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:8899/actuator/health | grep -q UP"]
EXPOSE 8899

CMD java -jar ${APP_NAME}.jar
8 changes: 8 additions & 0 deletions ...s-sdk/shenyu-examples-sdk-springcloud/shenyu-examples-sdk-springcloud-consumer/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-sdk-springcloud-consumer
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:8899/actuator/health | grep -q UP"]
EXPOSE 8899

CMD java -jar ${APP_NAME}.jar
8 changes: 8 additions & 0 deletions ...s-sdk/shenyu-examples-sdk-springcloud/shenyu-examples-sdk-springcloud-provider/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-sdk-springcloud-provider
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:8884/actuator/health | grep -q UP"]
EXPOSE 8761

CMD java -jar ${APP_NAME}.jar
8 changes: 8 additions & 0 deletions shenyu-examples/shenyu-examples-sofa/shenyu-examples-sofa-service/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,21 @@
FROM eclipse-temurin:17-centos7

ENV APP_NAME shenyu-examples-sofa
LABEL org.opencontainers.image.title="${APP_NAME}" \
org.opencontainers.image.source="https://github.com/apache/shenyu" \
org.opencontainers.image.licenses="Apache-2.0"
ENV LOCAL_PATH /opt/${APP_NAME}

RUN mkdir -p ${LOCAL_PATH}

ADD target/${APP_NAME}.jar ${LOCAL_PATH}

WORKDIR ${LOCAL_PATH}
RUN groupadd --system shenyu && \
useradd --system --gid shenyu --create-home --home-dir /home/shenyu shenyu && \
chown -R shenyu:shenyu ${LOCAL_PATH}
USER shenyu
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 CMD ["sh", "-c", "wget -q -O - http://127.0.0.1:28011/actuator/health | grep -q UP"]
EXPOSE 28011
EXPOSE 8888

Expand Down
Loading
Loading