- Use explicit and deterministic Docker base image tags
- Install only what you need in production in the Java container image
- Find and fix security vulnerabilities in your Java Docker image
- Use multi-stage builds
- Don’t run Java apps as root
- Properly handle events to safely terminate a Java application
- Gracefully tear down Java applications
- Use .dockerignore
- Use explicit and deterministic Docker base image tags
- Install only what you need in production in the Java container image
- Find and fix security vulnerabilities in your Java Docker image
- Use multi-stage builds
- Don’t run Java apps as root
- Properly handle events to safely terminate a Java application
- Gracefully tear down Java applications
- Use .dockerignore