This is a lean and pragmatic docker image collection, inspired by AdamBien/docklands. It features Alpine Linux based images for Java, JavaScript and HTML5 developers. All portlands images are configured with SSL capabilities, this is particularly important if you want to benefit from HTTP/2.
The images are meant to be extended by the developer. All images provide environment variables for deployment purposes.
Ready made images can be pulled from DockerHub .
If you want to connect to one of the containers, you need to import the self-signed
root ca certificate in your system setup. It is valid
until 2027-12-31 23:59 GMT. All the containers automatically trust the root certificate.
The container certificate is valid for the following Subject Alternate Names (SAN):
localhost*.docker.local127.0.0.1and::1
So you can easily setup your own DNS or (/etc/hosts) records for inter-container
communications via TLS.
Security advice: The default embedded certificates should not be used in production. The root certificate is kept safe to the best of my abilities, but should only be used for development and testing purposes. You should bring your own certificates, it shouldn't be too hard to swap them out in the Dockerfiles.
To import the certificate to your local JAVA (e.g. for system tests) you can do so on Mac OS like this:
sudo keytool -import -trustcacerts -keystore /Library/Java/JavaVirtualMachines/<YOUR_JAVA_VERSION>/Contents/Home/jre/lib/security/cacerts -storepass changeit -noprompt -alias portlands -file <PATH_TO>/pki/ca.crt
Of course, substitute <YOUR_JAVA_VERSION> and <PATH_TO>. If you double click the ca.crt file on Mac OS you can import it with the Keychain Tool into your System Chain, which will make your browser to accept it.
Nginx web server with TLS, HTTP/2 and GZIP compression.
Push content to ${DEPLOYMENT_DIR}.
Image size: 15.3 MB
The SSL configuration is set rather restrictive, please have a look at the server configuration. Server headers are disabled.
Requests to port 80 are forwarded to port 443. If you do not want to have automatic redirects to 443, please use the http2-noredirect image which provides plain HTTP via port 80.
Start an instance with:
docker run -d -p 80:80 -p 443:443 --name http2 portlands/http2
OpenLiberty MicroProfile server with SSL, JPA and EJB enabled.
Based on the IBM J9 Small Footprint Java Runtime Environment.
Drop your war files into ${DEPLOYMENT_DIR}.
Image size: 198 MB
Start an instance with:
docker run -d -p 9080:9080 -p 9443:9443 --name openliberty portlands/openliberty