-Xms512m -Xmx2g -XX:+UseG1GC | Variable | Purpose | |----------|---------| | JAVA_HOME | Root directory of JRE/JDK | | JRE_HOME | Sometimes used for JRE-specific path | | _JAVA_OPTIONS | Default JVM options (overrides command line) | | JAVA_TOOL_OPTIONS | Options for tools like java , javac |
# Debian/Ubuntu sudo apt install openjdk-17-jre-headless sudo yum install java-17-openjdk-headless
# Disable SSLv3, TLSv1, TLSv1.1 jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, MD5withRSA package.access=sun.,com.sun.xml.,com.sun.jndi.,... 9.3 Running JRE with least privilege Create a dedicated system user:
FROM alpine:3.19 RUN apk add --no-cache openjdk17-jre Create app user RUN addgroup -g 1000 -S appuser && adduser -u 1000 -S appuser -G appuser
Example: