Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/vegardit/graalvm-maven:25.0.2
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/vegardit/graalvm-maven:25.0.2  docker.io/vegardit/graalvm-maven:25.0.2

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/vegardit/graalvm-maven:25.0.2
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/vegardit/graalvm-maven:25.0.2  docker.io/vegardit/graalvm-maven:25.0.2

Shell快速替换命令

sed -i 's#vegardit/graalvm-maven:25.0.2#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/vegardit/graalvm-maven:25.0.2#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/vegardit/graalvm-maven:25.0.2 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/vegardit/graalvm-maven:25.0.2  docker.io/vegardit/graalvm-maven:25.0.2'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/vegardit/graalvm-maven:25.0.2 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/vegardit/graalvm-maven:25.0.2  docker.io/vegardit/graalvm-maven:25.0.2'

镜像构建历史

# 2026-07-09 02:20:08  0.00B 创建挂载点用于持久化数据或共享数据
VOLUME [/root/.m2/repository]
                        
# 2026-07-09 02:20:08  0.00B 设置默认要执行的命令
CMD ["/bin/sh" "-c" "cat /opt/build_info && java --version && echo && mvn --version"]
                        
# 2026-07-09 02:20:08  0.00B 设置环境变量 PATH JAVA_HOME JAVA_MAJOR_VERSION MAVEN_HOME M2_HOME MAVEN_CONFIG MAVEN_OPTS -Djava.awt.headless -Djava.net.preferIPv4Stack -Dfile.encoding
ENV PATH=/opt/graalvm/bin:/opt/maven/bin:/opt/upx:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin JAVA_HOME=/opt/graalvm JAVA_MAJOR_VERSION=25 MAVEN_HOME=/opt/maven M2_HOME=/opt/maven MAVEN_CONFIG=/root/.m2 MAVEN_OPTS=-Xmx1024m -Djava.awt.headless=true -Djava.net.preferIPv4Stack=true -Dfile.encoding=UTF-8
                        
# 2026-07-09 02:20:08  874.00B 复制新文件或目录到容器中
COPY image/toolchains.xml /root/.m2/toolchains.xml # buildkit
                        
# 2026-07-09 02:20:08  436.00B 复制新文件或目录到容器中
COPY image/settings.xml /root/.m2/settings.xml # buildkit
                        
# 2026-07-09 02:20:08  696.80MB 执行命令并创建新的镜像层
RUN |19 DEBIAN_FRONTEND=noninteractive LC_ALL=C BASE_LAYER_CACHE_KEY=20260708 GRAALVM_DOWNLOAD_URL=https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-25.0.2/graalvm-community-jdk-25.0.2_linux-{{ARCH_GRAAL}}_bin.tar.gz JAVA_MAJOR_VERSION=25 UPX_COMPRESS=true OCI_authors=Vegard IT GmbH (vegardit.com) OCI_title=vegardit/graalvm-maven OCI_description=Docker image to build native Linux binaries of Java Maven projects using GraalVM native-image feature OCI_source=https://github.com/vegardit/docker-graalvm-maven OCI_revision=24ea7a7 OCI_version=24ea7a7 OCI_created=2026-07-08T18:18:39Z GIT_BRANCH=main GIT_COMMIT_DATE=2026-07-06 20:42:18 UTC USER=user USER_HOME_DIR=/home/user UID=1000 GID=1000 /bin/bash -euo pipefail -c 
  ARCH=$(dpkg --print-architecture)

  echo "#################################################"
  echo "$ARCH based image will be created"
  echo "#################################################"

  # Function to resolve the arch ID for binary packages
  function resolve_arch() {
    local ARCH_PLACEHOLDER; ARCH_PLACEHOLDER=$1
    # strip the leading '{{ARCH_':
    APP_ID="${ARCH_PLACEHOLDER#\{\{ARCH_}"
    # strip the trailing '}}'':
    APP_ID="${APP_ID%\}\}}"

    case $ARCH in
      amd64)
        case $APP_ID in
          DOCKER_CLIENT) echo "x86_64" ;;
          GRAAL)         echo "x64" ;;
          GRAAL_DEV)     echo "amd64" ;;
          GRAAL_LEGACY)  echo "amd64" ;;
          *)             echo "amd64" ;;
        esac
        ;;
      arm64)
        case $APP_ID in
          DOCKER_CLIENT) echo "aarch64" ;;
          GRAAL)         echo "aarch64" ;;
          GRAAL_DEV)     echo "aarch64" ;;
          GRAAL_LEGACY)  echo "aarch64" ;;
          *)             echo "arm64" ;;
        esac
        ;;
      *)
        echo "Unknown architecture"
        exit 1
        ;;
    esac
  }

  echo "#################################################"
  echo "Adding default user... $USER with group $GID and home dir $USER_HOME_DIR"
  echo "#################################################"
  addgroup --gid "$GID" "$USER"
  adduser --shell /bin/bash --home "$USER_HOME_DIR" --disabled-password --gid "$GID" --uid "$UID" --gecos "" "$USER"
  chown -R "$USER:$GID" /usr/local "$USER_HOME_DIR"

  echo "#################################################"
  echo "Installing latest UPX..."
  echo "#################################################"
  mkdir /opt/upx
  if [[ -f /run/secrets/github_token ]]; then
     auth=(-H "Authorization: Bearer $(cat /run/secrets/github_token)")
  fi

  upx_download_url=$(curl -fsSL "${auth[@]:-}" https://api.github.com/repos/upx/upx/releases/latest | grep browser_download_url | grep "${ARCH}_linux.tar.xz" | cut "-d\"" -f4)

  echo "Downloading [$upx_download_url]..."
  curl -fL "$upx_download_url" | tar Jxv -C /opt/upx --strip-components=1

  echo "#################################################"
  echo "Installing GraalVM..."
  echo "#################################################"
  mkdir /opt/graalvm
  # Extract {{ARCH_xyz}} placeholder from the URL
  ARCH_PLACEHOLDER=$(echo "$GRAALVM_DOWNLOAD_URL" | grep -oE '\{\{(ARCH(_[_[:alnum:]]+)?)\}\}')
  FINAL_GRAALVM_DOWNLOAD_URL=${GRAALVM_DOWNLOAD_URL//${ARCH_PLACEHOLDER}/$(resolve_arch "$ARCH_PLACEHOLDER")}
  echo "Downloading [$FINAL_GRAALVM_DOWNLOAD_URL]..."
  curl -fL "$FINAL_GRAALVM_DOWNLOAD_URL" | \
    tar zxv -C /opt/graalvm --strip-components=1 \
      --exclude=*/bin/jvisualvm \
      --exclude=*/lib/src.zip \
      --exclude=*/lib/visualvm

  /opt/graalvm/bin/gu install native-image || true # may not exist for some distributions/dev builds
  /opt/graalvm/bin/gu install wasm || true # may not exist for some distributions/dev builds

  strip --strip-unneeded \
    /opt/graalvm/bin/unpack200 `# does not exist in Java 17+`  \
    /opt/graalvm/languages/js/bin/js \
    /opt/graalvm/languages/llvm/bin/lli `# does not exist in dev` \
    /opt/graalvm/languages/llvm/native/bin/graalvm-native-* `# does not exist in dev` \
    /opt/graalvm/languages/wasm/bin/wasm `# wasm launcher, if installed` \
    /opt/graalvm/lib/installer/bin/gu `# does not exist in dev` \
    /opt/graalvm/lib/svm/bin/native-image || true

  if [[ $UPX_COMPRESS == "true" ]]; then
    /opt/upx/upx -9 \
      /opt/graalvm/languages/llvm/bin/lli \
      /opt/graalvm/languages/llvm/native/bin/graalvm-native-* \
      /opt/graalvm/languages/wasm/bin/wasm \
      /opt/graalvm/lib/installer/bin/gu \
      /opt/graalvm/lib/svm/bin/native-image || true
      #/opt/graalvm/bin/unpack200 \
      #/opt/graalvm/languages/js/bin/js \
  fi

  JAVA_MAJOR_VERSION=$(/opt/graalvm/bin/java -fullversion 2>&1 | sed -E -n 's/.* version "([^.-]*).*"/\1/p')
  export JAVA_MAJOR_VERSION

  echo "#################################################"
  echo "Installing latest Docker client..."
  echo "#################################################"
  docker_cli_package=$(curl -fLsS "https://download.docker.com/linux/static/stable/$(resolve_arch "{{ARCH_DOCKER_CLIENT}}")/" | grep -oP '(?<=>)docker-\d+.\d+.\d+.tgz(?=</a>)' | tail -1)
  docker_cli_download_url=https://download.docker.com/linux/static/stable/$(resolve_arch "{{ARCH_DOCKER_CLIENT}}")/$docker_cli_package
  echo "Downloading [$docker_cli_download_url]..."
  curl -fL "$docker_cli_download_url" | tar zxv -C /usr/bin --strip-components=1 docker/docker
  # this also installs docker app and docker buildx:
  #docker_cli_package=$(curl -fsSL https://download.docker.com/linux/debian/dists/bullseye/pool/stable/$ARCH/ | grep docker-ce-cli | grep buster_$ARCH | tail -1 | grep -oP '(?<=deb">).*(?=</a>)')
  #docker_cli_download_url=https://download.docker.com/linux/debian/dists/bullseye/pool/stable/$ARCH/$docker_cli_package
  #echo "Downloading [$docker_cli_download_url]..."
  #curl -fL $docker_cli_download_url -o /tmp/docker-cli.deb
  #dpkg -i /tmp/docker-cli.deb
  #rm /tmp/docker-cli.deb
  strip --strip-unneeded /usr/bin/docker
  if [[ $UPX_COMPRESS == "true" ]]; then
    /opt/upx/upx -9 /usr/bin/docker
  fi

  echo "#################################################"
  echo "Installing latest Apache Maven..."
  echo "#################################################"
  mkdir /opt/maven
  #maven_version=$(curl -fsSL https://repo1.maven.org/maven2/org/apache/maven/apache-maven/maven-metadata.xml | grep -oP '(?<=latest>).*(?=</latest)')
  maven_version=$(curl -fsSL https://repo1.maven.org/maven2/org/apache/maven/apache-maven/maven-metadata.xml | grep -Ev "alpha|beta|rc" | grep -oP '(?<=version>).*(?=</version)' | tail -n1)
  maven_download_url=https://repo1.maven.org/maven2/org/apache/maven/apache-maven/$maven_version/apache-maven-${maven_version}-bin.tar.gz
  echo "Downloading [$maven_download_url]..."
  curl -fL "$maven_download_url" | tar zxv -C /opt/maven --strip-components=1

  echo "#################################################"
  echo "Installing bash-funk..."
  echo "#################################################"
  git clone https://github.com/vegardit/bash-funk --depth 1 --branch main --single-branch /opt/bash-funk
  # shellcheck disable=SC2028  # echo may not expand escape sequences. Use printf
  echo   "BASH_FUNK_PROMPT_PREFIX='\033[45;30m GRAALVM '" >> ~/.bashrc
  echo "source /opt/bash-funk/bash-funk.sh" >> ~/.bashrc

  echo "#################################################"
  echo "Writing build_info..."
  echo "#################################################"
  cat <<EOT >/opt/build_info
GIT_REPO:    $OCI_source
GIT_BRANCH:  $GIT_BRANCH
GIT_COMMIT:  $OCI_revision @ $GIT_COMMIT_DATE
IMAGE_BUILD: $OCI_created
EOT
  cat /opt/build_info

 # buildkit
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG GID=1000
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG UID=1000
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG USER_HOME_DIR=/home/user
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG USER=user
                        
# 2026-07-09 02:19:19  0.00B 添加元数据标签
LABEL maintainer=Vegard IT GmbH (vegardit.com)
                        
# 2026-07-09 02:19:19  0.00B 添加元数据标签
LABEL org.opencontainers.image.title=vegardit/graalvm-maven org.opencontainers.image.description=Docker image to build native Linux binaries of Java Maven projects using GraalVM native-image feature org.opencontainers.image.source=https://github.com/vegardit/docker-graalvm-maven org.opencontainers.image.revision=24ea7a7 org.opencontainers.image.version=24ea7a7 org.opencontainers.image.created=2026-07-08T18:18:39Z
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG GIT_COMMIT_DATE=2026-07-06 20:42:18 UTC
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG GIT_BRANCH=main
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG OCI_created=2026-07-08T18:18:39Z
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG OCI_version=24ea7a7
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG OCI_revision=24ea7a7
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG OCI_source=https://github.com/vegardit/docker-graalvm-maven
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG OCI_description=Docker image to build native Linux binaries of Java Maven projects using GraalVM native-image feature
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG OCI_title=vegardit/graalvm-maven
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG OCI_authors=Vegard IT GmbH (vegardit.com)
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG UPX_COMPRESS=true
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG JAVA_MAJOR_VERSION=25
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG GRAALVM_DOWNLOAD_URL=https://github.com/graalvm/graalvm-ce-builds/releases/download/jdk-25.0.2/graalvm-community-jdk-25.0.2_linux-{{ARCH_GRAAL}}_bin.tar.gz
                        
# 2026-07-09 02:19:19  401.21MB 执行命令并创建新的镜像层
RUN |3 DEBIAN_FRONTEND=noninteractive LC_ALL=C BASE_LAYER_CACHE_KEY=20260708 /bin/bash -euo pipefail -c   /mnt/shared/cmd/debian-install-os-updates.sh

  echo "#################################################"
  echo "Installing tools..."
  echo "#################################################"
  apt-get install --no-install-recommends -y bc ca-certificates curl git htop jq less mc procps vim xz-utils openssh-client
  echo -e "set ignorecase
set showmatch
set novisualbell
set noerrorbells
syntax enable
set mouse-=a" > ~/.vimrc

  echo "#################################################"
  echo "Installing packages required by GraalVM..."
  echo "#################################################"
  apt-get install --no-install-recommends -y gcc libstdc++-13-dev libz-dev

  /mnt/shared/cmd/debian-cleanup.sh

 # buildkit
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG BASE_LAYER_CACHE_KEY=20260708
                        
# 2026-07-09 02:19:19  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-07-09 02:19:19  0.00B 
SHELL [/bin/bash -euo pipefail -c]
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG LC_ALL=C
                        
# 2026-07-09 02:19:19  0.00B 定义构建参数
ARG DEBIAN_FRONTEND=noninteractive
                        
# 2026-06-23 08:00:00  78.63MB 
# debian.sh --arch 'amd64' out/ 'stable' '@1782172800'
                        
                    

镜像信息

{
    "Id": "sha256:e78d4fd968a1acd73197274b719bd9729e999bd103b5a81b3a016dc5e62fbfa1",
    "RepoTags": [
        "vegardit/graalvm-maven:25.0.2",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/vegardit/graalvm-maven:25.0.2"
    ],
    "RepoDigests": [
        "vegardit/graalvm-maven@sha256:24ba8175606045ba96fef7efc20227bd8b1e17d8766f8d1af9a6ca74f9f31a80",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/vegardit/graalvm-maven@sha256:8d86279d60af9bac522731f0ecc3a66a1d0cfff7cf2f0e959cd4bf92a0bd95c5"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-07-08T18:20:08.036952893Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "root",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/opt/graalvm/bin:/opt/maven/bin:/opt/upx:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "JAVA_HOME=/opt/graalvm",
            "JAVA_MAJOR_VERSION=25",
            "MAVEN_HOME=/opt/maven",
            "M2_HOME=/opt/maven",
            "MAVEN_CONFIG=/root/.m2",
            "MAVEN_OPTS=-Xmx1024m -Djava.awt.headless=true -Djava.net.preferIPv4Stack=true -Dfile.encoding=UTF-8"
        ],
        "Cmd": [
            "/bin/sh",
            "-c",
            "cat /opt/build_info \u0026\u0026 java --version \u0026\u0026 echo \u0026\u0026 mvn --version"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": {
            "/root/.m2/repository": {}
        },
        "WorkingDir": "",
        "Entrypoint": null,
        "OnBuild": null,
        "Labels": {
            "maintainer": "Vegard IT GmbH (vegardit.com)",
            "org.opencontainers.image.created": "2026-07-08T18:18:39Z",
            "org.opencontainers.image.description": "Docker image to build native Linux binaries of Java Maven projects using GraalVM native-image feature",
            "org.opencontainers.image.revision": "24ea7a7",
            "org.opencontainers.image.source": "https://github.com/vegardit/docker-graalvm-maven",
            "org.opencontainers.image.title": "vegardit/graalvm-maven",
            "org.opencontainers.image.version": "24ea7a7"
        },
        "Shell": [
            "/bin/bash",
            "-euo",
            "pipefail",
            "-c"
        ]
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 1176634481,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/4f5e4878076640841e5084378bd985b72a05dc0a3ac79a77043f90c251502654/diff:/var/lib/docker/overlay2/ab89fa7b3953859ae9912bcba1a9680bd2853c20915db7af41a54d7a04a69de1/diff:/var/lib/docker/overlay2/bc5aa6751b6babef868dcadd8e2f85709d65b4d627d950534e18002818a2815f/diff:/var/lib/docker/overlay2/fa93808171ecdf78fd2be9f07c735ef7d5f19cf7e62a4323e751c6134778a4d1/diff",
            "MergedDir": "/var/lib/docker/overlay2/142fa1db64929ef3f73deeb0f1e79fb615da5bd1cae9b63df2de161c75d5004b/merged",
            "UpperDir": "/var/lib/docker/overlay2/142fa1db64929ef3f73deeb0f1e79fb615da5bd1cae9b63df2de161c75d5004b/diff",
            "WorkDir": "/var/lib/docker/overlay2/142fa1db64929ef3f73deeb0f1e79fb615da5bd1cae9b63df2de161c75d5004b/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:c6c179075d12621d05e8587bc39d31caa90e3dd2bc88fef58f7548d40c91329d",
            "sha256:cc1712b7f1f2f61c952a95f31ce45142640f775a4e865ae5416ff4d2830ed139",
            "sha256:cc20a84d8841c68073ac20d0cef8242c1cfdef1530fc545cf386956cc263a431",
            "sha256:86cec11428410d6e6e63b336fbee7e3f7dd5e0f9ac2f72a79755b21f7fda3d99",
            "sha256:3662d2315737acfcaf1e260699ea8661f595410689c8f622bd8080dea1bb44ee"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-07-13T10:41:28.8027415+08:00"
    }
}