Document that buildpacks use non-root users

Closes gh-21122
This commit is contained in:
Stephane Nicoll
2020-09-07 12:41:51 +02:00
parent d2eeb9524f
commit 648789ef84
2 changed files with 5 additions and 0 deletions

View File

@@ -2,6 +2,9 @@
== Packaging OCI Images
The plugin can create an https://github.com/opencontainers/image-spec[OCI image] from executable jars using https://buildpacks.io[Cloud Native Buildpacks].
Images can be built using the `bootBuildImage` task.
NOTE: For security reasons, images build and run as non-root users, see https://buildpacks.io/docs/reference/spec/platform-api/#users[this section fore more details].
The task is automatically created when the `java` plugin is applied and is an instance of {boot-build-image-javadoc}[`BootBuildImage`].
NOTE: The `bootBuildImage` task can not be used with a <<packaging-executable-configuring-launch-script, fully executable Spring Boot archive>> that includes a launch script.