deployment practice · Intensive sprint

Container Packaging for Java Services

Distroless-ish images, JVM flags for cgroups v2, and SBOM export pipelines.

Duration
3 weeks · 36 mentor hours
Schedule
Weekdays intensive
Level
Intermediate
Price
9,800 THB (informational)

Docker · Syft · Eclipse Temurin

Cover for Container Packaging for Java Services

Description

You craft multi-stage Dockerfiles, compare Eclipse Temurin vs distroless bases, and integrate Syft SBOM generation into CI. Focus stays on Linux amd64 targets common in TH data centers.

What arrives in your repo

  • JVM container flag cookbook
  • cgroup-aware heap sizing lab
  • SBOM diff reviews in PR template
  • Non-root user hardening checklist
  • Image layer budgeting spreadsheet
  • Cosign signing stub (mock keys)
  • Mentor review on Dockerfile smell

Outcomes we expect you to evidence

  1. Produce SBOM artifact per service
  2. Document base image decision record
  3. Tune heap + GC flags with measured RSS
Avatar for Jet Sornsin

Responsible instructor

Jet Sornsin

Platform engineer migrating monoliths to Nomad clusters.

FAQ

Supported via WSL2; native Windows containers not covered.

Experience notes

“Container Packaging for Java Services SBOM diff caught a sneaky log4j bridge reintroduction.”
— Sofia · 4/5 · survey