Switch to multi-stage build

[johnnyfleet]

The docker file adds some programs (curl) to simply build the image which makes the overall size larger than needed and less secure (stuff running which isn't needed).

We should move to multi-stage builds. see here (under use JRE not JDK) for example for how to use multi-stage builds.

[johnnyfleet]

Saw this issue with some good example of multi-stage build:

ARG NODE_VERSION=13.8.0
FROM node:${NODE_VERSION}-stretch-slim AS build-env
ADD https://download.oracle.com/otn_software/linux/instantclient/195000/instantclient-basiclite-linux.x64-19.5.0.0.0dbru.zip /tmp/instantclient-basiclite.zip
RUN apt-get update \
  && apt-get install -y libaio1 bsdtar \
  && apt-get clean \
  && mkdir /opt/instantclient \
  && bsdtar --strip-components=1 -xvf /tmp/instantclient-basiclite.zip -C /opt/instantclient \
  && cd /opt/instantclient \
  && rm -f *jdbc* *occi* *mysql* *jar uidrvci genezi adrci libipc1.so libmql1.so

FROM node:${NODE_VERSION}-stretch-slim
COPY --from=build-env /opt/instantclient/ /opt/instantclient/
COPY --from=build-env /lib/x86_64-linux-gnu/libaio.so.1 /lib/x86_64-linux-gnu/libaio.so.1
ENV LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/instantclient

[johnnyfleet]

Some additional ideas (also linking into GraalVM): https://www.batey.info/graalvm-native-image-docker-multipart-build.html?utm_source=pocket_mylist