java shim

java.sh

#!/bin/bash
# java shim to execute anything java within a distroless, rootless container
# designed for podman 4, breaks with podman 3 because of different --pull syntax
# https://iptables.sh

set -euo pipefail

IMAGE="gcr.io/distroless/java21:nonroot"

# check for podman
# podman runs rootless out of the box unlike docker
if ! command -v podman &> /dev/null
then
	echo "podman could not be found"
	exit
fi

podman run \
        --rm \
        -it \
        --userns=keep-id:uid=65532,gid=65532 \
        --network host \
        --pull newer \
        -v "$(pwd)":/app \
        -w /app \
        --entrypoint /usr/bin/java \
        "$IMAGE" \
        "$@"