defence against the docker arts

pom-config.xml

<configuration>
  <from>
    <image>gcr.io/distroless/java</image>
  </from>
  <container>
    <appRoot>/workspace</appRoot>
    <environment>
      <JAVA_OPTS>-Xss512k</JAVA_OPTS>
    </environment>
  </container>
</configuration>

pom.xml

<project>
  <build>
    <plugins>
      <plugin>
        <groupId>com.google.cloud.tools</groupId>
        <artifactId>jib-maven-plugin</artifactId>
        <version>1.4.0</version>
        <configuration>
          <from>
            <image>gcr.io/distroless/java</image>
          </from>
          <container>
            <appRoot>/workspace</appRoot>
            <environment>
              <JAVA_OPTS>-Xss512k</JAVA_OPTS>
            </environment>
          </container>
          <to>
            <image>myimage</image>
          </to>
        </configuration>
      </plugin>
      ...