Bài 21: Docker & Containerization cho Spring Boot

Spring Boot 4: Từ Cơ bản đến Nâng cao

Phần 6: Microservices & Production

xdev.asia

Giới thiệu

Containerization là bước đầu tiên để đưa ứng dụng Spring Boot lên production. Bài này hướng dẫn từ Dockerfile cơ bản đến multi-stage builds, Cloud Native Buildpacks, GraalVM Native Image, và Docker Compose cho local development.

---

1. Dockerfile Multi-Stage Build

1.1 Basic Dockerfile

# Stage 1: Build
FROM eclipse-temurin:21-jdk-alpine AS builder
WORKDIR /app
COPY gradle/ gradle/
COPY gradlew build.gradle.kts settings.gradle.kts ./
RUN ./gradlew dependencies --no-daemon
COPY src/ src/
RUN ./gradlew bootJar --no-daemon -x test

# Stage 2: Runtime
FROM eclipse-temurin:21-jre-alpine
RUN addgroup -S appgroup && adduser -S appuser -G appgroup
WORKDIR /app
COPY --from=builder /app/build/libs/*.jar app.jar
USER appuser
EXPOSE 8080
ENTRYPOINT ["java", "-jar", "app.jar"]

1.2 Optimized Layered Dockerfile

Spring Boot tạo layered JAR, cho phép Docker cache hiệu quả:

FROM eclipse-temurin:21-jre-alpine AS builder
WORKDIR /app
COPY build/libs/*.jar app.jar
RUN java -Djarmode=tools -jar app.jar extract --layers --destination extracted

FROM eclipse-temurin:21-jre-alpine
RUN addgroup -S app && adduser -S app -G app
WORKDIR /app
COPY --from=builder /app/extracted/dependencies/ ./
COPY --from=builder /app/extracted/spring-boot-loader/ ./
COPY --from=builder /app/extracted/snapshot-dependencies/ ./
COPY --from=builder /app/extracted/application/ ./
USER app
EXPOSE 8080
ENTRYPOINT ["java", "-jar", "app.jar"]

---

2. Cloud Native Buildpacks

Spring Boot hỗ trợ buildpacks — tạo Docker image không cần Dockerfile:

# Gradle
./gradlew bootBuildImage --imageName=myapp:latest

# Maven
./mvnw spring-boot:build-image -Dspring-boot.build-image.imageName=myapp:latest

// build.gradle.kts — Customize
tasks.bootBuildImage {
    imageName.set("registry.example.com/myapp:${version}")
    environment.set(mapOf(
        "BP_JVM_VERSION" to "21",
        "BPE_JAVA_TOOL_OPTIONS" to "-XX:MaxRAMPercentage=75"
    ))
}

---

3. GraalVM Native Image

3.1 Build Native Image

// build.gradle.kts
plugins {
    id("org.graalvm.buildtools.native") version "0.10.6"
}

# Build native executable
./gradlew nativeCompile

# Build native Docker image
./gradlew bootBuildImage --imageName=myapp-native:latest

3.2 So sánh JVM vs Native

Metric	JVM	Native Image
Startup time	2-5s	50-200ms
Memory (RSS)	200-400MB	50-100MB
Build time	10-30s	3-10 phút
Peak throughput	Cao nhất	Thấp hơn ~10-20%
Best for	Long-running services	Serverless, CLI

---

4. Docker Compose cho Development

# docker-compose.yml
services:
  app:
    build: .
    ports:
      - "8080:8080"
    environment:
      SPRING_PROFILES_ACTIVE: docker
      SPRING_DATASOURCE_URL: jdbc:postgresql://db:5432/myapp
      SPRING_DATASOURCE_USERNAME: postgres
      SPRING_DATASOURCE_PASSWORD: postgres
      SPRING_DATA_REDIS_HOST: redis
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_started

  db:
    image: postgres:17-alpine
    ports:
      - "5432:5432"
    environment:
      POSTGRES_DB: myapp
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 5s
      timeout: 5s
      retries: 5

  redis:
    image: redis:7-alpine
    ports:
      - "6379:6379"

volumes:
  postgres_data:

4.1 Spring Boot Docker Compose Support

// build.gradle.kts
developmentOnly("org.springframework.boot:spring-boot-docker-compose")

# application.yml
spring:
  docker:
    compose:
      lifecycle-management: start-and-stop
      file: docker-compose.yml

Spring Boot tự động start Docker Compose khi chạy app và configure connection properties.

---

5. Container Best Practices

5.1 JVM tuning cho Container

ENTRYPOINT ["java", \
  "-XX:MaxRAMPercentage=75", \
  "-XX:+UseZGC", \
  "-XX:+ZGenerational", \
  "-Djava.security.egd=file:/dev/./urandom", \
  "-jar", "app.jar"]

5.2 Health check trong Docker

HEALTHCHECK --interval=30s --timeout=3s --retries=3 \
  CMD wget -qO- http://localhost:8080/actuator/health || exit 1

5.3 .dockerignore

.git
.gradle
build/
!build/libs/*.jar
.idea
*.iml
node_modules

---

Tóm tắt

• Multi-stage Dockerfile: tách build và runtime stage, giảm image size đáng kể
• Cloud Native Buildpacks: tạo Docker image không cần Dockerfile, ./gradlew bootBuildImage
• GraalVM Native Image: startup 50-200ms, memory 50-100MB — lý tưởng cho serverless
• Docker Compose + Spring Boot Docker Compose Support: tự động start dependencies khi develop

Bài tập

1. Viết multi-stage Dockerfile cho Spring Boot app với layered extraction. So sánh image size với single-stage
2. Tạo docker-compose.yml đầy đủ: app + PostgreSQL + Redis. Cấu hình healthcheck và depends_on
3. Build GraalVM Native Image, đo startup time và memory usage, so sánh với JVM mode