Merge pull request #2 from project-construct-x/chore/boilerplate-issues

chore: added boilerplate for docker images

Author: eschrewe

launcher/con-x-wallet/Dockerfile

@@ -17,7 +17,22 @@
 FROM eclipse-temurin:25-jre
 WORKDIR /app
 
+ARG IMAGE_CREATED
+ARG VERSION_TAG
+
+LABEL org.opencontainers.image.title="Construct-X Wallet" \
+      org.opencontainers.image.description="Wallet-Service for Project Construct-X. It includes functionalities of both an identity-hub and an issuer-service." \
+      org.opencontainers.image.url="https://github.com/project-construct-x/wallet" \
+      org.opencontainers.image.source="https://github.com/project-construct-x/wallet" \
+      org.opencontainers.image.version="${VERSION_TAG}" \
+      org.opencontainers.image.licenses="Apache-2.0" \
+      org.opencontainers.image.created="${IMAGE_CREATED}"
+
 ARG JAR_FILE
 COPY build/libs/${JAR_FILE} /app/app.jar
 
+COPY build/docker/runtimeClasspath-dependencies.txt /app/DEPENDENCIES
+COPY build/docker/LICENSE /app/LICENSE
+COPY NOTICE_DOCKER.md /app/NOTICE.md
+
 ENTRYPOINT ["sh","-c","exec java -jar /app/app.jar --log-level=debug"]

launcher/con-x-wallet/NOTICE_DOCKER.md

@@ -0,0 +1,50 @@
+# Notices for Construct-X Wallet
+
+
+This product includes software developed by the Project Construct-X and its contributors.
+The software is licensed under the Apache License, Version 2.0.
+You may obtain a copy of the License at:
+
+    https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+
+## Third-party Components
+
+This product includes third-party components:
+
+- Eclipse Dataspace Connector (EDC)
+  Copyright (c) 2020-2026 Contributors to the Eclipse Foundation
+  Licensed under the Apache License, Version 2.0
+  See: https://github.com/eclipse-edc/Connector
+
+- Eclipse IdentityHub
+  Copyright (c) 2022-2026 Contributors to the Eclipse Foundation
+  Licensed under the Apache License, Version 2.0
+  See: https://github.com/eclipse-edc/IdentityHub
+
+- super-user-seed-extension
+  Copyright (c) 2026 Fraunhofer-Gesellschaft zur Foerderung der angewandten Forschung e.V.
+  Licensed under the Apache License, Version 2.0
+  See: https://github.com/FraunhoferISST/super-user-seed-extension
+
+- Eclipse Temurin (base container image)
+  Provided by the Eclipse Adoptium project
+  Licensed under the GNU General Public License, version 2 with the Classpath Exception
+  See: https://adoptium.net
+
+Additional third-party dependencies and their licenses are listed in the build configuration and in the dependency metadata, as shown in the `DEPENDENCIES` file.
+
+**Used base image**
+
+- [eclipse-temurin:25-jre](https://github.com/adoptium/containers)
+- Official Eclipse Temurin DockerHub page: https://hub.docker.com/_/eclipse-temurin
+- Eclipse Temurin Project: https://projects.eclipse.org/projects/adoptium.temurin
+- Additional information about the Eclipse Temurin images: https://github.com/docker-library/repo-info/tree/master/repos/eclipse-temurin
+
+As with all Docker images, these likely also contain other software which may be under other licenses
+(such as Bash, etc. from the base distribution, along with any direct or indirect dependencies of the primary software being contained).
+
+As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within.

launcher/con-x-wallet/build.gradle.kts

@@ -16,6 +16,7 @@
 
 import org.gradle.api.tasks.Exec
 import com.github.jengelman.gradle.plugins.shadow.tasks.ShadowJar
+import java.time.Instant
 
 plugins {
     `java-library`
@@ -52,13 +53,38 @@ tasks.shadowJar {
     manifest { attributes["Main-Class"] = application.mainClass.get() }
 }
 
+val depsReportFile = layout.buildDirectory.file("docker/runtimeClasspath-dependencies.txt")
+
+val generateRuntimeClasspathDeps = tasks.register("generateRuntimeClasspathDeps") {
+    outputs.file(depsReportFile)
+
+    doLast {
+        val conf = configurations.runtimeClasspath.get()
+
+        val outFile = depsReportFile.get().asFile
+        outFile.parentFile.mkdirs()
+
+        outFile.printWriter().use { out ->
+            out.println("runtimeClasspath dependencies:")
+            conf.incoming.resolutionResult.allComponents.forEach { component ->
+                val id = component.moduleVersion
+                if (id != null) {
+                    out.println("${id.group}:${id.name}:${id.version}")
+                } else {
+                    out.println(component.id.toString())
+                }
+            }
+        }
+    }
+}
+
 
 val imageName = "wallet:${releaseVersion}"
 val shadowJar = tasks.named<ShadowJar>("shadowJar")
 val jarFileName = "$releaseVersion.jar"
 
 tasks.register<Exec>("dockerize") {
-    dependsOn(shadowJar)
+    dependsOn(shadowJar, generateRuntimeClasspathDeps)
 
     workingDir = project.projectDir
 
@@ -70,9 +96,25 @@ tasks.register<Exec>("dockerize") {
         require(jarFile.exists()) { "Shadow-Jar build/libs/$jarFileName missing " +
                 "– please make sure \"shadowJar\" gradle task is successful" }
 
+        val depsFile = depsReportFile.get().asFile
+        require(depsFile.exists()) {
+            "Dependencies report ${depsFile.absolutePath} missing – check generateRuntimeClasspathDeps task"
+        }
+
+        val dockerDir = project.layout.buildDirectory.dir("docker").get().asFile
+        project.copy {
+            from(rootProject.files("LICENSE"))
+            into(dockerDir)
+        }
+
+
+        val imageCreated = Instant.now().toString()
+
         commandLine(
             "docker", "build",
             "--build-arg", "JAR_FILE=$jarFileName",
+            "--build-arg", "IMAGE_CREATED=$imageCreated",
+            "--build-arg", "VERSION_TAG=$releaseVersion",
             "-t", imageName,
             "."
         )