From fc2216bdc92e9c17bd0021325482319bf0d9532d Mon Sep 17 00:00:00 2001
From: Aliaksandr Stsiapanay <aliaksandr_stsiapanay@epam.com>
Date: Tue, 1 Sep 2026 17:26:35 +0300
Subject: [PATCH] fix: pin Alpine JDK base image to avoid empty JFR recordings

eclipse-temurin:21-jdk-alpine is a floating tag; the build that shipped
0.47.0 picked up JDK 21.0.12 + musl 1.2.6, where JFR silently writes 0
bytes on stop/dump. 0.46.1 (JDK 21.0.11 + musl 1.2.5) is unaffected.
Pin to that known-good digest until the regression is fixed upstream.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 Dockerfile | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index cf975849f..070ec6e7a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -7,7 +7,11 @@ WORKDIR /home/gradle/src
 RUN --mount=type=secret,id=GPR_USERNAME,env=GPR_USERNAME --mount=type=secret,id=GPR_PASSWORD,env=GPR_PASSWORD gradle --no-daemon build --stacktrace -PdisableCompression=true -x test
 RUN mkdir /build && tar -xf /home/gradle/src/server/build/distributions/server*.tar --strip-components=1 -C /build
 
-FROM eclipse-temurin:21-jdk-alpine
+# Pinned to Temurin 21.0.11_10 (musl 1.2.5) — the last known-good combination for JFR.
+# JDK 21.0.12 + musl 1.2.6 (the next eclipse-temurin:21-jdk-alpine build) silently produces
+# empty .jfr recordings (JFR.stop reports "0 bytes written"). Do not float this tag until
+# that regression is confirmed fixed upstream.
+FROM eclipse-temurin:21-jdk-alpine@sha256:1ff763083f2993d57d0bf374ab10bb3e2cb873af6c13a04458ebbd3e0337dc76
 
 ENV OTEL_TRACES_EXPORTER="none"
 ENV OTEL_METRICS_EXPORTER="none"