Add Docker images for arm64 architecture

[kezhenxu94]

• If this pull request closes/resolves/fixes an existing issue, replace the issue number. Closes try to enable cross build for arm64 docker image #8015
• Update the CHANGES log.

[wu-sheng]

Which platforms are we going to push to docker and ghcr eventually?

[kezhenxu94]

Which platforms are we going to push to docker and ghcr eventually?

linux/amd64 and linux/arm64

[wu-sheng]

Which platforms are we going to push to docker and ghcr eventually?

linux/amd64 and linux/arm64

Is this arm64 able to build on the top of a x86 Linux or Mac? (I never had a change to learn this, sorry)

[kezhenxu94]

Which platforms are we going to push to docker and ghcr eventually?

linux/amd64 and linux/arm64

Is this arm64 able to build on the top of a x86 Linux or Mac? (I never had a change to learn this, sorry)

Yes, that's why we need to leverage BuildKit to build cross platform images

[kezhenxu94]

I end up changing the base image from adoptopenjdk/openjdk:alpine-jre to adoptopenjdk/openjdk:jre, which is closest to the previous one but supports amd64/arm64, all tests are passing, also no {high,critical} CVEs.

trivy --severity "HIGH,CRITICAL" adoptopenjdk/openjdk11:jre
2021-11-17T19:13:04.132+0800	INFO	Detected OS: ubuntu
2021-11-17T19:13:04.132+0800	INFO	Detecting Ubuntu vulnerabilities...
2021-11-17T19:13:04.134+0800	INFO	Number of PL dependency files: 1

adoptopenjdk/openjdk11:jre (ubuntu 20.04)
=========================================
Total: 0 (HIGH: 0, CRITICAL: 0)

[wu-sheng]

Once it is JRE, I am fine. Just curious, what are the differences from openjdk:alpine-jre.

[kezhenxu94]

Once it is JRE, I am fine. Just curious, what are the differences from openjdk:alpine-jre.

We previously use adoptopenjdk/openjdk:alpine-jre, which only has a amd64 manifest in Docker image, so when building for arm64 it cannot find the base image (for arm64), the difference is that adoptopenjdk/openjdk:jre provides both amd64 and arm64 manifest in Docker images so we can pull them as base image to build for both architectures.

[wu-sheng]

Got this. My question is more about, what are differences of image size and components built-in inside.

[kezhenxu94]

Check these 2 images