# 7b. A trap: the AOT cache from image 7, run by a different JVM build (distroless ships Temurin
#     25.0.4.1, the cache was trained on 25.0.4). What happens when a base-image bump changes the JVM
#     under a cache built earlier - measured in docs/06-aot-cache.md.
FROM sbd/docker-images:aot-cache AS trained

FROM gcr.io/distroless/java25-debian13:nonroot
WORKDIR /application
COPY --from=trained /application/ ./
ENTRYPOINT ["java", "-XX:AOTCache=app.aot", "-jar", "application.jar"]