Harden java dedup sample docker flow

Signed-off-by: Asish Kumar <officialasishkumar@gmail.com>

Author: officialasishkumar

java-dedup/Dockerfile

@@ -13,4 +13,4 @@ COPY --chown=10001:10001 target/classes /app/target/classes
 ENV KEPLOY_JAVA_CLASS_DIRS=/app/target/classes
 EXPOSE 8080
 USER 10001:10001
-ENTRYPOINT ["java", "-javaagent:/app/jacocoagent.jar", "-jar", "/app/app.jar"]
+ENTRYPOINT ["java", "-javaagent:/app/jacocoagent.jar=destfile=/tmp/jacoco.exec", "-jar", "/app/app.jar"]

java-dedup/README.md

@@ -6,52 +6,37 @@ CI does not record this sample. The `keploy/` directory is checked in so the pip
 
 The Java SDK reads JaCoCo coverage in-process via `org.jacoco.agent.rt.RT.getAgent().getExecutionData(...)`, so attaching the JaCoCo Java agent is enough — no TCP server, no port choice, no `--pass-through-ports`.
 
-## Build
+## Setup
 
 ```bash
+(cd ../../java-sdk && mvn -B -DskipTests -Dgpg.skip=true install -pl keploy-sdk -am)
 mvn -B -DskipTests package
 ```
 
-This produces `target/java-dedup-0.0.1-SNAPSHOT.jar` and copies `target/jacocoagent.jar` next to it.
+This installs the sibling SDK snapshot locally, builds the sample, produces `target/java-dedup-0.0.1-SNAPSHOT.jar`, and copies `target/jacocoagent.jar` next to it.
 
 ## Run dedup natively
 
 ```bash
 keploy test \
   -c "java -javaagent:target/jacocoagent.jar -jar target/java-dedup-0.0.1-SNAPSHOT.jar" \
-  --dedup --language java --delay 20
+  --dedup --language java --delay 20 \
+  --disableMockUpload --disableReportUpload
+
+keploy dedup --path .
 ```
 
 ## Run dedup with Docker
 
-Build the image (the Dockerfile already attaches the JaCoCo agent):
-
 ```bash
 docker compose build
-```
-
-Replay with dedup:
-
-```bash
 keploy test \
   -c "docker compose up" \
   --container-name "dedup-java" \
-  --dedup --language java --delay 20
-```
+  --dedup --language java --delay 20 \
+  --disableMockUpload --disableReportUpload
 
-The Compose file bind-mounts host `/tmp` into the container so Keploy and the Java SDK share `/tmp/coverage_control.sock` and `/tmp/coverage_data.sock`.
-
-### Restricted Docker
-
-For a read-only root filesystem with dropped capabilities and `no-new-privileges`, overlay the restricted compose file:
-
-```bash
-docker compose -f docker-compose.yml -f docker-compose.restricted.yml build
-
-keploy test \
-  -c "docker compose -f docker-compose.yml -f docker-compose.restricted.yml up" \
-  --container-name "dedup-java" \
-  --dedup --language java --delay 20
+keploy dedup --path .
 ```
 
-Host `/tmp` is still bind-mounted so the SDK and Keploy share the dedup Unix sockets.
+During `keploy test`, Enterprise rewrites the Compose file and injects its own shared `/tmp` volume for the dedup control/data sockets. The base sample Compose file does not need a host `/tmp` bind mount.

java-dedup/docker-compose.yml

@@ -11,7 +11,3 @@ services:
       - "${JAVA_DEDUP_HOST_PORT:-8080}:8080"
     environment:
       KEPLOY_JAVA_CLASS_DIRS: /app/target/classes
-    volumes:
-      - type: bind
-        source: /tmp
-        target: /tmp