Dockerized IdP

[Cantor, Scott]

> Jetty has been configured to point directly to the
> IDP_HOME/webapp directory, so there is no need to run
> rebuild.sh/rebuild.bat when customizing the idp.war; just overlay your
> changes.

That strikes me as a bad idea for all sorts of reasons (containers simply do not handle that well) and I'm not sure what this buys given that overlaying changes would generally require running the build command anyway. You should certainly *never* try to redeploy live anyway, which eliminates any benefit to this approach.

In fairness, if you're not meant to access the file system of the image, then it's mostly academic I suppose

But bottom line is that I would never advise anybody to run with an unpacked war in production because all the things you can do to an unpacked war are unstable and risky.

-- Scott