FROM registry.fedoraproject.org/fedora-minimal:39 AS build

ARG CUE_VERSION=0.7.0

RUN --mount=type=cache,target=/var/cache \
	microdnf install -y \
		--setopt install_weak_deps=0 \
		gzip \
		tar \
	&& ARCH=$(uname -m) \
	&& case "${ARCH}" in \
		x86_64) ARCH=amd64 ;; \
		aarch64) ARCH=arm64 ;; \
	esac \
	&& url="https://github.com/cue-lang/cue/releases/download/v${CUE_VERSION}/cue_v${CUE_VERSION}_linux_${ARCH}.tar.gz" \
	&& curl -fsSL "${url}" \
	| tar -C /usr/local/bin -xz cue \
	&& :


FROM git.pyrocufflink.net/containerimages/tmpl

RUN --mount=type=cache,target=/var/cache \
	--mount=type=bind,from=build,source=/,target=/build \
	microdnf install -y \
		--setopt install_weak_deps=0 \
		age \
		git-core \
	&& ln -snf /host/etc/passwd /etc/passwd \
	&& ln -snf /host/etc/group /etc/group \
	&& cp -a /build/usr/local/bin/cue /usr/local/bin/ \
	&& for cmd in \
		systemctl \
		systemd-sysusers \
	; do ln -s nsenter.sh /usr/local/bin/${cmd}; done \
	&& :

COPY nsenter.sh /usr/local/bin/nsenter.sh

COPY config.sh /

ENTRYPOINT []

CMD ["/config.sh"]

LABEL license= \
	vendor='Dustin C. Hatch' \