FROM debian:bullseye-slim AS build-stage

COPY . /tmp/clog

ARG KORE_VERSION=4.3.0-rc2
ARG KORE_SHA256=e9e3c9faa02b6c9c81da4d98ac4b99e4b874c41ac642b2f2a6b087f998d3cf62

RUN set -e \
	&& apt-get update -qq \
	&& apt-get upgrade -y \
	&& apt-get install -y \
		curl \
		gcc \
		make \
		pkg-config \
		libssl-dev \
		libpq-dev \
	&& cd /tmp \
	&& curl "https://kore.io/releases/kore-${KORE_VERSION}.tar.gz" --output "kore-${KORE_VERSION}.tar.gz" \
	&& echo "${KORE_SHA256}  kore-${KORE_VERSION}.tar.gz" > "kore-${KORE_VERSION}.tar.gz.sha256" \
	&& cat "kore-${KORE_VERSION}.tar.gz.sha256" \
	&& sha256sum -c "kore-${KORE_VERSION}.tar.gz.sha256" \
	&& tar xf "kore-${KORE_VERSION}.tar.gz" \
	&& cd "kore-${KORE_VERSION}" \
	&& make \
	&& make install \
	&& cd /tmp/clog \
	&& kodev build

FROM debian:bullseye-slim

LABEL maintainer="Michael McVady <femtonaut@gmail.com>"

RUN set -e \
	&& mkdir -p /var/chroot \
	&& addgroup --gid 502 clog \
	&& adduser --disabled-password --uid 502 --home /var/chroot/clog --shell /sbin/nologin --ingroup clog --gecos "" clog \
	&& mkdir -p /var/chroot/clog/etc \
	&& mkdir -p /var/chroot/clog/lib/x86_64-linux-gnu \
	&& cp /lib/x86_64-linux-gnu/libnss_dns.so.2 /var/chroot/clog/lib/x86_64-linux-gnu/libnss_dns.so.2 \
	&& apt-get update -qq \
	&& apt-get upgrade -y \
	&& apt-get install -y \
		libssl-dev \
		libpq-dev \
	&& rm -rf /var/lib/apt/lists/*

COPY --from=build-stage /tmp/clog/assets /var/chroot/clog/assets/
COPY --from=build-stage /tmp/clog/clog /tmp/clog/run.sh /var/chroot/clog/

EXPOSE 8888
STOPSIGNAL SIGQUIT

WORKDIR /var/chroot/clog
ENTRYPOINT [ "./run.sh" ]