Dockerfile.dapper

FROM docker:29.6.2-cli@sha256:be132a9f282288de4afaf63379dff75711fda0147c6b72a9df44e51841402144 AS snapshot-ca-certificates

FROM ubuntu:26.04@sha256:678c6550cc43645e08669028bc177f50be4e7c5b8cca677067b1914d4afc7a03

COPY --from=snapshot-ca-certificates /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
COPY package/ubuntu-apt.lock /licenses/ubuntu-apt.lock

ARG DAPPER_HOST_ARCH=amd64
ARG DOCKER_VERSION=29.6.2
ARG DOCKER_LINUX_AMD64_SHA256=d6204aea92238e2453d5445c885b9d2e5eb8f82915568ec50edf9dbe12a3ac74
ARG GO_VERSION=1.26.5
ARG GO_LINUX_AMD64_SHA256=5c2c3b16caefa1d968a94c1daca04a7ca301a496d9b086e17ad77bb81393f053

ENV DEBIAN_FRONTEND=noninteractive
ENV HOST_ARCH=${DAPPER_HOST_ARCH} \
    ARCH=${DAPPER_HOST_ARCH} \
    PATH=/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin \
    SHELL=/bin/bash \
    GOTOOLCHAIN=local

RUN set -eux; \
    . /licenses/ubuntu-apt.lock; \
    find /etc/apt -type f \( -name '*.list' -o -name '*.sources' \) -exec sed -i \
        -e 's|http://security.ubuntu.com/ubuntu|https://security.ubuntu.com/ubuntu|g' \
        -e 's|http://archive.ubuntu.com/ubuntu|https://archive.ubuntu.com/ubuntu|g' {} +; \
    printf 'Acquire::Retries "5";\nAcquire::http::Timeout "30";\nAcquire::https::Timeout "30";\nAcquire::http::Pipeline-Depth "0";\nAcquire::https::CaInfo "/etc/ssl/certs/ca-certificates.crt";\nAcquire::AllowInsecureRepositories "false";\nAPT::Get::AllowUnauthenticated "false";\n' > /etc/apt/apt.conf.d/80pasturestack-retries; \
    apt-get --snapshot "${UBUNTU_APT_SNAPSHOT}" update; \
    apt-get --snapshot "${UBUNTU_APT_SNAPSHOT}" install -y --no-install-recommends \
        bash="${UBUNTU_APT_BASH_VERSION}" \
        ca-certificates="${UBUNTU_APT_CA_CERTIFICATES_VERSION}" \
        curl="${UBUNTU_APT_CURL_VERSION}" \
        file="${UBUNTU_APT_FILE_VERSION}" \
        gcc="${UBUNTU_APT_GCC_VERSION}" \
        git="${UBUNTU_APT_GIT_VERSION}" \
        jq="${UBUNTU_APT_JQ_VERSION}" \
        libc6-dev="${UBUNTU_APT_LIBC6_DEV_VERSION}" \
        linux-libc-dev="${UBUNTU_APT_LINUX_LIBC_DEV_VERSION}" \
        make="${UBUNTU_APT_MAKE_VERSION}" \
        tar="${UBUNTU_APT_TAR_VERSION}" \
        xz-utils="${UBUNTU_APT_XZ_UTILS_VERSION}"; \
    { \
        printf 'snapshot\t%s\n' "${UBUNTU_APT_SNAPSHOT}"; \
        dpkg-query -W -f='${binary:Package}\t${Version}\n' | LC_ALL=C sort; \
    } > /licenses/DAPPER-UBUNTU-APT-PACKAGES.tsv; \
    test "${DAPPER_HOST_ARCH}" = 'amd64'; \
    curl -fsSL --retry 5 --retry-all-errors --retry-delay 2 --connect-timeout 10 --max-time 300 \
        -o /tmp/go.tgz "https://go.dev/dl/go${GO_VERSION}.linux-amd64.tar.gz"; \
    echo "${GO_LINUX_AMD64_SHA256}  /tmp/go.tgz" | sha256sum -c -; \
    tar -C /usr/local -xzf /tmp/go.tgz; \
    go version | grep -F "go${GO_VERSION} linux/amd64"; \
    rm -f /tmp/go.tgz; \
    apt-get clean; \
    rm -rf /var/lib/apt/lists/*; \
    rm -f /usr/bin/pebble; \
    rm -f /bin/sh; \
    ln -s /bin/bash /bin/sh

RUN set -eux; \
    test "${DAPPER_HOST_ARCH}" = 'amd64'; \
    curl -fsSL --retry 5 --retry-all-errors --retry-delay 2 --connect-timeout 10 --max-time 300 \
        -o /tmp/docker.tgz "https://download.docker.com/linux/static/stable/x86_64/docker-${DOCKER_VERSION}.tgz"; \
    echo "${DOCKER_LINUX_AMD64_SHA256}  /tmp/docker.tgz" | sha256sum -c -; \
    tar xzf /tmp/docker.tgz -C /usr/bin --strip-components=1 docker/docker; \
    rm -f /tmp/docker.tgz; \
    chmod 0755 /usr/bin/docker; \
    docker --version

RUN git config --system --add safe.directory '*'

ENV DAPPER_SOURCE=/source \
    DAPPER_OUTPUT="bin dist" \
    DAPPER_DOCKER_SOCKET=true \
    DAPPER_ENV="TAG REPO IMAGE_NAME VERSION_OVERRIDE DOCKER_BUILD_NETWORK" \
    TRASH_CACHE=/source/.trash-cache

WORKDIR /source
ENTRYPOINT ["./scripts/entry"]
CMD ["ci"]