FROM local/gitea-runner-base:latest

# cicd-base runner profile: common CI build and release tooling.
USER root
RUN apt-get update && apt-get install -y --no-install-recommends \
	buildah \
	ca-certificates \
	curl \
	fuse-overlayfs \
	git \
	iptables \
	jq \
	make \
	openssh-client \
	podman \
	python3 \
	python3-pip \
	rsync \
	skopeo \
	slirp4netns \
	uidmap \
	unzip \
	zip \
	&& rm -rf /var/lib/apt/lists/*

RUN mkdir -p /etc/containers /var/lib/containers /run/containers && \
	printf '%s\n' '[storage]' 'driver = "vfs"' > /etc/containers/storage.conf && \
	printf '%s\n' '[engine]' > /etc/containers/containers.conf

ENV BUILDAH_ISOLATION=chroot
ENV STORAGE_DRIVER=vfs

ARG TRIVY_VERSION=0.72.0
RUN curl -fsSL -o /tmp/trivy.tar.gz \
	"https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" && \
	tar -xzf /tmp/trivy.tar.gz -C /tmp && \
	install -m 0755 /tmp/trivy /usr/local/bin/trivy && \
	rm -f /tmp/trivy.tar.gz /tmp/trivy