FROM oci.liz.coffee/img/liz-ci:release AS worker

# Image building / publishing jobs
RUN apt-get install -yqq ca-certificates curl
RUN curl "https://get.docker.com/builds/`uname -s`/`uname -m`/docker-latest.tgz" > docker.tgz &&\
    tar -xvzf docker.tgz &&\
    mv docker/* /usr/local/bin &&\
    rm -rf docke*

RUN groupadd docker
RUN useradd --system --home-dir /var/lib/laminar \
    --no-user-group --groups users,docker --uid 100 laminar

# Secret retrieval
RUN apt install -yqq unzip
ADD https://github.com/bitwarden/clients/releases/download/cli-v2025.4.0/bw-linux-2025.4.0.zip /tmp/bw-linux.zip
RUN unzip /tmp/bw-linux.zip
RUN mv bw /usr/local/bin
RUN rm /tmp/bw-linux.zip

USER laminar
WORKDIR /var/lib/laminar
EXPOSE 8080

CMD [ "/usr/sbin/laminard" ]