FROM oci.liz.coffee/img/liz-ci:release as worker

RUN groupadd docker
RUN useradd --system --home-dir /var/lib/laminar \
    --no-user-group --groups users,docker --uid 100 laminar

# Secret retrieval
RUN apt install -yqq unzip
ADD https://github.com/bitwarden/clients/releases/download/cli-v2025.4.0/bw-linux-2025.4.0.zip /tmp/bw-linux.zip
RUN unzip /tmp/bw-linux.zip
RUN mv bw /usr/local/bin
RUN rm /tmp/bw-linux.zip

# Image building / publishing jobs
RUN apt install -yqq docker-ce-cli

# Ansible playbooks
RUN apt install -yqq ansible-core openssh-client

USER laminar
WORKDIR /var/lib/laminar
EXPOSE 8080

CMD [ "/usr/sbin/laminard" ]