FROM oci.liz.coffee/img/liz-ci:release as worker

RUN groupadd docker
RUN useradd --system --home-dir /var/lib/laminar \
    --no-user-group --groups users,docker --uid 100 laminar

# Secret retrieval
RUN apt install -yqq npm
RUN npm install -g @bitwarden/cli

# Image building / publishing jobs
RUN apt install -yqq docker-cli

# Ansible playbooks
RUN apt install -yqq ansible-core openssh-client

USER laminar
WORKDIR /var/lib/laminar
EXPOSE 8080

CMD [ "/usr/sbin/laminard" ]