ARG INFISICAL_CLI_VERSION=0.41.2
ARG ALPINE_VERSION=3.21.3

FROM scratch AS rootfs

COPY ["./src/entrypoint.sh", "/entrypoint.sh"]
COPY ["./src/adapt-user.sh", "/usr/local/bin/adapt-user"]



ARG ALPINE_VERSION
FROM alpine:${ALPINE_VERSION}

# Define build-time argument for Infisical version
ARG INFISICAL_CLI_VERSION

RUN set -eux \
    && apk --no-cache add bash curl gnupg runuser shadow \
    && groupmod -g 1000 users \
    && useradd -u 911 -U -d /data -s /bin/false abc \
    && usermod -G users abc \
    && curl -1sLf 'https://dl.cloudsmith.io/public/infisical/infisical-cli/setup.alpine.sh' | bash \
    && apk --no-cache add "infisical=${INFISICAL_CLI_VERSION}" \
    && rm -rf /var/cache/apk/* /tmp/*

COPY --from=rootfs ["/", "/"]

ENTRYPOINT ["/entrypoint.sh"]