# syntax=docker/dockerfile:1.7
FROM lscr.io/linuxserver/eden@sha256:f18ec24d55266daab9a440aba5fe3e9587494cf7a9aad63f93806efe4081be83
ARG DEBIAN_FRONTEND=noninteractive
RUN apt-get update \
    && apt-get install -y --no-install-recommends libexpat1=2.8.3-1~deb13u1 \
    && apt-get purge -y --auto-remove \
        bsd-mailx \
        catatonit \
        cmake \
        containerd.io \
        cron \
        curl \
        docker-buildx-plugin \
        docker-ce \
        docker-ce-cli \
        docker-compose-plugin \
        exim4-base \
        exim4-config \
        exim4-daemon-light \
        fuse-overlayfs \
        g++ \
        gcc \
        git \
        make \
        openssh-client \
        perl \
        perl-modules-5.40 \
    && rm -f \
        /etc/s6-overlay/s6-rc.d/user/contents.d/svc-cron \
        /etc/s6-overlay/s6-rc.d/user/contents.d/svc-docker \
    && rm -rf /var/lib/apt/lists/*
COPY --chmod=644 deploy/ludarium_sidecar.py /opt/ludarium/ludarium_sidecar.py
COPY --chmod=755 deploy/eden-controller.py /opt/ludarium/eden-controller.py
COPY --chmod=755 deploy/eden-controller-run /custom-services.d/ludarium-controller
COPY --chmod=755 deploy/audit-eden-runtime.sh /opt/ludarium/audit-eden-runtime.sh
COPY deploy/security/eden-controller-0.4.9.openvex.json /usr/share/ludarium/security/eden-controller.openvex.json
RUN sed -i 's/\r$//' /custom-services.d/ludarium-controller