FROM debian:testing-slim

SHELL [ "/bin/sh", "-eux", "-c" ]

RUN apt-get update \
	&& apt-get install -y --no-install-recommends yggdrasil wget ca-certificates libcap2-bin gosu socat jq;\
	apt-get clean ;\
	rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

RUN PEERS_UPDATER_URL="$(wget -qO- https://api.github.com/repos/ygguser/peers_updater/releases/latest \
      | jq -r '.assets[] | select(.name == "x86_64-unknown-linux-gnu.zip").browser_download_url')" ;\
      wget -qO- "$PEERS_UPDATER_URL" \
      | zcat \
      | install -m 755 /dev/stdin /usr/local/bin/peers_updater ;\

# Set file capability to run as regular user
RUN setcap cap_net_admin=eip /usr/sbin/yggdrasil

COPY ./docker/run.sh /usr/local/bin/run.sh

CMD ["/usr/local/bin/run.sh"]