# gdo, the mailer, from the [uhhm] Arch registry - the same package the
# bare-metal hosts install. Arch base rather than Debian because that is
# how every uhhm binary is published; portal ships a release tarball and
# is built from that instead.
FROM archlinux:base
ARG GDO_RELEASE
RUN printf '%s\n' \
      '[uhhm]' \
      'SigLevel = Required DatabaseOptional' \
      'Server = https://project.uhhm.no/api/packages/bl/arch/$repo/$arch' \
    >> /etc/pacman.conf \
 && pacman -Sy --noconfirm --needed ca-certificates gdo \
 && pacman -Scc --noconfirm \
 && rm -rf /var/cache/pacman/pkg/* /var/lib/pacman/sync/*
# A non-root user; gdo writes nothing and holds no state - what it has
# not yet delivered is on the stream, not on disk.
RUN useradd --system --no-create-home gdo
USER gdo
CMD ["/usr/bin/gdo"]
