# syntax=docker/dockerfile:1.12
# Scratch-derived, linux/amd64 only. Freeze by registry manifest digest after validation.
FROM registry.access.redhat.com/ubi10@sha256:1e32d829a4de713a835d702d3bc05f0c448a08590796281b7dec181912e9aeb8
LABEL io.itworx.contextforge.os-base.role="builder" \
      io.itworx.contextforge.os-base.upstream-commit="1e58a0434a78bbdbe1e975abeb0bed1043ff14c1" \
      io.itworx.contextforge.os-base.upstream-containerfile-sha256="2ab0187f3a63eced093a1dec3141ec3e30ef879eb7de0dfd9e4bc5fce33f64f2" \
      io.itworx.contextforge.os-base.parent-ref="registry.access.redhat.com/ubi10@sha256:1e32d829a4de713a835d702d3bc05f0c448a08590796281b7dec181912e9aeb8" \
      io.itworx.contextforge.os-base.platform="linux/amd64"
SHELL ["/bin/bash", "-euo", "pipefail", "-c"]

RUN set -euo pipefail \
    && dnf upgrade -y \
    && dnf install -y --allowerasing \
        python3.12 \
        python3.12-devel \
        binutils openssl-devel gcc postgresql-devel gcc-c++ curl libpq-devel \
    && update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.12 1 \
    && dnf clean all

RUN set -eu \
    && mkdir -p /usr/share/itworx \
    && rpm -qa --qf '%{NAME}|%{EPOCHNUM}|%{VERSION}|%{RELEASE}|%{ARCH}\n' > /tmp/itworx-rpm-inventory.unsorted \
    && LC_ALL=C sort /tmp/itworx-rpm-inventory.unsorted > /usr/share/itworx/rpm-inventory.txt \
    && rm /tmp/itworx-rpm-inventory.unsorted \
    && chmod 0444 /usr/share/itworx/rpm-inventory.txt