FROM fedora:40

RUN dnf update -y --setopt install_weak_deps=False && \
    dnf install -y --setopt install_weak_deps=False git git-lfs git-ftp fuse-overlayfs \
    nodejs nodejs-npm python3-devel python3-pip pipx coreutils bash clang gcc \
    aria2 jq yq zstd brotli perl perl-CPAN ruby rubygems sqlite  && \
    dnf group install -y --setopt install_weak_deps=False "Container Management" --exclude container-selinux && \
    dnf clean all -y

ADD containers.conf /etc/containers/
ADD containers/storage.conf /etc/containers/

# Adjust storage.conf to enable Fuse storage.
RUN sed -i -e 's|^#mount_program|mount_program|g' -e '/additionalimage.*/a "/var/lib/shared",' /etc/containers/storage.conf
RUN mkdir -p /var/lib/shared/overlay-images /var/lib/shared/overlay-layers; touch /var/lib/shared/overlay-images/images.lock; touch /var/lib/shared/overlay-layers/layers.lock

# Define uid/gid ranges for our user https://github.com/containers/buildah/issues/3053
RUN useradd action && \
    echo -e "action:1:999\action:1001:64535" > /etc/subuid && \
    echo -e "action:1:999\action:1001:64535" > /etc/subgid && \
    mkdir -p /home/action/.local/share/containers && \
    mkdir -p /home/action/.config/containers && \
    chown -R action:action /home/action

VOLUME /var/lib/containers
VOLUME /home/action/.local/share/containers

# Set up environment variables to note that this is
# not starting with usernamespace and default to
# isolate the filesystem with chroot.
ENV _BUILDAH_STARTED_IN_USERNS="" BUILDAH_ISOLATION=chroot

ENTRYPOINT [ "/bin/bash" ]