# To get around the bug in https://github.com/moby/buildkit/issues/1366 on windows hosts, you can either:
#   1. Enable long file path support in windows
#   2. Use the \\?\ prefix when specifying the path in the docker build command. e.g.
#      docker build \\?\C:\path -f .\Dockerfile
# See https://docs.microsoft.com/en-us/windows/win32/fileio/maximum-file-path-limitation
FROM mcr.microsoft.com/dotnet/sdk:8.0-alpine AS build-env

ARG MSGRAPH_NUGET_URL=https://nuget.pkg.github.com/microsoftgraph/index.json

WORKDIR /app

COPY ./src ./msgraph-cli/src
WORKDIR /app/msgraph-cli

# RUN apk add gcc --no-cache # Uncomment this if PublishAot is enabled

RUN dotnet publish -p:PublishSingleFile=false -p:PublishReadyToRun=true -p:PublishReadyToRunShowWarnings=true ./src/msgraph-cli.csproj --configuration Release --no-self-contained --runtime linux-musl-x64 --output /app/output

FROM mcr.microsoft.com/dotnet/runtime:8.0-alpine as runtime

# Change this password by providing a different value when running the container
ENV KEYRING_PASSWORD="password"

RUN apk add --no-cache libsecret dbus gnome-keyring libcap &&\
    dbus-uuidgen > /var/lib/dbus/machine-id &&\
    setcap cap_ipc_lock=+ep $(which gnome-keyring-daemon)

# TODO: Find work-around for running image as a non-root user.
# Docker doesn't support adding capabilities to non-root users. See https://training.play-with-docker.com/security-capabilities/

WORKDIR /app

COPY --from=build-env /app/output ./dist

RUN ln -s /app/dist/mgc /usr/bin/mgc

COPY ./docker/* ./dist/

RUN mkdir -p /root/.mgc /root/.local/share/.IdentityService /root/.local/share/keyrings &&\
    chmod +x /app/dist/init.sh

VOLUME [ "/root/.mgc", "/root/.local/share/.IdentityService", "/root/.local/share/keyrings" ]

ENTRYPOINT ["./dist/init.sh"]

LABEL description="# Welcome to the Microsoft Graph CLI  \
[Source dockerfile](https://github.com/microsoftgraph/msgraph-cli/blob/main/Dockerfile)"