Dockerfile.cli

ARG NODE_VERSION=22

FROM node:${NODE_VERSION}-alpine AS node-source

# Node 25+ no longer bundles corepack
RUN [ -d /usr/local/lib/node_modules/corepack ] || npm install -g corepack

FROM docker:cli

ARG NODE_VERSION

# Copy Node.js binaries and libraries from the node-source stage
COPY --from=node-source /usr/local/bin/node /usr/local/bin/node
COPY --from=node-source /usr/local/lib/node_modules/ /usr/local/lib/node_modules/

USER root

# Symlink npm and other tools to make them available in PATH
RUN ln -sf /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && \
    ln -sf /usr/local/lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx && \
    ln -sf /usr/local/lib/node_modules/corepack/dist/corepack.js /usr/local/bin/corepack && \
    chmod +x /usr/local/bin/npm /usr/local/bin/npx /usr/local/bin/corepack

# Install required packages
RUN apk add --no-cache \
    bash \
    curl \
    wget \
    git \
    git-lfs \
    jq \
    yq \
    ca-certificates \
    openssl \
    gnupg \
    which \
    zip \
    unzip \
    xz \
    zstd \
    coreutils \
    findutils \
    grep \
    sed \
    gawk \
    sudo \
    && corepack enable

# Install Helm and kubectl
ARG HELM_VERSION=v3.22.0
ARG KUBECTL_VERSION=v1.35.8
RUN set -eux; \
    curl -fsSL "https://get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz" | tar xz -C /tmp && \
    mv /tmp/linux-amd64/helm /usr/local/bin/helm && \
    rm -rf /tmp/linux-amd64 && \
    curl -fsSLo /usr/local/bin/kubectl "https://dl.k8s.io/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" && \
    chmod +x /usr/local/bin/helm /usr/local/bin/kubectl && \
    helm version && \
    kubectl version --client

# Client entrypoint to set DOCKER_HOST sensibly
COPY docker-entrypoint.sh /usr/local/bin/
RUN chmod +x /usr/local/bin/docker-entrypoint.sh

ENV DOCKER_TLS_CERTDIR=/certs
RUN mkdir -p /certs /certs/client && chmod 1777 /certs /certs/client

WORKDIR /workspace

ENTRYPOINT ["docker-entrypoint.sh"]
CMD ["sh"]