Goit

FROM golang:alpine as build
RUN apk update
RUN apk upgrade
RUN apk add --no-cache build-base
COPY . /app
WORKDIR /app
ARG version
RUN VERSION=$version make build

FROM alpine:latest
RUN apk update
RUN apk upgrade
RUN apk add --no-cache git openssh
COPY --from=build /app/bin /app/bin
RUN ln -s /app/bin/goit-shell /usr/local/bin/goit-shell

RUN addgroup -g 973 -S git
RUN adduser -g git -s /bin/sh -G git -S -u 973 git
RUN sed -i 's/^git:!:/git:*:/' /etc/shadow
RUN mkdir -p /home/git/.config /home/git/.local/share /home/git/.local/state
RUN chown -R git:git /home/git/.config /home/git/.local

RUN sed -i 's/^#PasswordAuthentication yes/PasswordAuthentication no/' /etc/ssh/sshd_config
RUN echo 'HostKey /etc/ssh/host_keys/etc/ssh/ssh_host_rsa_key' >> /etc/ssh/sshd_config.d/00_host_keys.conf
RUN echo 'HostKey /etc/ssh/host_keys/etc/ssh/ssh_host_ecdsa_key' >> /etc/ssh/sshd_config.d/00_host_keys.conf
RUN echo 'HostKey /etc/ssh/host_keys/etc/ssh/ssh_host_ed25519_key' >> /etc/ssh/sshd_config.d/00_host_keys.conf

WORKDIR /app
EXPOSE 8080/tcp
EXPOSE 22/tcp
# VOLUME /home/git/.config/goit /home/git/.local/share/goit /home/git/.local/state/goit
VOLUME /etc/ssh/host_keys

RUN cat <<EOF > /app/bin/launch.sh
#!/bin/sh -e
mkdir -p /etc/ssh/host_keys/etc/ssh
ssh-keygen -A -f /etc/ssh/host_keys
/usr/sbin/sshd -D &
su git -c "/app/bin/goit \$@"
EOF

ENTRYPOINT ["sh", "/app/bin/launch.sh"]