ARG RUBY_VERSION="3.4.3"
ARG BASE_REGISTRY="docker.io"
FROM ${BASE_REGISTRY}/ruby:${RUBY_VERSION}-alpine AS base

WORKDIR /kubernaut

RUN <<EOT
  apk update -q
  apk add bash jemalloc
  rm -rf /var/cache/apk
  gem update --system --no-document
  gem install -N bundler
EOT

ENV RACK_ENV="production" \
  BUNDLE_DEPLOYMENT=true \
  BUNDLE_PATH="/usr/local/bundle" \
  BUNDLE_WITHOUT="development test" \
  RUBY_YJIT_ENABLE=true

FROM base AS build

RUN <<EOT
  apk add musl-dev gcc make
  rm -rf /var/cache/apk
EOT

COPY Gemfile Gemfile.lock ./

RUN <<EOT
  bundle install
  rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby/*/cache "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git
EOT

COPY . .

FROM base

ENV PORT=4567

RUN <<EOT
  addgroup --system --gid 666 kubernaut
  adduser --system --uid 666 --ingroup kubernaut --shell /bin/bash --disabled-password kubernaut
EOT

COPY --from=build "${BUNDLE_PATH}" "${BUNDLE_PATH}"
COPY --from=build /kubernaut /kubernaut

USER kubernaut:kubernaut

EXPOSE $PORT
ENTRYPOINT [ "/kubernaut/dockerfiles/entrypoint.sh" ]
CMD [ "bundle", "exec", "puma" ]