# The image orgo's CI jobs run in. gitbay's runner never pulls, so the
# operator builds it on the runner host and .gitbay/ci.yml names it by tag.
# The file is staged in the runner user's home first: a login shell under su
# cannot read root's stdin, and root's session does not share /tmp with it.
#
#   scp -P 2222 .gitbay/Containerfile.ci root@gitbay.org:/var/lib/gitbay-runner/orgo-ci.Containerfile
#   ssh -p 2222 root@gitbay.org 'chown ci-runner /var/lib/gitbay-runner/orgo-ci.Containerfile \
#     && su - ci-runner -s /bin/sh -c "podman build -t localhost/orgo-ci:1 -f orgo-ci.Containerfile ." \
#     && rm /var/lib/gitbay-runner/orgo-ci.Containerfile'
#
# Tagged, not :latest, so a change here is a deliberate bump in ci.yml.
FROM docker.io/library/rust:1-trixie

# The rust image installs the minimal profile: clippy for the test job, the
# musl target and its linker for release.sh's second tarball, openssh-client
# for the pushes. git and ca-certificates are already present.
RUN rustup component add clippy \
 && rustup target add x86_64-unknown-linux-musl \
 && apt-get update \
 && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
        musl-tools \
        openssh-client \
 && rm -rf /var/lib/apt/lists/*