From 97b2a3b70550c2dc7ad07a97c679f80415a02cf2 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Sun, 28 Jul 2024 10:12:17 -0500
Subject: [PATCH] Add container image build script

---
 Containerfile   | 38 ++++++++++++++++++++++++++++++++++++++
 dch-root-ca.crt | 12 ++++++++++++
 nsenter.sh      |  3 +++
 3 files changed, 53 insertions(+)
 create mode 100644 Containerfile
 create mode 100644 dch-root-ca.crt
 create mode 100755 nsenter.sh

diff --git a/Containerfile b/Containerfile
new file mode 100644
index 0000000..d17e071
--- /dev/null
+++ b/Containerfile
@@ -0,0 +1,38 @@
+FROM docker.io/library/alpine AS build
+
+RUN --mount=type=cache,target=/var/cache \
+	apk add \
+		cargo \
+		protoc \
+		rust \
+	&& :
+
+COPY src /src/src
+
+COPY Cargo.* /src/
+
+WORKDIR /src
+
+RUN cargo build --release
+
+
+FROM docker.io/library/alpine
+
+RUN --mount=type=cache,target=/var/cache \
+	apk add \
+		libgcc \
+	&& :
+
+COPY --from=build /src/target/release/luci /usr/local/bin/luci
+
+COPY dch-root-ca.crt /etc/ssl/certs
+
+COPY nsenter.sh /usr/local/libexec/nsenter.sh
+
+RUN for cmd in \
+	systemctl \
+	; do \
+	ln -s /usr/local/libexec/nsenter.sh /usr/local/bin/${cmd} \
+	; done
+
+ENTRYPOINT ["luci"]
diff --git a/dch-root-ca.crt b/dch-root-ca.crt
new file mode 100644
index 0000000..6705c7a
--- /dev/null
+++ b/dch-root-ca.crt
@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/nsenter.sh b/nsenter.sh
new file mode 100755
index 0000000..5f52009
--- /dev/null
+++ b/nsenter.sh
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+exec nsenter -t 1 -m -u -i -n -p "${0##*/}" "$@"