FROM registry.fedoraproject.org/fedora:38 AS build

RUN --mount=type=cache,target=/var/cache \
	dnf install -y \
		--setopt install_weak_deps=0 \
		cargo \
		libvirt-devel \
		rust \
		openssl-devel \
	&& :

COPY . /build

RUN cd /build && cargo build --release --bins && strip -s target/release/sshca

FROM registry.fedoraproject.org/fedora-minimal:38

RUN --mount=type=cache,target=/var/cache \
	microdnf install -y \
		--setopt install_weak_deps=0 \
		tini \
		libvirt-libs \
		openssh-clients \
	&& :

COPY --from=build /build/target/release/sshca /usr/local/bin/sshca

USER 298:298

ENTRYPOINT ["tini", "/usr/local/bin/sshca", "--"]