#
# This Dockerfile is for creating an image to bootstrap a container within which one or more
# Silverpeas projects can be developed and built. The development and build environment required
# to work on one or more Silverpeas projects is set and ready in the container. By default, it is an
# IDEA IntelliJ IDE that is installed.
#
# The version of the Docker image is based upon the version of the Silverpeas platform on which the
# development and build environment is set up:
# <Silverpeas major version>.<Silverpeas minor version>.<Docker image patch version>
# For instance, a Docker image with version 6.2.1 means it defines a development and build
# environment for a projet based upon Silverpeas 6.2 and it is the first corrective version of such
# a Docker image. The Silverpeas 6.2 can to be not yet released; in such a case, it means the Docker image is to
# work on the next version of Silverpeas and, once this version is released it is to work on the patch versions of
# this version of Silverpeas.
# By using such a container, we ensure the build is reproductible and doesn't depend on the
# environment context specific to the developer's host. Only the .m2 repository and some settings
# like .m2/settings.xml, .gitconfig, .gnupg and .ssh of the current user in the host are shared with
# the container in order to be able to interact with his remote services.
#
FROM ubuntu:noble

LABEL name="Silverpeas Dev" \
  description="A Docker image to dev and to build a Silverpeas project" \
  vendor="Silverpeas" \
  version="6.5" \
  build=1

LABEL org.opencontainers.image.title="Silverpeas Dev"
LABEL org.opencontainers.image.description="A Docker image to dev and to build a Silverpeas project"
LABEL org.opencontainers.image.vendor="Silverpeas"
LABEL org.opencontainers.image.authors="Miguel Moquillon <miguel.moquillon@silverpeas.org>"
LABEL org.opencontainers.image.licenses="AGPLv3"

ENV TERM=xterm
ENV TZ=Europe/Paris
ENV DEBIAN_FRONTEND=noninteractive

# Parameters whose values are required yfor the tests to succeed
ARG DEFAULT_LOCALE=fr_FR.UTF-8
ARG MAVEN_VERSION=3.9.16
ARG MAVEN_SHA=831a8591fe20c8243b1dbe7d71e3244f31d1665b0804b2e825e38cbbe5ce0cafb8338851f90780735568773e0a6cd07bbec107cda0b896b008b861075358b6f6
ARG WILDFLY_VERSION=34.0.1
ARG JAVA_VERSION=17
ARG GROOVY_VERSION=4.0.28
ARG GROOVY_SHA=6a052bfd2ca77d57e0db304a313dd9a729945c5a31420e6d48505be4840bfc54
ARG NODEJS_VERSION=22

# Because the source code is shared between the host and the container, it is required the identifier
# of the owner and of its group are the same between this two environments. By default, they are both set at 1000.
# The user in the Docker container is also in the group users (id 100 by default)
ARG USER_ID=1000
ARG GROUP_ID=1000

COPY src/maven-deps.zip /tmp/

RUN apt-get update \
  && apt-get install -y software-properties-common \
  && apt-get update \
  && apt-get install -y tzdata \
  && apt-get install -y \
    apt-utils \
    iputils-ping \
    vim \
    curl \
    git \
    openssh-client \
    gnupg \
    locales \
    language-pack-en \
    language-pack-fr \
    procps \
    net-tools \
    zip \
    unzip \
    openjdk-${JAVA_VERSION}-jdk \
    openjdk-${JAVA_VERSION}-doc \
    ffmpeg \
    imagemagick \
    ghostscript \
    libreoffice-writer \
    libreoffice-calc \
    libreoffice-impress \
    gpgv \
    bash-completion \
    libgbm1 \
    htop \
  && userdel -r ubuntu \
  && groupadd -g ${GROUP_ID} silveruser \
  && useradd -u ${USER_ID} -g ${GROUP_ID} -G users -d /home/silveruser -s /bin/bash -m silveruser \
  && curl -sL https://deb.nodesource.com/setup_${NODEJS_VERSION}.x | bash - \
  && apt-get install -y nodejs \
  && rm -rf /var/lib/apt/lists/* \
  && update-ca-certificates -f \
  && mkdir -p /opt/maven /opt/maven/ref \
  && curl -fsSL -o /tmp/apache-maven.tar.gz https://archive.apache.org/dist/maven/maven-3/${MAVEN_VERSION}/binaries/apache-maven-${MAVEN_VERSION}-bin.tar.gz \
  && echo "${MAVEN_SHA}  /tmp/apache-maven.tar.gz" | sha512sum -c - \
  && tar -xzf /tmp/apache-maven.tar.gz -C /opt/maven --strip-components=1 \
  && rm -f /tmp/apache-maven.tar.gz \
  && ln -s /opt/maven/bin/mvn /usr/bin/mvn \
  && unzip /tmp/maven-deps.zip -d /home/silveruser/ \
  && chown -R silveruser:silveruser /home/silveruser/.m2 \
  && curl -fsSL -o /tmp/apache-groovy.zip https://groovy.jfrog.io/artifactory/dist-release-local/groovy-zips/apache-groovy-binary-${GROOVY_VERSION}.zip \
  && echo "${GROOVY_SHA}  /tmp/apache-groovy.zip" | sha256sum -c - \
  && unzip /tmp/apache-groovy.zip -d /opt/ \
  && echo `grep -oP '(?<=")[a-zA-Z:/]+(?=")' /etc/environment`:/opt/groovy-${GROOVY_VERSION}/bin > /etc/environment \
  && mkdir /home/silveruser/bin \
  && echo "PATH=${PATH}:/home/silveruser/bin" >> /home/silveruser/.bashrc \
  && curl -fsSL -o /tmp/swftools-bin-0.9.2.zip https://www.silverpeas.org/files/swftools-bin-0.9.2.zip \
  && echo 'd40bd091c84bde2872f2733a3c767b3a686c8e8477a3af3a96ef347cf05c5e43 *swftools-bin-0.9.2.zip' | sha256sum - \
  && unzip /tmp/swftools-bin-0.9.2.zip -d / \
  && curl -fsSL -o /tmp/pdf2json-bin-0.68.zip https://www.silverpeas.org/files/pdf2json-bin-0.68.zip \
  && echo 'eec849cdd75224f9d44c0999ed1fbe8764a773d8ab0cf7fff4bf922ab81c9f84 *pdf2json-bin-0.68.zip' | sha256sum - \
  && unzip /tmp/pdf2json-bin-0.68.zip -d / \
  && curl -fsSL -o /tmp/wildfly-${WILDFLY_VERSION}.Final.FOR-TESTS.zip https://www.silverpeas.org/files/wildfly-${WILDFLY_VERSION}.Final.FOR-TESTS.zip \
  && mkdir /opt/wildfly-for-tests \
  && unzip /tmp/wildfly-${WILDFLY_VERSION}.Final.FOR-TESTS.zip -d /opt/wildfly-for-tests/ \
  && chown -R silveruser:users /opt/wildfly-for-tests/ \
  && sed -i 's/\/home\/miguel\/tmp/\/opt\/wildfly-for-tests/g' /opt/wildfly-for-tests/wildfly-${WILDFLY_VERSION}.Final/standalone/configuration/standalone-full.xml \
  && echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen \
  && echo "fr_FR.UTF-8 UTF-8" >> /etc/locale.gen \
  && echo "de_DE.UTF-8 UTF-8" >> /etc/locale.gen \
  && locale-gen \
  && update-locale LANG=${DEFAULT_LOCALE} LANGUAGE=${DEFAULT_LOCALE} LC_ALL=${DEFAULT_LOCALE} \
  && ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone \
  && dpkg-reconfigure --frontend noninteractive tzdata

COPY src/inputrc /home/silveruser/.inputrc
COPY src/bash_aliases /home/silveruser/.bash_aliases
COPY src/settings.xml /home/silveruser/.m2/
COPY src/git_completion_profile /home/silveruser/.git_completion_profile
COPY src/wildfly /home/silveruser/bin/

RUN chown -R silveruser:silveruser /home/silveruser \
  && echo "if [ -f .git_completion_profile ]; then\n  . ~/.git_completion_profile\nfi" >> /home/silveruser/.bashrc

ENV LANG=${DEFAULT_LOCALE}
ENV LANGUAGE=${DEFAULT_LOCALE}
ENV LC_ALL=${DEFAULT_LOCALE}
ENV MAVEN_HOME=/usr/share/maven
ENV JAVA_HOME=/usr/lib/jvm/java-${JAVA_VERSION}-openjdk-amd64
ENV GROOVY_HOME=/opt/groovy-${GROOVY_VERSION}

# By default, the build will be done in the default user's home directory
USER silveruser
WORKDIR /home/silveruser

# The GPG and SSL keys to use for respectively signing and then deploying the built artifact to
# our Nexus server have to to be provided by an outside directory; therefore the below definition
# of volumes.
# WARNING: You have to link also two files in order to be able to deploy the build results and to
# push commits:
# - /home/silveruser/.m2/settings.xml and /home/silveruser/.m2/settings-security.xml files with your
# own in order to sign and to deploy the artifact with Maven. In these files the GPG key, the SSL
# passphrase as well as the remote servers must be defined.
# - /home/silveruser/.m2/.gitconfig file with your own in order to be able to push any commits.
VOLUME ["/home/silveruser/.ssh", "/home/silveruser/.gnupg"]