# Container Name:: build-node
# Copyright (c) 2017 Curse, All Rights Reserved.
#
# Best practices and documentation can be found here:
# https://docs.docker.com/engine/userguide/eng-image/dockerfile_best-practices/
# https://docs.docker.com/engine/reference/builder/

FROM ecr.clients.internal.justin.tv/build-base:2.0.1

RUN groupadd --gid 1000 node \
  && useradd --uid 1000 --gid node --shell /bin/bash --create-home node

# gpg keys listed at https://github.com/nodejs/node#release-team
ARG SIGNING_KEYS="4ED778F539E3634C779C87C6D7062848A1AB005C \
                  94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
                  1C050899334244A8AF75E53792EF661D867B9DFA \
                  71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
                  8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 \
                  C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
                  C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C \
                  DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
                  A48C2BEE680E841632CD4E44F07496B3EB3C1762 \
                  108F52B48DB57BB0CC439B2997B01419BD92F80A \
                  B9E2F5981AA6E0CD28160D9FF13993A75599653C"

RUN mkdir ~/.gnupg &&\
    echo "disable-ipv6" >> ~/.gnupg/dirmngr.conf &&\
    chmod 700 ~/.gnupg

RUN gpg --batch --keyserver hkps.pool.sks-keyservers.net --recv-keys $SIGNING_KEYS || \
    gpg --batch --keyserver na.pool.sks-keyservers.net --recv-keys $SIGNING_KEYS || \
    gpg --batch --keyserver ipv4.pool.sks-keyservers.net --recv-keys $SIGNING_KEYS || \
    gpg --batch --keyserver pool.sks-keyservers.net --recv-keys $SIGNING_KEYS || \
    gpg --batch --keyserver 80.sks-keyservers.net:80 --recv-keys $SIGNING_KEYS

ENV NPM_CONFIG_LOGLEVEL info
ENV NODE_VERSION 14.15.0

RUN curl -SLO "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-x64.tar.xz" \
  && curl -SLO "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" \
  && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \
  && grep " node-v$NODE_VERSION-linux-x64.tar.xz\$" SHASUMS256.txt | sha256sum -c - \
  && tar -xJf "node-v$NODE_VERSION-linux-x64.tar.xz" -C /usr/local --strip-components=1 \
  && rm "node-v$NODE_VERSION-linux-x64.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
  && ln -s /usr/local/bin/node /usr/local/bin/nodejs

ENV YARN_VERSION 1.19.1

RUN set -ex \
  && for key in \
    6A010C5166006599AA17F08146C2130DFD2497F5 \
  ; do \
    gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" || \
    gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
    gpg --keyserver keyserver.pgp.com --recv-keys "$key" ; \
  done \
  && curl -fSL -o yarn.js "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-legacy-$YARN_VERSION.js" \
  && curl -fSL -o yarn.js.asc "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-legacy-$YARN_VERSION.js.asc" \
  && gpg --batch --verify yarn.js.asc yarn.js \
  && rm yarn.js.asc \
  && mv yarn.js /usr/local/bin/yarn \
  && chmod +x /usr/local/bin/yarn

CMD [ "node" ]
