# Copyright 2019 Nokia
# 
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
# 
#     http://www.apache.org/licenses/LICENSE-2.0
# 
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

FROM alpine:3.9
MAINTAINER Levente Kale <levente.kale@nokia.com>

ARG NETWATCHER
ENV NETWATCHER_VERSION=$NETWATCHER
ENV GOPATH /go
ENV PATH $GOPATH/bin:/usr/local/go/bin:$PATH
ENV CGO_ENABLED=0
ENV GOOS=linux
ARG code_generator_version="kubernetes-1.13.4"

WORKDIR /

RUN mkdir -p $GOPATH/bin \
&&  mkdir -p $GOPATH/src

RUN apk add --no-cache curl libcap iputils

RUN apk add --no-cache --virtual .tools ca-certificates gcc musl-dev go glide git \
&&  mkdir -p $GOPATH/src/github.com/nokia \
&&  git clone https://github.com/nokia/danm.git $GOPATH/src/github.com/nokia/danm \
&&  cd $GOPATH/src/github.com/nokia/danm \
&&  git fetch --tags \
&&  git checkout ${NETWATCHER_VERSION} \
&&  glide install --strip-vendor \
&&  go get -d github.com/vishvananda/netlink \
&&  go get github.com/containernetworking/plugins/pkg/ns \
&&  go get github.com/golang/groupcache/lru \
&&  rm -rf $GOPATH/src/k8s.io/code-generator \
&&  git clone -b ${code_generator_version} --depth 1 https://github.com/kubernetes/code-generator.git $GOPATH/src/k8s.io/code-generator \
&&  go install k8s.io/code-generator/cmd/deepcopy-gen \
&&  go install k8s.io/code-generator/cmd/client-gen \
&&  go install k8s.io/code-generator/cmd/lister-gen \
&&  go install k8s.io/code-generator/cmd/informer-gen \
&&  deepcopy-gen --alsologtostderr --input-dirs github.com/nokia/danm/crd/apis/danm/v1 -O zz_generated.deepcopy --bounding-dirs github.com/nokia/danm/crd/apis \
&&  client-gen --alsologtostderr --clientset-name versioned --input-base "" --input github.com/nokia/danm/crd/apis/danm/v1 --clientset-path github.com/nokia/danm/crd/client/clientset \
&&  lister-gen --alsologtostderr --input-dirs github.com/nokia/danm/crd/apis/danm/v1 --output-package github.com/nokia/danm/crd/client/listers \
&&  informer-gen --alsologtostderr --input-dirs github.com/nokia/danm/crd/apis/danm/v1 --versioned-clientset-package github.com/nokia/danm/crd/client/clientset/versioned --listers-package github.com/nokia/danm/crd/client/listers --output-package github.com/nokia/danm/crd/client/informers \
&&  go install -a -ldflags '-extldflags "-static"' github.com/nokia/danm/cmd/netwatcher \
&&  cp $GOPATH/bin/netwatcher /usr/local/bin/netwatcher \
&&  rm -rf $GOPATH/src \
&&  rm -rf $GOPATH/bin \
&&  apk del .tools \
&&  rm -rf /var/cache/apk/* \
&&  rm -rf /var/lib/apt/lists/* \
&&  rm -rf /tmp/* \
&&  rm -rf ~/.glide

RUN adduser -u 147 -D -H -s /sbin/nologin danm \
&&  chown root:danm /usr/local/bin/netwatcher \
&&  chmod 750 /usr/local/bin/netwatcher \
&&  setcap cap_sys_ptrace,cap_sys_admin,cap_net_admin=eip /usr/local/bin/netwatcher \
&&  setcap cap_net_raw=eip /usr/sbin/arping

USER danm

ENTRYPOINT ["/usr/local/bin/netwatcher"]