FROM docker:20.10.23-dind-rootless
# This is an alpine-based image

USER root
RUN true && \
    apk add --no-cache curl && \
    apkArch="$(arch)" && \
    if [ $apkArch = "x86_64" ]; then apkArch=amd64; fi && \
    curl -sLO https://github.com/sigstore/rekor/releases/download/v1.0.1/rekor-cli-linux-${apkArch} && \
    mv rekor-cli-linux-${apkArch} /usr/bin/rekor && \
    chmod 755 /usr/bin/rekor && \
    addgroup -g 998 docker && \
    addgroup rootless docker && \
    true

COPY entrypoint.sh /

USER rootless
ENTRYPOINT ["/entrypoint.sh"]