FROM node:lts-alpine

RUN apk add --no-cache ca-certificates curl podman kubectl kustomize git bash openssl buildah && \
    echo 'rc_cgroup_mode="unified"' >> /etc/rc.conf && \
    curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 && \
    curl -fsSL https://opencode.ai/install | bash

VOLUME /var/lib/containers