FROM scratch as base
ENV VERSION=0.2.0
ENV SRC_HASH=80690d0d702b997aeb1ae6d6a7dc8ea8800d64c7307c004209387947bbd33aa2
ENV SRC_FILE=v${VERSION}.tar.gz
ENV SRC_SITE=https://github.com/joshdk/ksops-dry-run/archive/refs/tags/${SRC_FILE}
ENV GOPATH=/cache/go
ENV GOCACHE=/cache/
ENV GOWORK=off
ENV GOPROXY=https://proxy.golang.org,direct
ENV GOSUMDB=sum.golang.org
ENV CGO_ENABLED=0
ENV GOHOSTOS=linux
ENV GOHOSTARCH=amd64
ENV GO11MODULE=off

FROM base as fetch
COPY --from=stagex/busybox . /
COPY --from=stagex/go . /
COPY --from=stagex/ca-certificates . /
ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} .
RUN tar -xvf ${SRC_FILE}
WORKDIR ksops-dry-run-${VERSION}
RUN go get ./...

FROM fetch as build
RUN --network=none \
    go build \
        -v \
        -trimpath \
        -ldflags "-s -w -X main.version=${VERSION} -buildid="

from build as install
RUN <<-EOF
    mkdir -p /rootfs/usr/lib/kustomize/plugins/viduct.ai/v1/ksops
    cp ksops-dry-run /rootfs/usr/lib/kustomize/plugins/viduct.ai/v1/ksops/ksops
    find /rootfs -exec touch -hcd "@0" "{}" +
EOF

FROM stagex/filesystem as package
COPY --from=install /rootfs/./ /