FROM scratch AS base
ARG ARCH=x86_64
ENV VERSION=1.21.2
ENV SRC_HASH=9560941a9d843c0243a71b17a7ac6fe31c7cebb5bce3983db79e52ae7e850491
ENV SRC_FILE=krb5-${VERSION}.tar.gz
ENV SRC_SITE=https://kerberos.org/dist/krb5/1.21/${SRC_FILE}

FROM base AS fetch
ADD --checksum=sha256:${SRC_HASH} ${SRC_SITE} ${SRC_FILE}

FROM fetch AS build
COPY --from=stagex/perl . /
COPY --from=stagex/bash . /
COPY --from=stagex/m4 . /
COPY --from=stagex/curl . /
COPY --from=stagex/linux-headers . /
COPY --from=stagex/util-linux . /
COPY --from=stagex/autoconf . /
COPY --from=stagex/automake . /
COPY --from=stagex/busybox . /
COPY --from=stagex/musl . /
COPY --from=stagex/gcc . /
COPY --from=stagex/binutils . /
COPY --from=stagex/make . /
COPY --from=stagex/e2fsprogs . /
COPY --from=stagex/python . /
COPY --from=stagex/openldap . /
COPY --from=stagex/openssl . /
COPY --from=stagex/groff . /
COPY --from=stagex/libevent . /
COPY --from=stagex/bison . /
COPY --from=stagex/libtool . /
COPY --from=stagex/libverto . /
COPY --from=stagex/pkgconf . /
RUN tar -xf $SRC_FILE
WORKDIR krb5-${VERSION}/src
RUN --network=none <<-EOF
	set -eux
	./configure \
		CPPFLAGS="-fPIC -I/usr/include/et" \
		WARN_CFLAGS= \
		--build=${ARCH}-linux-musl \
		--host=${ARCH}-linux-musl \
		--prefix=/usr \
		--localstatedir=/var/lib \
		--enable-shared \
		--disable-nls \
		--disable-static \
		--disable-rpath \
		--with-system-et \
		--with-system-ss \
		--with-system-verto \
		--without-tcl \
		--with-ldap
	make -j "$(nproc)"
EOF

FROM build AS install
RUN make DESTDIR=/rootfs install
RUN find /rootfs -exec touch -hcd "@0" "{}" +

FROM stagex/filesystem AS package
COPY --from=install /rootfs/. /