# syntax=docker/dockerfile:1

FROM golang:1.26.5-bookworm AS go-agent

ARG RMM_GOARCH=mipsle
ARG RMM_GOARM=7
ARG RMM_GOMIPS=softfloat
ARG RMM_GOAMD64=v1

WORKDIR /src

COPY go.mod go.sum ./
COPY agent/go agent/go

RUN export CGO_ENABLED=0 GOOS=linux GOARCH="${RMM_GOARCH}" \
    && case "${RMM_GOARCH}" in \
        arm) export GOARM="${RMM_GOARM}" ;; \
        mips|mipsle) export GOMIPS="${RMM_GOMIPS}" ;; \
        amd64) export GOAMD64="${RMM_GOAMD64}" ;; \
       esac \
    && mkdir /out \
    && go build -trimpath -ldflags="-s -w" \
        -o /out/rmm-agent ./agent/go/cmd/rmm-agent

FROM debian:bookworm-slim AS builder

ARG OPENWRT_SDK_URL="https://downloads.openwrt.org/releases/25.12.4/targets/ramips/mt7621/openwrt-sdk-25.12.4-ramips-mt7621_gcc-14.3.0_musl.Linux-x86_64.tar.zst"
ARG OPENWRT_SDK_SHA256="03f4766fcfbae86a814cbbf194226fa7e9ec66be2d4273bc1a0927a72a43a333"

RUN apt-get update \
    && DEBIAN_FRONTEND=noninteractive apt-get install --yes --no-install-recommends \
        build-essential \
        ca-certificates \
        curl \
        file \
        gawk \
        gettext \
        git \
        libncurses-dev \
        libssl-dev \
        perl \
        python3 \
        python3-setuptools \
        rsync \
        unzip \
        zstd \
    && rm -rf /var/lib/apt/lists/* \
    && useradd --create-home --uid 1000 builder

USER builder
WORKDIR /home/builder

RUN curl --fail --location --show-error --silent \
        --output openwrt-sdk.tar.zst "${OPENWRT_SDK_URL}" \
    && echo "${OPENWRT_SDK_SHA256}  openwrt-sdk.tar.zst" | sha256sum --check --strict \
    && mkdir sdk \
    && tar --zstd --extract --file openwrt-sdk.tar.zst --strip-components=1 --directory sdk \
    && rm openwrt-sdk.tar.zst

USER root

RUN apt-get update \
    && DEBIAN_FRONTEND=noninteractive apt-get install --yes --no-install-recommends wget \
    && rm -rf /var/lib/apt/lists/*

USER builder
WORKDIR /home/builder/sdk

RUN ./scripts/feeds update -a \
    && for package_name in \
        ca-bundle \
        ip-tiny \
        iwinfo \
        luci-base \
        mbedtls \
        openssh-client \
        openssh-keygen \
        ubus \
        uclient-fetch; \
       do \
        ./scripts/feeds install "${package_name}"; \
       done

COPY --chown=builder:builder agent/package/rmm-agent package/rmm-agent
COPY --chown=builder:builder agent/package/rmm-agent-go-production package/rmm-agent-go-production
COPY --from=go-agent --chown=builder:builder /out/rmm-agent package/rmm-agent-go-production/files/usr/bin/rmm-agent

RUN printf '%s\n' \
        '# CONFIG_ALL is not set' \
        '# CONFIG_ALL_KMODS is not set' \
        '# CONFIG_ALL_NONSHARED is not set' \
        'CONFIG_PACKAGE_libmbedtls=y' \
        'CONFIG_PACKAGE_libustream-mbedtls=y' \
        'CONFIG_PACKAGE_rmm-agent=m' \
        'CONFIG_PACKAGE_rmm-agent-go-production=m' \
        > .config \
    && make defconfig \
    && awk ' \
        /^CONFIG_PACKAGE_[^=]+=[ym]$/ { \
            split($0, parts, "="); \
            print "# " parts[1] " is not set"; \
            next; \
        } \
        { print; } \
       ' .config > .config.packages-pruned \
    && mv .config.packages-pruned .config \
    && printf '%s\n' \
        'CONFIG_PACKAGE_libmbedtls=y' \
        'CONFIG_PACKAGE_libustream-mbedtls=y' \
        'CONFIG_PACKAGE_rmm-agent=m' \
        'CONFIG_PACKAGE_rmm-agent-go-production=m' \
        >> .config \
    && make defconfig

RUN grep -E '^CONFIG_PACKAGE_(libmbedtls|libustream-mbedtls)=' .config \
    && make -j"$(nproc)" package/feeds/base/mbedtls/compile \
    && make -j"$(nproc)" package/feeds/base/ustream-ssl/compile

RUN make -j"$(nproc)" \
        package/rmm-agent/compile \
        package/rmm-agent-go-production/compile

COPY --chown=builder:builder agent/package/luci-app-rmm-agent package/luci-app-rmm-agent

RUN rm -rf tmp/info \
    && rm -f \
        tmp/.config-package.in \
        tmp/.packagedeps \
        tmp/.packageinfo

RUN printf '%s\n' 'CONFIG_PACKAGE_luci-app-rmm-agent=m' >> .config \
    && make defconfig

RUN make -j1 package/luci-app-rmm-agent/compile V=s

RUN mkdir -p /home/builder/artifacts \
    && find bin -type f \
        \( -name 'luci-app-rmm-agent*.apk' \
           -o -name 'luci-app-rmm-agent*.ipk' \
           -o -name 'rmm-agent*.apk' \
           -o -name 'rmm-agent*.ipk' \) \
        -exec cp '{}' /home/builder/artifacts/ \; \
    && test -n "$(find /home/builder/artifacts -maxdepth 1 -type f \( -name '*.apk' -o -name '*.ipk' \) -print -quit)" \
    && cd /home/builder/artifacts \
    && find . -maxdepth 1 -type f \( -name '*.apk' -o -name '*.ipk' \) -print \
        | LC_ALL=C sort \
        | xargs sha256sum > SHA256SUMS

FROM scratch AS artifacts

COPY --from=builder /home/builder/artifacts/ /