FROM registry.access.redhat.com/ubi9/ubi-minimal AS curl-builder
RUN microdnf install -y curl-minimal && microdnf clean all \
 && mkdir -p /out/etc/pki /out/etc \
 && install -D -m 0755 /usr/bin/curl /out/usr/bin/curl \
 && for lib in $(ldd /usr/bin/curl | awk '/=>/ {print $3}' | sort -u); do \
      install -D -m 0755 "$lib" "/out$lib"; \
    done \
 && cp -rP /etc/pki/ca-trust /out/etc/pki/ \
 && cp -rP /etc/ssl /out/etc/

FROM quay.io/quarkus/quarkus-micro-image:2.0
SHELL ["/usr/bin/sh", "-c"]
WORKDIR /work/
COPY build-output/shot-crafter-calculator-1.0.0-runner /work/application
COPY --from=curl-builder /out/ /

RUN chmod 775 /work /work/application \
 && chown -R 1001 /work \
 && echo "securerandom.source=file:/dev/urandom" >> /work/application

EXPOSE 8080
USER 1001

ENTRYPOINT ["./application"]