Dockerfile

FROM docker.io/node:24-bookworm-slim AS web-builder
WORKDIR /web
COPY cmd/sshpiperd-webadmin/internal/httpapi/web/package.json cmd/sshpiperd-webadmin/internal/httpapi/web/package-lock.json ./
RUN npm ci
COPY cmd/sshpiperd-webadmin/internal/httpapi/web/ ./
RUN npm run build


FROM docker.io/golang:1.26-bookworm AS builder
ARG VER=devel
ARG BUILDTAGS
ARG EXTERNAL=0
ENV CGO_ENABLED=0
WORKDIR /src

RUN \
  --mount=target=/src,type=bind,source=. \
  --mount=from=web-builder,source=/web/dist,target=/src/cmd/sshpiperd-webadmin/internal/httpapi/web/dist \
  --mount=type=cache,target=/root/.cache/go-build \
  <<HEREDOC
    # Create directories required for `cp` / `go build -o`:
    mkdir -p /sshpiperd/plugins

    if [ "${EXTERNAL}" = "1" ]; then
      cp sshpiperd /sshpiperd
      cp -r plugins /sshpiperd
      # sshpiperd-webadmin is only built for the "full" image; copy it if
      # present so the slim image is unchanged.
      if [ -f sshpiperd-webadmin ]; then
        cp sshpiperd-webadmin /sshpiperd
      fi
      # sshpiperd-admin is the CLI counterpart to sshpiperd-webadmin and
      # is also "full"-only; copy it when goreleaser produced it.
      if [ -f sshpiperd-admin ]; then
        cp sshpiperd-admin /sshpiperd
      fi
    else
      go build -o /sshpiperd/sshpiperd-admin -ldflags "-X main.mainver=${VER}" ./cmd/sshpiperd-admin
      go build -o /sshpiperd/sshpiperd-webadmin -ldflags "-X main.mainver=${VER}" ./cmd/sshpiperd-webadmin
      (cd cmd/sshpiperd && go build -o /sshpiperd/sshpiperd -ldflags "-X main.mainver=${VER}" .)
      go build -o /sshpiperd/plugins -tags "${BUILDTAGS}" ./plugin/... ./e2e/testplugin/...
    fi
HEREDOC


FROM builder AS testrunner
COPY --from=farmer1992/openssh-static:V_9_8_P1 /usr/bin/ssh /usr/bin/ssh-9.8p1
COPY --from=farmer1992/openssh-static:V_8_0_P1 /usr/bin/ssh /usr/bin/ssh-8.0p1


FROM docker.io/busybox AS sshpiperd
ARG USERID=1000
ARG GROUPID=1000
RUN <<HEREDOC
  # Add a non-root system (-S) user/group to run `sshpiperd` with (final arg is group/user name):
  addgroup -S -g "${GROUPID}" sshpiperd 
  adduser  -S -u "${USERID}" -G sshpiperd sshpiperd

  # Support `SSHPIPERD_SERVER_KEY_GENERATE_MODE=notexist` to create host key at `/etc/ssh`:
  mkdir /etc/ssh/
  chown -R "${USERID}:${GROUPID}" /etc/ssh/
HEREDOC
COPY --from=builder --chown=${USERID} /sshpiperd/ /sshpiperd

# Runtime setup:
ENV SSHPIPERD_SERVER_KEY_GENERATE_MODE=notexist PLUGIN=workingdir
ENTRYPOINT ["/sshpiperd/sshpiperd"]

USER ${USERID}:${GROUPID}
EXPOSE 2222