Dockerfile

FROM debian:bookworm

ENV DEBIAN_FRONTEND=noninteractive

# Install base system packages
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    wget \
    gnupg \
    git \
    git-lfs \
    openssh-client \
    sudo \
    # Utilities used by workflows
    jq \
    tar \
    gzip \
    xz-utils \
    unzip \
    zip \
    # Build toolchain (Rust, C/C++ projects)
    build-essential \
    pkg-config \
    libssl-dev \
    libudev-dev \
    # Container image builds
    buildah \
    fuse-overlayfs \
    && rm -rf /var/lib/apt/lists/*

# Install Node.js 24 via NodeSource
RUN curl -fsSL https://deb.nodesource.com/setup_24.x | bash - \
    && apt-get install -y --no-install-recommends nodejs \
    && rm -rf /var/lib/apt/lists/*

# Configure buildah for containerized usage (vfs driver, no overlay-on-overlay)
RUN mkdir -p /etc/containers /var/lib/containers/storage /run/containers/storage \
    && printf '[storage]\ndriver = "vfs"\nrunroot = "/run/containers/storage"\ngraphroot = "/var/lib/containers/storage"\n' \
       > /etc/containers/storage.conf

# Allow unqualified image names to resolve (v2 registries.conf format)
RUN printf 'unqualified-search-registries = ["docker.io"]\n' \
       > /etc/containers/registries.conf