# CI job image for the Gitea Actions runners.
#
# JS actions (actions/checkout, docker/build-push-action) execute INSIDE the
# job container and need node; builds talk to the runner's daemon through the
# mounted /var/run/docker.sock, so this image needs the docker CLI + buildx
# but no daemon. Baking them in means jobs never download binaries at runtime:
# download.docker.com and github.com releases are unreachable (connection
# reset) from the cluster's network.
#
# Tagged as src.panahifar.ir/ahp/act-job:20 (node 20 / bookworm).
FROM node:20-bookworm

COPY --from=docker:27-cli /usr/local/bin/docker /usr/local/bin/docker
COPY --from=docker:27-cli /usr/local/libexec/docker/cli-plugins/docker-buildx /usr/local/libexec/docker/cli-plugins/docker-buildx