ARG TARGETARCH

# --- Single builder (Java bytecode is platform-independent) ---
FROM debian:trixie-slim AS builder

ARG ANT_VERSION="1.10.17"

WORKDIR /tmp/build
COPY --exclude=docker . .

RUN apt-get update \
    && apt-get install -y \
        ca-certificates \
        curl \
        gettext \
        tar \
        bzip2 \
        git \
        openjdk-21-jdk-headless \
    && echo "javac.version=21" >> override.properties \
    && echo "javac.release=21" >> override.properties \
    && echo "build.built-by=Docker" >> override.properties \
    && echo "build.revision=$(git rev-parse HEAD)" >> override.properties \
    && curl -fsSL https://dlcdn.apache.org/ant/binaries/apache-ant-${ANT_VERSION}-bin.tar.bz2 | tar -jxf - -C /opt \
    && /opt/apache-ant-${ANT_VERSION}/bin/ant preppkg-linux-only \
    && rm -rf pkg-temp/osid pkg-temp/lib/wrapper pkg-temp/lib/wrapper.* \
    && rm -rf /var/lib/apt/lists/*

COPY docker docker

# --- Runtime stages per architecture ---
# Note:
# Separate runtime stages are maintained for each supported
# architecture to allow future architecture-specific changes.
# This does not increase the size of the final images.
FROM debian:trixie-slim AS runtime-amd64
RUN apt-get update && apt-get install -y \
        openjdk-21-jre-headless \
        fonts-dejavu \
        iproute2 \
    && apt-get clean && rm -rf /var/lib/apt/lists/*

FROM debian:trixie-slim AS runtime-arm64
RUN apt-get update && apt-get install -y \
        openjdk-21-jre-headless \
        fonts-dejavu \
        iproute2 \
    && apt-get clean && rm -rf /var/lib/apt/lists/*

FROM debian:trixie-slim AS runtime-arm
RUN apt-get update && apt-get install -y \
        openjdk-21-jre-headless \
        fonts-dejavu \
        iproute2 \
    && apt-get clean && rm -rf /var/lib/apt/lists/*

# Select runtime based on target architecture
FROM runtime-${TARGETARCH}

ENV I2P_DIR_BASE="/i2p"
ENV I2P_DIR_CONFIG="${I2P_DIR_BASE}/.i2p"
ENV I2PSNARK_DIR="/i2psnark"
ENV EEPSITE_DIR="${I2P_DIR_CONFIG}/eepsite"

WORKDIR ${I2P_DIR_BASE}
COPY --from=builder /tmp/build/pkg-temp .

COPY docker/rootfs/ /
RUN chmod +x /entrypoint/entrypoint.sh

# Mount home and snark
VOLUME ["${I2P_DIR_CONFIG}"]
VOLUME ["${I2PSNARK_DIR}"]

EXPOSE 7654 7656 7657 7658 4444 6668 7659 7660 7670 4445 12345

# Metadata.
LABEL \
      org.label-schema.name="i2p" \
      org.label-schema.description="Docker container for I2P" \
      org.label-schema.version="1.0" \
      org.label-schema.vcs-url="https://github.com/i2p/i2p.i2p" \
      org.label-schema.schema-version="1.0"

RUN groupadd -r i2p && useradd -r -g i2p -d /i2p -s /sbin/nologin i2p \
 && chown -R i2p:i2p /i2p

ENTRYPOINT ["/entrypoint/entrypoint.sh"]