Dockerfile

# Build the manager binary
FROM golang:1.25.8 AS builder
ARG TARGETOS
ARG TARGETARCH

WORKDIR /workspace
# Copy the Go Modules manifests
COPY go.mod go.mod
COPY go.sum go.sum
# cache deps before building and copying source so that we don't need to re-download as much
# and so that source changes don't invalidate our downloaded layer
RUN go mod download

# Copy the go source
COPY cmd/main.go cmd/main.go
COPY internal/ internal/
COPY pkg/ pkg/

# Build
# the GOARCH has no default value to allow the binary to be built according to the host where the command
# was called. For example, if we call make docker-build in a local env which has the Apple Silicon M1 SO
# the docker BUILDPLATFORM arg will be linux/arm64 when for Apple x86 it will be linux/amd64. Therefore,
# by leaving it empty we can ensure that the container and binary shipped on it will have the same platform.
RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -a -o manager cmd/main.go

# Use CentOS Stream 9 minimal as base image to include qemu-img for VM disk restore.
# qemu-img is required by the datamover download path to reconstruct qcow2
# incremental chains into raw disk images (issue #73).
# UBI9 repos (BaseOS, AppStream, CodeReady) do not include qemu-img.
# CentOS Stream 9 has it in AppStream. For downstream Konflux builds,
# UBI9 + full RHEL repos work — see:
# https://github.com/migtools/oadp-vm-file-restore/blob/oadp-dev/containers/oadp-vmfr-access/konflux.Dockerfile
FROM quay.io/centos/centos:stream9-minimal
RUN microdnf install -y qemu-img && microdnf clean all
WORKDIR /
COPY --from=builder /workspace/manager .
USER 65532:65532

ENTRYPOINT ["/manager"]