Dockerfile.ci-build-ubuntu

FROM ubuntu:26.04@sha256:f3d28607ddd78734bb7f71f117f3c6706c666b8b76cbff7c9ff6e5718d46ff64

WORKDIR /workspace

SHELL ["/bin/bash", "-o", "pipefail", "-c"]

ENV MISE_DATA_DIR="/mise"
ENV MISE_CACHE_DIR="/mise/cache"
ENV MISE_INSTALL_PATH="/usr/local/bin/mise"
ENV PATH="/mise/shims:/usr/local/bin:/usr/bin:$PATH"

# Install build dependencies
RUN apt-get update && \
    apt-get install -y --no-install-recommends \
        build-essential \
        ca-certificates \
        curl \
        dpkg \
        dpkg-dev \
        elfutils \
        fakeroot \
        flatpak \
        flatpak-builder \
        gcc \
        git \
        libc6-dev \
        libfuse2 \
        libgtk-3-dev \
        libayatana-appindicator3-dev \
        libssl-dev \
        libx11-dev \
        libx11-xcb-dev \
        libxkbcommon-dev \
        libxkbcommon-x11-dev \
        libxtst-dev \
        ostree \
        pkg-config \
        rpm \
        sudo \
        unzip \
        wget \
        xorg-dev \
        xz-utils \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

# Install pinned runtimes from mise.toml.
COPY mise.toml ./
RUN curl https://mise.run | sh \
    && mise trust -a \
    && mise install

# Copy Go module files and download dependencies
COPY go.mod go.sum ./
RUN go mod download && go mod verify

# Install AppImageTool (pin to a specific version for reproducibility)
RUN wget -q https://github.com/AppImage/AppImageKit/releases/download/continuous/appimagetool-x86_64.AppImage -O /usr/local/bin/appimagetool \
    && chmod +x /usr/local/bin/appimagetool

# Create a non-root user for builds
RUN useradd -ms /bin/bash builduser && \
    echo 'builduser ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/builduser

# Entrypoint for CI
CMD ["bash"]