# Copyright (C) 2020  Matthew "strager" Glazar
# See end of file for extended copyright information.

FROM archlinux:base

RUN pacman --sync --refresh --sysupgrade --noconfirm binutils gnupg pacman-contrib sudo

RUN useradd --create-home --shell /bin/sh qljs-builder && \
    printf 'qljs-builder ALL=(ALL) NOPASSWD: ALL\n' >/etc/sudoers.d/qljs-builder
USER qljs-builder

# If this fails, you need to follow the quick-lint-js.gpg.key symlink:
# $ tar ch -C dist/arch/ . | docker build -
COPY quick-lint-js.gpg.key /tmp/quick-lint-js.gpg.key
RUN gpg --import /tmp/quick-lint-js.gpg.key
# HACK(strager): For some reason, if the lock file remains, using
# GnuPG to verify signatures hangs. Avoid these hangs by deleting the
# lock file now.
RUN gpgconf --kill gpg-agent && \
    rm -f ~/.gnupg/public-keys.d/pubring.db.lock

# quick-lint-js finds bugs in JavaScript programs.
# Copyright (C) 2020  Matthew "strager" Glazar
#
# This file is part of quick-lint-js.
#
# quick-lint-js is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# quick-lint-js is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with quick-lint-js.  If not, see <https://www.gnu.org/licenses/>.
