FROM harbor.cta-observatory.org/proxy_cache/almalinux:9

ARG CTADIRAC_VERSION="3.0.14"
ARG WEB_APP_DIRAC_VERSION="6.0.1"
ARG USERID=1000
ARG GROUPID=1000

RUN dnf install -y procps-ng psmisc openssh-clients iptables-services bzip2 git \
  https://diracproject.web.cern.ch/diracproject/rpm/runit-2.1.2-2.el9.x86_64.rpm \
  && dnf clean all -y

COPY ./runsvdir-start.service /usr/lib/systemd/system/runsvdir-start.service
RUN systemctl enable runsvdir-start

RUN \
  if getent group ${GROUPID}; then \
    groupmod --new-name dirac $(getent group ${GROUPID} | cut -d: -f1); \
  else \
    groupadd --gid ${GROUPID} dirac; \
  fi\
  && adduser --uid ${USERID} --gid dirac -s /bin/bash -d /home/dirac dirac

RUN mkdir -p /opt/dirac/etc/grid-security/certificates && chown -R dirac:dirac /opt/dirac \
  && mkdir -p /etc/grid-security/certificates && chown -R dirac:dirac /etc/grid-security

# run everything here as dirac user to get correct permissions
USER dirac

# install mamba and CTADIRAC
WORKDIR /home/dirac

ENV DIRAC_DIR=/opt/dirac
ENV DIRACOS="${DIRAC_DIR}/diracos"
ENV PATH="${DIRACOS}/bin:${DIRAC_DIR}/.local/bin:$PATH"

RUN mkdir -p "${DIRAC_DIR}/.local/bin" \
  && curl --proto "=https" -sSfL https://micro.mamba.pm/api/micromamba/linux-64/latest | tar -xvj -C "${DIRAC_DIR}/.local/bin" --strip-components=1 bin/micromamba  \
  && micromamba create -y -p "${DIRACOS}" python=3.12 \
  -c conda-forge dirac-grid 'diracx-api<0.2.0' 'diracx-core<0.2.0' 'diracx-db<0.2.0' \
  'mysqlclient<2.1' 'mysql-client' 'python-gfal2>1.13.0' 'setuptools<82' \
  -c diracgrid 'm2crypto>0.42' 'tornado_m2crypto>0.1.3' \
  && ${DIRACOS}/bin/pip install --no-cache-dir CTADIRAC[server]==${CTADIRAC_VERSION} \
  WebAppDIRAC[server]==${WEB_APP_DIRAC_VERSION} diracx-cli

RUN mkdir -p /opt/dirac/etc/grid-security/certificates \
  && mkdir -p /home/dirac/.ssh
COPY --chown=dirac:dirac ./runsvdir-start /opt/dirac/sbin/runsvdir-start

# switch back to root for running systemd
USER root
CMD ["/usr/sbin/init"]

ENV \
  DIRAC="${DIRACOS}" \
  DIRAC_ROOT_PATH="${DIRAC_DIR}" \
  CONDA_PREFIX="${DIRACOS}" \
  CONDOR_CONFIG="${DIRACOS}/etc/condor/condor_config" \
  DAVIX_DISABLE_REDIRECT_CACHING=1 \
  DAVIX_USE_LIBCURL=1 \
  GSETTINGS_SCHEMA_DIR="${DIRACOS}/share/glib-2.0/schemas" \
  MAMBA_ROOT_PREFIX="${DIRACOS}" \
  X509_CERT_DIR="/etc/grid-security/certificates" \
  X509_VOMSES="/etc/grid-security/vomses" \
  X509_VOMS_DIR="/etc/grid-security/vomsdir" \
  XML_CATALOG_FILES="file://${DIRACOS}/etc/xml/catalog file:///etc/xml/catalog"
