# hadolint ignore=DL3007
FROM registry.shore.co.il/toolbx:latest
SHELL ["/bin/bash", "-o", "pipefail", "-xc"]
# hadolint ignore=DL3008,DL3013,DL3016,DL3027,DL4001
RUN apt-get update && \
    curl --location --silent --fail --show-error https://github.com/kubernetes/kompose/releases/download/v1.26.1/kompose_1.26.1_amd64.deb --output /tmp/kompose.deb && \
    curl --location --silent --fail --show-error https://s3.amazonaws.com/session-manager-downloads/plugin/latest/ubuntu_64bit/session-manager-plugin.deb --output /tmp/session-manager-plugin.deb && \
    DEBIAN_FRONTEND=noninteractive apt-get install --yes --no-install-recommends \
        /tmp/kompose.deb \
        /tmp/session-manager-plugin.deb \
        adb \
        apache2-utils \
        aspell-he \
        at \
        aws-vault \
        bash-completion \
        bats \
        bc \
        build-essential \
        bundler \
        bzr \
        ca-certificates \
        clickhouse-client \
        cmake \
        composer \
        consul \
        curl \
        dbus-x11 \
        default-jdk-headless \
        devscripts \
        direnv \
        dirmngr \
        dnsutils \
        docker.io \
        dos2unix \
        easy-rsa \
        entr \
        expect \
        flatpak \
        flatpak-builder \
        flatpak-xdg-utils \
        fuse3 \
        gdal-bin \
        gettext-base \
        gh \
        gir1.2-glib-2.0 \
        gir1.2-ostree-1.0 \
        git \
        gnupg \
        go-md2man \
        gobjc++ \
        golang \
        gomplate \
        google-cloud-cli-skaffold \
        google-cloud-sdk \
        gpgv \
        helm \
        hugo \
        hunspell \
        hunspell-he \
        hyphen-en-us \
        ipcalc \
        iproute2 \
        iputils-ping \
        iputils-tracepath \
        jp \
        jq \
        keyutils \
        kops \
        krb5-config \
        kubectl \
        ldap-utils \
        less \
        libbz2-dev \
        libcairo2-dev \
        libcap2-bin \
        libdbus-1-dev \
        libgirepository1.0-dev \
        liblcms2-dev \
        libldap2-dev \
        liblzma-dev \
        libmariadb-dev \
        libncursesw5-dev \
        libnotify-bin \
        libpq-dev \
        libproj-dev \
        libprotobuf-dev \
        libreadline-dev \
        libsasl2-dev \
        libsecret-tools \
        libsqlite3-dev \
        libwebp-dev \
        libxml2-dev \
        libxmlsec1-dev \
        libyaml-dev \
        llvm \
        lsof \
        lz4 \
        man-db \
        mariadb-client \
        mat2 \
        mercurial \
        meson \
        minikube \
        mongodb-database-tools \
        mythes-en-us \
        netcat-openbsd \
        nodejs \
        npm \
        ostree \
        packer \
        php-cli \
        plocate \
        podman \
        postgresql-client \
        protobuf-compiler \
        python3-dev \
        python3-pip \
        python3-venv \
        rclone \
        redis-tools \
        rename \
        reprepro \
        rsync \
        ruby-dev \
        sharutils \
        shellcheck \
        signify-openbsd \
        skopeo \
        sops \
        subversion \
        sudo \
        swaks \
        systemd \
        task-english \
        task-hebrew \
        task-ssh-server \
        telnet \
        terraform \
        time \
        tk-dev \
        tmux \
        tnftp \
        ttyrec \
        udftools \
        unzip \
        vagrant \
        vault \
        vcdimager \
        vim-nox \
        w3m-img \
        wget \
        whois \
        xdg-user-dirs \
        zip \
    && \
    sed -i 's/# en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/; s/# en_IL UTF-8/en_IL UTF-8/; s/# he_IL.UTF-8 UTF-8/he_IL.UTF-8 UTF-8/;' /etc/locale.gen && \
    locale-gen && \
    export PIP_CONSTRAINT=/tmp/constraint.txt && \
    echo 'resolvelib==0.5.4' > "$PIP_CONSTRAINT" && \
    echo 'Cython < 3.0' >> "$PIP_CONSTRAINT" && \
    python3 -m pip install --no-cache-dir --break-system-packages \
        https://github.com/aws/aws-cli/archive/refs/heads/v2.zip \
        Glances \
        PyGObject \
        PyMySQL \
        ansible \
        ansible-runner \
        awslogs \
        bcrypt \
        black \
        boto \
        boto3 \
        bump2version \
        check-manifest \
        colorama \
        cookiecutter \
        cryptography \
        dnspython \
        docker \
        fabric \
        flit \
        github3.py \
        gunicorn \
        hashin \
        httpbin \
        httpie \
        identify \
        importlab \
        invoke \
        iredis \
        khal \
        khard \
        litecli \
        magic-wormhole \
        mycli \
        netaddr \
        opensearch-py[async] \
        paramiko \
        parse \
        passhole \
        passlib \
        pdm \
        pgcli \
        pip-tools \
        pipenv \
        poetry \
        pre-commit \
        protobuf \
        psycopg2 \
        pur \
        pygments \
        pymongo \
        pyopenssl \
        'python-gitlab[autocompletion,yaml]' \
        python-hcl2 \
        pyxdg \
        redis \
        remarshal \
        requests \
        rich-cli \
        sh \
        sqlite-utils \
        template \
        terraformation \
        todoman \
        tox \
        transmission-rpc \
        ziglang \
    && \
    echo pdm-version | xargs -tn1 pdm plugin add --pip-args=--break-system-packages && \
    npm install --global \
        corepack \
        @playwright/test \
    && \
    export GOPATH=/usr/local/lib/go && \
    export PATH="$GOPATH/bin:$PATH" && \
    mkdir "$GOPATH" && \
    export GO111MODULE=on && \
    go install github.com/giantswarm/semver-bump@latest && \
    go install github.com/nishanths/license/v5@latest && \
    go install github.com/spelufo/on-change@latest && \
    go install github.com/kaorimatz/mysqldump-loader@v0.4.1 && \
    go install github.com/lucagrulla/cw@latest && \
    go install github.com/kvz/json2hcl@latest && \
    go install github.com/hashicorp/envconsul@latest && \
    go install sigs.k8s.io/kustomize/kustomize/v4@latest && \
    go install github.com/1player/host-spawn@latest && \
    wget https://raw.githubusercontent.com/rabbitmq/rabbitmq-server/v3.8.16/deps/rabbitmq_management/bin/rabbitmqadmin -qO /usr/local/bin/rabbitmqadmin && \
    chmod +x /usr/local/bin/rabbitmqadmin && \
    wget https://github.com/docker/compose/releases/download/v2.14.0/docker-compose-linux-x86_64 -qO /usr/local/bin/docker-compose && \
    chmod +x /usr/local/bin/docker-compose && \
    mkdir /usr/local/share/bfg && \
    wget 'https://search.maven.org/remote_content?g=com.madgag&a=bfg&v=LATEST' -qO /usr/local/share/bfg/bfg.jar && \
    curl --silent --location --fail --show-error "https://github.com/genuinetools/reg/releases/download/v0.16.1/reg-$(go env GOOS)-$(go env GOARCH)" --output /tmp/reg && \
    install -o root -g root -m 0755 /tmp/reg /usr/local/bin/reg && \
    curl --silent --location --fail --show-error "https://github.com/rancher/rke/releases/download/v1.3.8/rke_$(go env GOOS)-$(go env GOARCH)" --output /tmp/rke && \
    install -o root -g root -m 0755 /tmp/rke /usr/local/bin/rke && \
    curl --silent --location --fail --show-error https://github.com/SelfAdjointOperator/better-adb-sync/archive/refs/heads/master.tar.gz | tar -zxC /opt/ && \
    ln --symbolic /opt/better-adb-sync-master/src/adbsync.py /usr/local/bin/adbsync && \
    _PIPENV_COMPLETE=bash_source pipenv > /etc/bash_completion.d/pipenv && \
    rabbitmqadmin --bash-completion  > /etc/bash_completion.d/rabbitmqadmin && \
    #poetry completions bash > /etc/bash_completion.d/poetry && \
    register-python-argcomplete gitlab > /etc/bash_completion.d/gitlab && \
    invoke --print-completion-script bash > /etc/bash_completion.d/invoke && \
    fab --print-completion-script bash > /etc/bash_completion.d/fabric && \
    helm completion bash > /etc/bash_completion.d/helm && \
    semver-bump completion bash > /etc/bash_completion.d/semver-bump && \
    pdm completion bash > /etc/bash_completion.d/pdm && \
    kompose completion bash > /etc/bash_completion.d/kompose && \
    skaffold completion bash > /etc/bash_completion.d/skaffold && \
    kustomize completion bash > /etc/bash_completion.d/kustomize && \
    wget https://raw.githubusercontent.com/docker/compose/1.29.2/contrib/completion/bash/docker-compose -qO /etc/bash_completion.d/docker-compose && \
    wget https://raw.githubusercontent.com/ansible-community/molecule/1.25.1/asset/bash_completion/molecule.bash-completion.sh -qO /etc/bash_completion.d/molecule && \
    wget https://github.com/mrolli/packer-bash-completion/raw/master/packer -qO /etc/bash_completion.d/packer && \
    wget https://raw.githubusercontent.com/dsifford/yarn-completion/v0.17.0/yarn-completion.bash -qO /etc/bash_completion.d/yarn && \
    #wget https://raw.githubusercontent.com/ziglang/shell-completions/master/_zig -qO /etc/bash_completion.d/zig && \
    git clone https://github.com/asdf-vm/asdf.git /opt/asdf && \
    ln --symbolic --target /etc/profile.d/ /opt/asdf/asdf.sh && \
    ln --symbolic /opt/asdf/completions/asdf.bash /etc/bash_completion.d/asdf && \
    mkdir -p /usr/local/share/ca-certificates && \
    wget https://s3.amazonaws.com/rds-downloads/rds-combined-ca-bundle.pem  -qO - | \
        awk '/-----BEGIN[A-Z0-9 ]*CERTIFICATE-----/ {n++} n > 0 {print > ("/usr/local/share/ca-certificates/rds-" (1+n) ".crt")}' && \
    update-ca-certificates && \
    echo "export PATH=$GOPATH/bin:\$PATH" > /etc/profile.d/workbench.sh && \
    # pragma: allowlist nextline secret
    rm /etc/ssh/ssh_host_* && \
    rm -rf /tmp/* /var/tmp/* /var/lib/apt/lists/* /var/cache/apt/archives/* ~/.cache/*
COPY --chown=root:root bash_completion.d/* /etc/bash_completion.d/
COPY --chown=root:root bin/* /usr/local/bin/
ENV PATH /usr/local/lib/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
ENV ASDF_DIR /opt/asdf
VOLUME /run/sshd
CMD ["/bin/bash"]
