---

# Используем базовый образ Python
FROM base-docker.artifacts.tn.tngrp.ru/library/python:3.10.18-slim-bookworm

# Добавляем аргументы для передачи данных из команды сборки
ARG TRUSTED_HOST

# Копируем библиотеки и зависимости
COPY debs/ /tmp/debs/

# Последовательность установки важна
RUN apt-get install -y --no-install-recommends "/tmp/debs/unzip_6.0-28_amd64.deb" \
    && apt-get install -y --no-install-recommends "/tmp/debs/zlib1g_1.3.dfsg+really1.3.1-1+b1_amd64.deb" \
	&& apt-get install -y --no-install-recommends "/tmp/debs/libudev1_252.38-1~deb12u1_amd64.deb" \
	&& apt-get install -y --no-install-recommends "/tmp/debs/libcbor0.8_0.8.0-2+b1_amd64.deb" \
	&& apt-get install -y --no-install-recommends "/tmp/debs/libbsd0_0.11.7-2_amd64.deb" \
	&& apt-get install -y --no-install-recommends "/tmp/debs/libcjson1_1.7.15-1+deb12u3_amd64.deb" \
	&& apt-get install -y --no-install-recommends "/tmp/debs/libssl3_3.0.16-1~deb12u1_amd64.deb" \
	&& apt-get install -y --no-install-recommends "/tmp/debs/libfido2-1_1.12.0-2+b1_amd64.deb" \
	&& apt-get install -y --no-install-recommends "/tmp/debs/libedit2_3.1-20221030-2_amd64.deb" \
	&& apt-get install -y --no-install-recommends "/tmp/debs/openssh-client_9.2p1-2+deb12u6_amd64.deb" \
	&& apt-get clean \
	&& rm -rf /var/lib/apt/lists/*
	
# Установка poetry, pip, certifi
RUN --mount=type=bind,source=./certs/cacert.pem,target=/usr/local/share/ca-certificates/cacert.crt,readonly \
	--mount=type=secret,id=nexus_user \
	--mount=type=secret,id=nexus_password \
	update-ca-certificates \
    && pip install --upgrade pip certifi poetry --trusted-host "$TRUSTED_HOST" --index-url https://$(cat /run/secrets/nexus_user):$(cat /run/secrets/nexus_password)@"$TRUSTED_HOST"/repository/base-pypi/simple \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*