FROM rockylinux/rockylinux:8.10

ARG version=2.0.6

COPY bootstrapfiles/shibui-${version}.war.sha256sum .

#RUN yum -q -qy update \
#    && yum -qy install --setopt=tsflags=nodocs epel-release \
#    && yum -qy install curl cronie supervisor \
#    && yum clean all \
#    && rm -rf /var/cache/yum
RUN yum -qy install --setopt=tsflags=nodocs epel-release \
    && yum install -qy curl supervisor wget

RUN mkdir -p /opt/shibui
RUN wget https://github.internet2.edu/TIER/shib-idp-ui/releases/download/v${version}/shibui-${version}.war
RUN sha256sum -c shibui-${version}.war.sha256sum && mv shibui-${version}.war /opt/shibui/shibui.war

# beacon env
ENV TIERVERSION=MCM_2.0.5

# Install Corretto Java JDK
#Corretto download page: https://docs.aws.amazon.com/corretto/latest/corretto-11-ug/downloads-list.html
ARG CORRETTO_URL_PERM=https://corretto.aws/downloads/latest/amazon-corretto-17-x64-linux-jdk.rpm
ARG CORRETTO_RPM=amazon-corretto-17-x64-linux-jdk.rpm
COPY containerfiles/corretto-signing-key.pub .
RUN curl -O -L $CORRETTO_URL_PERM \
    && rpm --import corretto-signing-key.pub \
    && rpm -K $CORRETTO_RPM \
    && rpm -i $CORRETTO_RPM \
    && rm -r corretto-signing-key.pub $CORRETTO_RPM
ENV JAVA_HOME=/usr/lib/jvm/java-1.17.0-amazon-corretto

COPY containerfiles/supervisord.conf /etc/supervisor/supervisord.conf
COPY containerfiles/users.txt /opt/shibui

# TIER Beacon Opt-out
# Completely uncomment the following ENV line to prevent the containers from sending analytics information to Internet2.
# With the default/release configuration, it will only send product (Shibb/Grouper/COmanage) and version (3.3.1-17040, etc) 
#   once daily between midnight and 4am.  There is no configuration or private information collected or sent.  
# This data helps with the scalaing and funding of TIER.  Please do not disable it if you find the TIER tools useful.
# To keep it commented, keep multiple comments on the following line (to prevent other scripts from processing it).
#####     ENV TIER_BEACON_OPT_OUT True

WORKDIR /opt/shibui

CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/supervisord.conf"]