FROM python:3.13-alpine AS build

RUN apk add --no-cache build-base linux-headers libffi-dev libressl-dev cargo

ADD .artifacts/package/rns-*.whl /tmp/

ENV PIP_ROOT_USER_ACTION=ignore
ENV PIP_DISABLE_PIP_VERSION_CHECK=1
ENV PIP_NO_CACHE_DIR=1
RUN pip install /tmp/rns-*.whl

FROM python:3.13-alpine

COPY --from=build /usr/local/bin/ /usr/local/bin/

RUN mkdir /config

RUN addgroup -S rns --gid 1000 && adduser -S rns --uid 1000 -G rns dialout
RUN chown rns:rns /config

USER rns:rns

VOLUME ["/config"]

ENV PYTHONUNBUFFERED=1

ENTRYPOINT ["/usr/local/bin/rnsd", "--config", "/config"]