# ================================================================================
# Copyright (c) 2017-2018 AT&T Intellectual Property. All rights reserved.
# Copyright 2020 Deutsche Telekom. All rights reserved.
# Copyright (c) 2021 J. F. Lucas.  All rights reserved.
# ================================================================================
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# ============LICENSE_END=========================================================
#
# ECOMP is a trademark and service mark of AT&T Intellectual Property.

# Use the recommended by SECCOM Python as the base image
FROM nexus3.onap.org:10001/onap/integration-python:8.0.0

ARG user=onap
ARG group=onap

USER root

# Make port 25577 available to the world outside this container
EXPOSE 25577

# Copy the current directory content into the container at WORKDIR
COPY --chown=onap:onap ./*.py ./
COPY --chown=onap:onap ./*.in ./
COPY --chown=onap:onap ./*.txt ./
COPY --chown=onap:onap ./run_policy.sh ./
COPY --chown=onap:onap ./policyhandler/ ./policyhandler/
COPY --chown=onap:onap ./etc/ ./etc/
COPY --chown=onap:onap ./etc_customize/ ./etc_customize/

RUN apk add build-base linux-headers openssl iproute2 bash && \
    pip install -r requirements.txt

RUN mkdir -p logs \
 && chown -R $user:$group . \
 && chmod a+w logs \
 && chmod 500 etc \
 && chmod 500 run_policy.sh \
 && (CUST_SH=./etc_customize/customize.sh && test -e $CUST_SH && chmod 500 $CUST_SH \
   && ($CUST_SH | tee -a logs/"customize_$user_$(date +%Y_%m%d-%H%M%S).log" 2>&1)) \
 && ls -laR .

USER $user

# Run run_policy.sh when the container launches
CMD ["./run_policy.sh"]