FROM almalinux:10.2
LABEL org.opencontainers.image.authors="luca.milanesio@gmail.com"

# Enable LEGACY security policies by default (for TLS 1.0/1.1 compatibility)
RUN update-crypto-policies --set LEGACY

# Add Gerrit packages repository and the newest GPG key
RUN rpm -i https://gerritforge.com/gerritforge-repo-1-5.noarch.rpm

ADD entrypoint.sh /

# Install OS pre-prequisites, OpenJDK and Gerrit in two subsequent transactions
# (pre-trans Gerrit script needs to have access to the Java command)
RUN yum -y install initscripts && \
    yum -y install java-21-openjdk

RUN yum -y install gerrit-3.14.1-1 && \
    /entrypoint.sh init && \
    rm -f /var/gerrit/etc/{ssh,secure}* && rm -Rf /var/gerrit/{static,index,logs,data,index,cache,git,db,tmp}/* && chown -R gerrit:gerrit /var/gerrit && \
    yum -y clean all

# Java 25 detection isn't working properly, fixed in master with https://gerrit-review.googlesource.com/c/552261
RUN yum -y erase java-21-openjdk && \
    yum -y install java-25-openjdk && \
    git config -f /var/gerrit/etc/gerrit.config container.javaHome /usr/lib/jvm/java-25-openjdk

USER gerrit

ENV CANONICAL_WEB_URL=
ENV HTTPD_LISTEN_URL=

# Allow incoming traffic
EXPOSE 29418 8080

VOLUME ["/var/gerrit/git", "/var/gerrit/index", "/var/gerrit/cache", "/var/gerrit/db", "/var/gerrit/etc"]

ENTRYPOINT ["/entrypoint.sh"]