FROM almalinux:9.4

# Install dependencies
RUN yum -y install \
    git \
    java-21-openjdk \
    procps \
    sudo \
    passwd \
    gettext \
    nfs-utils \
    && yum -y clean all

ENV GERRIT_BRANCH stable-3.13

# Add gerrit user
RUN adduser -p -m --uid 1000 gerrit --home-dir /home/gerrit
RUN echo "gerrit:gerrit" | chpasswd
RUN echo "gerrit ALL=(root) NOPASSWD:ALL" > /etc/sudoers.d/gerrit && \
    chmod 0440 /etc/sudoers.d/gerrit

# Create gerrit installation directory
RUN mkdir -p /var/gerrit && chown -R gerrit /var/gerrit

ADD --chown=gerrit \
    "https://gerrit-ci.gerritforge.com/job/Gerrit-bazel-$GERRIT_BRANCH/lastSuccessfulBuild/artifact/gerrit/bazel-bin/release.war" \
    /tmp/gerrit.war

ADD --chown=gerrit \
    "https://gerrit-ci.gerritforge.com/view/Plugins-master/job/plugin-javamelody-bazel-master-$GERRIT_BRANCH/lastSuccessfulBuild/artifact/bazel-bin/plugins/javamelody/javamelody.jar" \
    /var/gerrit/plugins/javamelody.jar

ADD --chown=gerrit \
    "https://gerrit-ci.gerritforge.com/job/plugin-high-availability-bazel-$GERRIT_BRANCH/lastSuccessfulBuild/artifact/bazel-bin/plugins/high-availability/high-availability.jar" \
    /var/gerrit/plugins/high-availability.jar

RUN mkdir -p /var/gerrit/lib && \
    ln -sf /var/gerrit/plugins/high-availability.jar /var/gerrit/lib/high-availability.jar

ADD --chown=gerrit:gerrit \
    "https://gerrit-ci.gerritforge.com/job/module-global-refdb-bazel-$GERRIT_BRANCH/lastSuccessfulBuild/artifact/bazel-bin/plugins/global-refdb/global-refdb.jar" \
    /var/gerrit/lib/global-refdb.jar

ADD --chown=gerrit:gerrit \
    "https://gerrit-ci.gerritforge.com/job/plugin-zookeeper-refdb-gh-bazel-$GERRIT_BRANCH/lastSuccessfulBuild/artifact/bazel-bin/plugins/zookeeper-refdb/zookeeper-refdb.jar" \
    /var/gerrit/plugins/zookeeper-refdb.jar

ADD --chown=gerrit:gerrit \
    "https://gerrit-ci.gerritforge.com/view/Plugins-master/job/module-index-elasticsearch-bazel-master/lastSuccessfulBuild/artifact/bazel-bin/plugins/index-elasticsearch/index-elasticsearch.jar" \
    /var/gerrit_plugins/index-elasticsearch.jar

ADD --chown=gerrit:gerrit \
    "https://gerrit-ci.gerritforge.com/job/plugin-healthcheck-bazel-$GERRIT_BRANCH/lastSuccessfulBuild/artifact/bazel-bin/plugins/healthcheck/healthcheck.jar" \
    /var/gerrit/plugins/healthcheck.jar

ADD --chown=gerrit:gerrit ./wait-for-it.sh /bin

# Change user
USER gerrit

# Expose ssh and http ports
EXPOSE 29418 8080

COPY --chown=gerrit ./entrypoint.sh /bin

USER root

ENTRYPOINT /bin/entrypoint.sh