FROM archlinux:latest
LABEL maintainer="Jeremy Zheng"

RUN pacman-key --init
RUN pacman -Sy --noconfirm archlinux-keyring
RUN pacman-key --populate
RUN pacman -Syu --noconfirm
RUN pacman -S --needed --noconfirm base-devel aarch64-linux-gnu-gcc risc-v \
    bzip2 bzip3 p7zip unarchiver \
    vim git cmake thrift capnproto wget zsh man-db man-pages \
    pwgen sshpass openssl openssh rsync zip unzip tree tmux asciidoc doxygen cpio net-tools bind-tools \
    clang llvm lld lldb mold bison flex ninja bazel \
    imagemagick ffmpeg xorg-font-util \
    ansible ansible-lint \
    wqy-bitmapfont wqy-microhei wqy-zenhei \
    ttf-fira-code woff-fira-code woff2-fira-code \
    adobe-source-code-pro-fonts adobe-source-serif-fonts adobe-source-sans-fonts \
    adobe-source-han-serif-cn-fonts adobe-source-han-serif-hk-fonts adobe-source-han-serif-jp-fonts adobe-source-han-serif-kr-fonts adobe-source-han-serif-tw-fonts \
    adobe-source-han-sans-cn-fonts adobe-source-han-sans-hk-fonts adobe-source-han-sans-jp-fonts adobe-source-han-sans-kr-fonts adobe-source-han-sans-tw-fonts \
    ttf-dejavu nerd-fonts ttf-ubuntu-font-family \
    ttf-arphic-ukai ttf-arphic-uming \
    texlive texlive-lang graphviz pandoc \
    hspell nuspell libvoikko hunspell hunspell-en_us \
    xdebug php-fpm php-pgsql php-sqlite php-redis php-mongodb php-imagick php-gd php-intl php-enchant php-snmp php-tidy php-xsl php-sodium php-odbc php-pspell \
    dart haxe lua \
    erlang elixir rebar \
    jdk-openjdk libxcrypt-compat \
    nginx mariadb postgresql rabbitmq redis supervisor
RUN pacman -Scc --noconfirm

RUN echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && locale-gen
RUN useradd -s /bin/zsh -m deploy
RUN passwd -l deploy
RUN echo 'deploy ALL=(ALL:ALL) NOPASSWD: ALL' > /etc/sudoers.d/101-deploy
USER deploy
RUN mkdir -p $HOME/downloads $HOME/build $HOME/local $HOME/tmp

# https://pkl-lang.org/main/current/pkl-cli/index.html#linux-executable
ENV PKL_VERSION="0.25.1"
RUN curl -L -o $HOME/downloads/pkl https://github.com/apple/pkl/releases/download/$PKL_VERSION/pkl-linux-amd64 \
    && sudo cp $HOME/downloads/pkl /usr/local/bin/ \
    && sudo chmod +x /usr/local/bin/pkl


# https://github.com/envoyproxy/envoy
ENV ENVOY_VERSION "1.32.3"
RUN wget -q -O $HOME/downloads/envoy https://github.com/envoyproxy/envoy/releases/download/v${ENVOY_VERSION}/envoy-${ENVOY_VERSION}-linux-x86_64 \
    && sudo cp $HOME/downloads/envoy /usr/local/bin/ \
    && sudo chmod +x /usr/local/bin/envoy

# https://getcomposer.org/doc/00-intro.md#installation-linux-unix-macos
RUN wget -q -O $HOME/downloads/composer https://getcomposer.org/installer
RUN cd $HOME/downloads \
    && php composer \
    && sudo cp composer.phar /usr/local/bin/composer


# https://github.com/bazelbuild/bazelisk
ENV BAZEL_VERSION "v1.25.0"
RUN wget -q -O $HOME/downloads/bazel \
    https://github.com/bazelbuild/bazelisk/releases/download/${BAZEL_VERSION}/bazelisk-linux-amd64
RUN sudo cp $HOME/downloads/bazel /usr/local/bin && sudo chmod +x /usr/local/bin/bazel


# https://min.io/download#/linux
RUN wget -q -O $HOME/downloads/minio https://dl.min.io/server/minio/release/linux-amd64/minio \
    && sudo cp $HOME/downloads/minio /usr/local/bin/ \
    && sudo chmod +x /usr/local/bin/minio

# https://github.com/amacneil/dbmate
RUN curl -fsSL -o $HOME/downloads/dbmate https://github.com/amacneil/dbmate/releases/latest/download/dbmate-linux-amd64 \
    && sudo cp $HOME/downloads/dbmate /usr/local/bin/ \
    && sudo chmod +x /usr/local/bin/dbmate

# https://aur.archlinux.org/packages/ttf-arphic-tex-extra
ENV ARPHIC_TTF_VERSION "20161212-1"
RUN git clone https://aur.archlinux.org/ttf-arphic-tex-extra.git $HOME/downloads/ttf-arphic-tex-extra \
    && cd $HOME/downloads/ttf-arphic-tex-extra/ \
    && makepkg \
    && sudo pacman -U --noconfirm ttf-arphic-tex-extra-${ARPHIC_TTF_VERSION}-any.pkg.tar.zst

# https://github.com/ohmyzsh/ohmyzsh
RUN git clone https://github.com/ohmyzsh/ohmyzsh.git $HOME/.oh-my-zsh
RUN cp $HOME/.oh-my-zsh/templates/zshrc.zsh-template $HOME/.zshrc
RUN echo 'export LANG=en_US.UTF-8' >> $HOME/.zshrc \
    && echo 'export LC_ALL=en_US.UTF-8' >> $HOME/.zshrc \
    && echo 'export EDITOR=vim' >> $HOME/.zshrc \
    && echo 'export PATH=$HOME/.local/bin:$PATH' >> $HOME/.zshrc

RUN git config --global core.quotepath false \
    && git config --global http.version HTTP/1.1 \
    && git config --global pull.rebase false \
    && git config --global url."https://".insteadOf git://
RUN echo 'set-option -g history-limit 102400' > $HOME/.tmux.conf \
    && echo 'set-option -g default-shell "/bin/zsh"' >> $HOME/.tmux.conf

# https://musl.cc/
RUN wget -q -P $HOME/downloads https://more.musl.cc/x86_64-linux-musl/x86_64-linux-musl-cross.tgz \
    && tar xf $HOME/downloads/x86_64-linux-musl-cross.tgz -C $HOME/local \
    && echo 'export PATH=$HOME/local/x86_64-linux-musl-cross/bin:$PATH' >> $HOME/.zshrc
RUN wget -q -P $HOME/downloads https://more.musl.cc/x86_64-linux-musl/armv7l-linux-musleabihf-cross.tgz \
    && tar xf $HOME/downloads/armv7l-linux-musleabihf-cross.tgz -C $HOME/local \
    && echo 'export PATH=$HOME/local/armv7l-linux-musleabihf-cross/bin:$PATH' >> $HOME/.zshrc
RUN wget -q -P $HOME/downloads https://more.musl.cc/x86_64-linux-musl/aarch64-linux-musl-cross.tgz \
    && tar xf $HOME/downloads/aarch64-linux-musl-cross.tgz -C $HOME/local \
    && echo 'export PATH=$HOME/local/aarch64-linux-musl-cross/bin:$PATH' >> $HOME/.zshrc
RUN wget -q -P $HOME/downloads https://more.musl.cc/x86_64-linux-musl/riscv64-linux-musl-cross.tgz \
    && tar xf $HOME/downloads/riscv64-linux-musl-cross.tgz -C $HOME/local \
    && echo 'export PATH=$HOME/local/riscv64-linux-musl-cross/bin:$PATH' >> $HOME/.zshrc


# https://pip.pypa.io/en/stable/installation/
RUN zsh -c ". $HOME/.zshrc \
    && python3 -m venv $HOME/local/python3 \
    && . $HOME/local/python3/bin/activate \
    && pip install --upgrade pip \
    && pip install ansible paramiko conan \
    && pip install grpcio-tools grpcio-health-checking"
RUN echo 'source $HOME/local/python3/bin/activate' >> $HOME/.zshrc
RUN echo 'export ANSIBLE_HOST_KEY_CHECKING=False' >> $HOME/.zshrc \
    && echo 'alias peony="ANSIBLE_LOG_PATH=$HOME/tmp/$(date +%Y%m%d%H%M%S).log ansible-playbook"' >> $HOME/.zshrc


# https://github.com/rbenv/rbenv
# https://github.com/rbenv/ruby-build/tree/master/share/ruby-build
ENV RUBY_VERSION "3.3.6"
RUN git clone https://github.com/rbenv/rbenv.git $HOME/.rbenv \
    && git clone https://github.com/rbenv/ruby-build.git $HOME/.rbenv/plugins/ruby-build \
    && git clone https://github.com/rbenv/rbenv-vars.git $HOME/.rbenv/plugins/rbenv-vars 
RUN echo 'eval "$(~/.rbenv/bin/rbenv init - zsh)"' >> ~/.zshrc
# https://github.com/rbenv/ruby-build
RUN zsh -c "source $HOME/.zshrc \
    && rbenv install ${RUBY_VERSION} \
    && rbenv global ${RUBY_VERSION} \
    && gem install bundler"

# https://go.dev/doc/install
ENV GO_VERSION "1.23.4"
RUN wget -q -P $HOME/downloads https://go.dev/dl/go${GO_VERSION}.linux-amd64.tar.gz
RUN tar xf $HOME/downloads/go${GO_VERSION}.linux-amd64.tar.gz -C $HOME/local
RUN echo 'export PATH=$HOME/local/go/bin:$PATH' >> $HOME/.zshrc \
    && echo 'export GOPATH=$HOME/go' >> $HOME/.zshrc \
    && echo 'export PATH="$(go env GOPATH)/bin:$PATH"' >> $HOME/.zshrc
# https://code.visualstudio.com/docs/languages/go
RUN zsh -c "source $HOME/.zshrc \
    && go install golang.org/x/tools/gopls@latest \
    && go install github.com/go-delve/delve/cmd/dlv@latest \
    && go install honnef.co/go/tools/cmd/staticcheck@latest"

# https://github.com/sdkman/sdkman-cli
# https://docs.gradle.org/current/userguide/compatibility.html
ENV JDK_VERSION "23-open"
ENV GRADLE_VERSION "8.11.1"
ENV THRIFT_JAVA_VERSION "19.0.2-open"
ENV THRIFT_GRADLE_VERSION "7.6.4"
RUN curl -s "https://get.sdkman.io" | bash
RUN sed -i -e 's/sdkman_auto_answer=false/sdkman_auto_answer=true/g' $HOME/.sdkman/etc/config
RUN zsh -c "source $HOME/.zshrc \
    && sdk install java ${JDK_VERSION} \
    && sdk install ant \
    && sdk install maven \
    && sdk install gradle ${GRADLE_VERSION} \
    && sdk install kotlin \
    && sdk install java  ${THRIFT_JAVA_VERSION} \
    && sdk install gradle ${THRIFT_GRADLE_VERSION} \
    && sdk default java ${JDK_VERSION} \
    && sdk default gradle ${GRADLE_VERSION}"

# https://github.com/nvm-sh/nvm
ENV NVM_VERSION "v0.40.1"
RUN git clone -b ${NVM_VERSION} https://github.com/nvm-sh/nvm.git $HOME/.nvm
RUN echo 'export NVM_DIR="$HOME/.nvm"' >> $HOME/.zshrc \
    && echo '[ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"' >> $HOME/.zshrc \
    && echo '[ -s "$NVM_DIR/bash_completion" ] && \. "$NVM_DIR/bash_completion"' >> $HOME/.zshrc
# https://stackoverflow.com/questions/37324519/node-sass-does-not-yet-support-your-current-environment-linux-64-bit-with-false
RUN zsh -c "source $HOME/.zshrc \
    && nvm install stable \
    && nvm use stable \
    && npm install -g yarn \
    && nvm install --lts \
    && nvm use --lts \
    && npm install -g yarn \
    && nvm install lts/fermium \
    && nvm use lts/fermium \
    && npm install -g yarn"

# https://www.rust-lang.org/tools/install
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
# https://doc.rust-lang.org/nightly/rustc/platform-support.html
RUN zsh -c "source $HOME/.cargo/env \
    && rustup component add rust-analyzer \
    && rustup target add armv7-unknown-linux-gnueabihf \
    && rustup target add aarch64-unknown-linux-gnu \
    && rustup target add x86_64-unknown-linux-musl \
    && rustup target add aarch64-unknown-linux-musl \
    && rustup target add loongarch64-unknown-linux-gnu"
RUN zsh -c "source $HOME/.zshrc \
    && cargo install --locked cargo-outdated \
    && cargo install diesel_cli \
    && cargo install mdbook"

# https://www.swift.org/download/#releases
ENV SWIFT_VERSION "6.0.2"
RUN wget -q -P $HOME/downloads https://download.swift.org/swift-${SWIFT_VERSION}-release/ubuntu2404/swift-${SWIFT_VERSION}-RELEASE/swift-${SWIFT_VERSION}-RELEASE-ubuntu24.04.tar.gz \
    && tar xf $HOME/downloads/swift-${SWIFT_VERSION}-RELEASE-ubuntu24.04.tar.gz -C $HOME/local \
    && echo "export PATH=\$HOME/local/swift-${SWIFT_VERSION}-RELEASE-ubuntu24.04/bin:\$PATH" >> $HOME/.zshrc

# https://github.com/microsoft/vcpkg
RUN git clone https://github.com/microsoft/vcpkg.git $HOME/local/vcpkg
RUN $HOME/local/vcpkg/bootstrap-vcpkg.sh \
    && echo 'export VCPKG_DISABLE_METRICS=1' >> $HOME/.zshrc


# https://opensearch.org/downloads.html#opensearch
ENV OPENSEARCH_VERSION "2.18.0"
RUN wget -q -P $HOME/downloads \
    https://artifacts.opensearch.org/releases/bundle/opensearch/${OPENSEARCH_VERSION}/opensearch-${OPENSEARCH_VERSION}-linux-x64.tar.gz
RUN tar xf $HOME/downloads/opensearch-${OPENSEARCH_VERSION}-linux-x64.tar.gz -C $HOME/tmp \
    && sudo mv $HOME/tmp/opensearch-${OPENSEARCH_VERSION} /opt/opensearch

# https://github.com/grpc/grpc
ENV GRPC_VERSION "v1.68.2"
RUN git clone --recurse-submodules -b $GRPC_VERSION https://github.com/grpc/grpc.git $HOME/downloads/grpc
# ENV PROTOBUF_VERSION "v3.21.8"
# RUN cd $HOME/downloads/grpc/third_party/protobuf \
#     && git checkout ${PROTOBUF_VERSION} \
#     && git submodule update --init --recursive
RUN zsh -c "source $HOME/.zshrc \
    && mkdir -pv $HOME/build/grpc \
    && cd $HOME/build/grpc \
    && CC=clang CXX=clang++ cmake -DCMAKE_BUILD_TYPE=Release \
    -DgRPC_INSTALL=ON \
    -DgRPC_SSL_PROVIDER=package \
    -DgRPC_BUILD_TESTS=OFF \
    -DCMAKE_INSTALL_PREFIX=$HOME/.local $HOME/downloads/grpc \
    && make -j $(nproc --ignore=2) \
    && make install"

# https://github.com/grpc/grpc-web#code-generator-plugin
ENV GRPC_WEB_PLUGIN_VERSION "1.5.0"
RUN wget -q -O $HOME/.local/bin/protoc-gen-grpc-web \
    https://github.com/grpc/grpc-web/releases/download/${GRPC_WEB_PLUGIN_VERSION}/protoc-gen-grpc-web-${GRPC_WEB_PLUGIN_VERSION}-linux-x86_64
RUN chmod +x $HOME/.local/bin/protoc-gen-grpc-web

# https://github.com/protocolbuffers/protobuf-javascript
ENV GRPC_JS_PLUGIN_VERSION "3.21.4"
RUN wget -q -P $HOME/downloads \
    https://github.com/protocolbuffers/protobuf-javascript/releases/download/v${GRPC_JS_PLUGIN_VERSION}/protobuf-javascript-${GRPC_JS_PLUGIN_VERSION}-linux-x86_64.tar.gz
RUN mkdir -p $HOME/build/protobuf-javascript \
    && tar xf $HOME/downloads/protobuf-javascript-${GRPC_JS_PLUGIN_VERSION}-linux-x86_64.tar.gz -C $HOME/build/protobuf-javascript \
    && cp $HOME/build/protobuf-javascript/bin/protoc-gen-js $HOME/.local/bin/

# https://repo1.maven.org/maven2/io/grpc/protoc-gen-grpc-java/
# https://github.com/grpc/grpc-java
ENV GRPC_JAVA_PLUGIN_VERSION "1.68.2"
RUN wget -q -O $HOME/.local/bin/grpc_java_plugin \
    https://repo1.maven.org/maven2/io/grpc/protoc-gen-grpc-java/${GRPC_JAVA_PLUGIN_VERSION}/protoc-gen-grpc-java-${GRPC_JAVA_PLUGIN_VERSION}-linux-x86_64.exe
RUN chmod +x $HOME/.local/bin/grpc_java_plugin

# https://github.com/grpc/grpc-node
# https://github.com/grpc/grpc-node/tree/master/examples/helloworld/static_codegen
RUN zsh -c "source $HOME/.zshrc && npm install -g grpc-tools"

# https://grpc.io/docs/languages/go/quickstart/
RUN zsh -c "source $HOME/.zshrc \
    && go install google.golang.org/protobuf/cmd/protoc-gen-go@latest \
    && go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@latest"

# https://github.com/fullstorydev/grpcurl?tab=readme-ov-file#from-source
RUN zsh -c "source $HOME/.zshrc \
    go install github.com/fullstorydev/grpcurl/cmd/grpcurl@latest"

# https://github.com/google/flatbuffers
ENV FLATBUFFERS_VERSION "v24.3.25"
RUN git clone -b $FLATBUFFERS_VERSION https://github.com/google/flatbuffers.git $HOME/downloads/flatbuffers
RUN zsh -c "source $HOME/.zshrc \
    && mkdir -pv $HOME/build/flatbuffers \
    && cd $HOME/build/flatbuffers \
    && CC=clang CXX=clang++ cmake -G 'Unix Makefiles' -DCMAKE_BUILD_TYPE=Release -DFLATBUFFERS_BUILD_TESTS=OFF \
    -DCMAKE_INSTALL_PREFIX=$HOME/.local $HOME/downloads/flatbuffers \
    && make -j $(nproc --ignore=2) \
    && make install"


# https://opensearch.org/docs/latest/opensearch/install/tar/
RUN echo "network.host: 0.0.0.0" >> /opt/opensearch/config/opensearch.yml \
    && echo "discovery.type: single-node" >> /opt/opensearch/config/opensearch.yml \
    && echo "plugins.security.disabled: true" >> /opt/opensearch/config/opensearch.yml \
    && sudo chown -R nobody:nobody /opt/opensearch

RUN sudo mkdir -p /var/lib/minio/data && sudo chown -R nobody:nobody /var/lib/minio

# https://www.rabbitmq.com/access-control.html#loopback-users
RUN echo 'loopback_users = none' | sudo tee -a /etc/rabbitmq/rabbitmq.conf \
    && sudo sed -i "s/NODENAME.*/NODENAME=palm/g" /etc/rabbitmq/rabbitmq-env.conf \
    && sudo rabbitmq-plugins enable rabbitmq_mqtt \
    && sudo rabbitmq-plugins enable rabbitmq_management

RUN cd /usr && sudo mariadb-install-db --datadir=/var/lib/mysql --user=mysql

RUN sudo -s -u postgres /usr/bin/initdb -D /var/lib/postgres/data
RUN echo "listen_addresses = '0.0.0.0'" | sudo tee -a /var/lib/postgres/data/postgresql.conf \
    && echo "host  all  all 0.0.0.0/0 md5" | sudo tee -a /var/lib/postgres/data/pg_hba.conf \
    && sudo mkdir /run/postgresql \
    && sudo chown -R postgres:postgres /run/postgresql

ADD etc/redis/* /etc/redis/
RUN sudo mkdir -p /var/lib/redis \
    && sudo mkdir /var/lib/redis/single /var/lib/redis/node-1 /var/lib/redis/node-2 /var/lib/redis/node-3 /var/lib/redis/node-4 /var/lib/redis/node-5 /var/lib/redis/node-6 \
    && sudo chown -R redis:redis /var/lib/redis \
    && sudo chmod 750 /var/lib/redis

RUN sudo mkdir -p /var/www/html \
    && echo "<?php phpinfo(); ?>" | sudo tee /var/www/html/info.php \
    && echo "daemon off;" | sudo tee -a /etc/nginx/nginx.conf \
    && sudo sed -i '35,79d' /etc/nginx/nginx.conf \
    && sudo sed -i '35i include sites-enabled/*.conf;' /etc/nginx/nginx.conf \
    && sudo sed -i "s/error_log =.*/error_log = log\/php-fpm.log/g" /etc/php/php-fpm.conf
ADD etc/nginx/sites-enabled/localhost.conf /etc/nginx/sites-enabled/localhost.conf

# php -i
# <?php php_info(); ?>
# <?php xdebug_info(); ?>
RUN sudo sed -i 's/memory_limit =.*/memory_limit = 1G/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=bcmath/extension=bcmath/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=bz2/extension=bz2/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=calendar/extension=calendar/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=enchant/extension=enchant/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=exif/extension=exif/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=ftp/extension=ftp/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=gd/extension=gd/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=gettext/extension=gettext/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=gmp/extension=gmp/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=iconv/extension=iconv/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=intl/extension=intl/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=mysqli/extension=mysqli/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=odbc/extension=odbc/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=pdo_mysql/extension=pdo_mysql/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=pdo_odbc/extension=pdo_odbc/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=pdo_pgsql/extension=pdo_pgsql/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=pdo_sqlite/extension=pdo_sqlite/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=pgsql/extension=pgsql/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=pspell/extension=pspell/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=snmp/extension=snmp/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=soap/extension=soap/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=sockets/extension=sockets/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=sodium/extension=sodium/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=sqlite3/extension=sqlite3/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=tidy/extension=tidy/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=xsl/extension=xsl/' /etc/php/php.ini \
    && sudo sed -i 's/;extension=redis/extension=redis/' /etc/php/conf.d/redis.ini \
    && sudo sed -i 's/;extension=igbinary/extension=igbinary/' /etc/php/conf.d/igbinary.ini \
    && sudo sed -i 's/; extension = imagick/extension=imagick/' /etc/php/conf.d/imagick.ini \
    && sudo sed -i 's/;zend_extension=opcache/zend_extension=opcache/' /etc/php/php.ini \
    && sudo sed -i 's/;zend_extension=xdebug/zend_extension=xdebug/' /etc/php/conf.d/xdebug.ini \
    && sudo sed -i 's/;xdebug.mode=debug/xdebug.mode=develop,profile,coverage,debug/' /etc/php/conf.d/xdebug.ini \
    && echo 'xdebug.start_with_request=yes' | sudo tee -a /etc/php/conf.d/xdebug.ini \
    && echo 'xdebug.client_host=0.0.0.0' | sudo tee -a /etc/php/conf.d/xdebug.ini \
    && echo 'xdebug.client_port=9003' | sudo tee -a /etc/php/conf.d/xdebug.ini \
    && echo 'xdebug.cli_color = 2' | sudo tee -a /etc/php/conf.d/xdebug.ini


RUN mkdir -p $HOME/.ssh \
    && touch $HOME/.ssh/authorized_keys \
    && echo 'GSSAPIAuthentication no' | sudo tee -a /etc/ssh/sshd_config \
    && echo 'UseDNS no' | sudo tee -a /etc/ssh/sshd_config \
    && echo 'PasswordAuthentication no' | sudo tee -a /etc/ssh/sshd_config \
    && echo 'PermitRootLogin no' | sudo tee -a /etc/ssh/sshd_config \
    && echo 'AllowUsers deploy' | sudo tee -a /etc/ssh/sshd_config \
    && echo 'PrintLastLog no' | sudo tee -a /etc/ssh/sshd_config \
    && sudo /usr/bin/ssh-keygen -A

ADD etc/envoy.yaml /etc/
RUN sudo mkdir -p /var/log/envoy
ADD etc/supervisor /etc/supervisor

RUN echo "$(date -u +%4Y%m%d%H%M%S)" | sudo tee /VERSION

VOLUME /workspace
WORKDIR /workspace

CMD ["/bin/zsh", "-l"]