from rust:1.88.0-alpine as rust

run apk add --no-cache git musl-dev libudev-zero-dev openssl-dev cryptsetup-dev lvm2-dev clang-libs clang-dev

workdir /src
copy . .
run --mount=type=cache,id=novit-rs,target=/usr/local/cargo/registry \
    --mount=type=cache,id=novit-rs-target,sharing=private,target=/src/target \
    RUSTFLAGS="-C target-feature=-crt-static" cargo install --path . --root /dist

# ------------------------------------------------------------------------
from alpine:3.22.0 as initrd
run apk add zstd lz4

workdir /system

run . /etc/os-release \
 && wget -O- https://dl-cdn.alpinelinux.org/alpine/v${VERSION_ID%.*}/releases/x86_64/alpine-minirootfs-${VERSION_ID}-x86_64.tar.gz |tar zxv

run apk add --no-cache --update -p . musl libgcc coreutils \
 lvm2 lvm2-extra lvm2-dmeventd udev cryptsetup \
 e2fsprogs lsblk openssl openssh-server wireguard-tools-wg-quick \
 && rm -rf usr/share/apk var/cache/apk etc/motd

copy etc/sshd_config etc/ssh/sshd_config

copy --from=rust /dist/bin/init /system/init

run mkdir -p bin run var/log; cd bin && for cmd in init-version init-connect bootstrap; do ln -s ../init $cmd; done

# check viability
run chroot . init-version

run find * |cpio -H newc -oF /initrd

# ------------------------------------------------------------------------
from alpine:3.22.0
copy --from=initrd /initrd /
entrypoint ["base64","/initrd"]