ARG GO_IMAGE=docker.io/library/golang:1.22.4-bookworm
ARG BASE_IMAGE=gcr.io/distroless/static-debian12:debug-nonroot

## ---

FROM ${GO_IMAGE} as build
SHELL [ "/bin/sh", "-ec" ]

ARG GOPROXY
ARG GOSUMDB
ARG GOPRIVATE

ARG RELMODE

WORKDIR /go/src

COPY . .

ENV GOMAXPROCS=4 \
    MALLOC_ARENA_MAX=4

RUN go env | grep -F -e GOPROXY -e GOSUMDB ; \
    make OUTDIR=/go/bin ; \
    make ci-clean

## ---

FROM ${BASE_IMAGE}

COPY --from=build /go/bin/vault-usage /bin/

ENV GOMAXPROCS=4 \
    MALLOC_ARENA_MAX=4

ENTRYPOINT [ "/bin/vault-usage" ]
CMD [ ]

USER nonroot:nonroot