Dockerfile.windows

ARG OS_RELEASE

FROM mcr.microsoft.com/windows/servercore:${OS_RELEASE} as download

SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop'; $ProgressPreference = 'SilentlyContinue';"]

ENV GPG_VERSION 2.3.4

RUN Invoke-WebRequest $('https://files.gpg4win.org/gpg4win-vanilla-{0}.exe' -f $env:GPG_VERSION) -OutFile 'gpg4win.exe' -UseBasicParsing ; \
    Start-Process .\gpg4win.exe -ArgumentList '/S' -NoNewWindow -Wait

RUN @( \
    '4ED778F539E3634C779C87C6D7062848A1AB005C', \
    '94AE36675C464D64BAFA68DD7434390BDBE9B9C5', \
    '74F12602B6F1C4E913FAA37AD3A89613643B6201', \
    '71DCFD284A79C3B38668286BC97EC7A07EDE3FC1', \
    '8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600', \
    'C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8', \
    'C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C', \
    'DD8F2338BAE7501E3DD5AC78C273792F7D83545D', \
    'A48C2BEE680E841632CD4E44F07496B3EB3C1762', \
    '108F52B48DB57BB0CC439B2997B01419BD92F80A', \
    'B9E2F5981AA6E0CD28160D9FF13993A75599653C', \
    '9554F04D7259F04124DE6B476D5A82AC7E37093B', \
    '1C050899334244A8AF75E53792EF661D867B9DFA', \
    'B9AE9905FFD7803F25714661B63B535A4C206CA9' \
    ) | foreach { \
      gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys $_ ; \
      gpg --batch --keyserver keyserver.ubuntu.com --recv-keys $_ ; \
    }

ENV NODE_VERSION 11.10.0

RUN Invoke-WebRequest $('https://nodejs.org/dist/v{0}/SHASUMS256.txt.asc' -f $env:NODE_VERSION) -OutFile 'SHASUMS256.txt.asc' -UseBasicParsing ; \
    gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc

RUN Invoke-WebRequest $('https://nodejs.org/dist/v{0}/node-v{0}-win-x64.zip' -f $env:NODE_VERSION) -OutFile 'node.zip' -UseBasicParsing ; \
    $sum = $(cat SHASUMS256.txt.asc | sls $('  node-v{0}-win-x64.zip' -f $env:NODE_VERSION)) -Split ' ' ; \
    if ((Get-FileHash node.zip -Algorithm sha256).Hash -ne $sum[0]) { Write-Error 'SHA256 mismatch' } ; \
    Expand-Archive node.zip -DestinationPath C:\ ; \
    Rename-Item -Path $('C:\node-v{0}-win-x64' -f $env:NODE_VERSION) -NewName 'C:\nodejs'

ENV YARN_VERSION 0.24.6

RUN [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12 ; \
    Invoke-WebRequest $('https://yarnpkg.com/downloads/{0}/yarn-{0}.msi' -f $env:YARN_VERSION) -OutFile yarn.msi -UseBasicParsing ; \
    $sig = Get-AuthenticodeSignature yarn.msi ; \
    if ($sig.Status -ne 'Valid') { Write-Error 'Authenticode signature is not valid' } ; \
    Write-Output $sig.SignerCertificate.Thumbprint ; \
    if (@( \
      '7E253367F8A102A91D04829E37F3410F14B68A5F', \
      'AF764E1EA56C762617BDC757C8B0F3780A0CF5F9' \
      ) -notcontains $sig.SignerCertificate.Thumbprint) { Write-Error 'Unknown signer certificate' } ; \
    Start-Process msiexec.exe -ArgumentList '/i', 'yarn.msi', '/quiet', '/norestart' -NoNewWindow -Wait

FROM download as build

SHELL ["powershell", "-Command", "$ErrorActionPreference = 'Stop'; $ProgressPreference = 'SilentlyContinue';"]

ENV NPM_CONFIG_LOGLEVEL info

COPY --from=download /nodejs /nodejs
COPY --from=download [ "/Program Files (x86)/yarn", "/yarn" ]

RUN $env:PATH = 'C:\nodejs;C:\yarn\bin;{0}' -f $env:PATH ; \
    [Environment]::SetEnvironmentVariable('PATH', $env:PATH, [EnvironmentVariableTarget]::Machine)

CMD [ "node.exe" ]

FROM build

RUN Set-ExecutionPolicy Bypass -Scope Process -Force; iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
RUN choco install git -y

RUN $url = 'https://cygwin.com/setup-x86_64.exe'; \
    Invoke-WebRequest -Uri $url -OutFile 'C:/setup-x86_64.exe'; \
    New-Item -ItemType directory -Path 'C:/tmp'; \
    Start-Process "C:/setup-x86_64.exe" -NoNewWindow -Wait -PassThru -ArgumentList @('-q','-v','-n','-B','-R','C:/cygwin64','-l','C:/tmp','-s','http://ctm.crouchingtigerhiddenfruitbat.org/pub/cygwin/circa/64bit/2019/03/06/161558','-X','-P', 'default'); \
    Start-Process "C:/cygwin64/bin/cygcheck.exe" -NoNewWindow -Wait -PassThru -ArgumentList @('-c'); \
    Remove-Item -Path 'C:/tmp' -Force -Recurse -ErrorAction Ignore;

WORKDIR C:/cf-container-logger

COPY package.json ./

COPY yarn.lock ./

RUN yarn install --frozen-lockfile --production

COPY . ./

LABEL owner="codefresh.io"

CMD ["powershell",  "./lib/forever.ps1"]