image:
  distribution: "alpinelinux"
  release: "3.18"

source:
  downloader: alpinelinux-http
  same_as: 3.12
  keyserver: keys.openpgp.org
#InitDownloadREPO
  url: http://dl-4.alpinelinux.org/alpine/
  keys:
  - |-
    -----BEGIN PGP PUBLIC KEY BLOCK-----
    Version: GnuPG v2

    mQINBFSIEDwBEADbib88gv1dBgeEez1TIh6A5lAzRl02JrdtYkDoPr5lQGYv0qKP
    lWpd3jgGe8n90krGmT9W2nooRdyZjZ6UPbhYSJ+tub6VuKcrtwROXP2gNNqJA5j3
    vkXQ40725CVig7I3YCpzjsKRStwegZAelB8ZyC4zb15J7YvTVkd6qa/uuh8H21X2
    h/7IZJz50CMxyz8vkdyP2niIGZ4fPi0cVtsg8l4phbNJ5PwFOLMYl0b5geKMviyR
    MxxQ33iNa9X+RcWeR751IQfax6xNcbOrxNRzfzm77fY4KzBezcnqJFnrl/p8qgBq
    GHKmrrcjv2MF7dCWHGAPm1/vdPPjUpOcEOH4uGvX7P4w2qQ0WLBTDDO47/BiuY9A
    DIwEF1afNXiJke4fmjDYMKA+HrnhocvI48VIX5C5+C5aJOKwN2EOpdXSvmsysTSt
    gIc4ffcaYugfAIEn7ZdgcYmTlbIphHmOmOgt89J+6Kf9X6mVRmumI3cZWetf2FEV
    fS9v24C2c8NRw3LESoDT0iiWsCHcsixCYqqvjzJBJ0TSEIVCZepOOBp8lfMl4YEZ
    BVMzOx558LzbF2eR/XEsr3AX7Ga1jDu2N5WzIOa0YvJl1xcQxc0RZumaMlZ81dV/
    uu8G2+HTrJMZK933ov3pbxaZ38/CbCA90SBk5xqVqtTNAHpIkdGj90v2lwARAQAB
    tCVOYXRhbmFlbCBDb3BhIDxuY29wYUBhbHBpbmVsaW51eC5vcmc+iQI2BBMBCAAg
    BQJUiBA8AhsDBQsJCAcCBhUICQoLAgMWAgECHgECF4AACgkQKTrNCQfZSVrcNxAA
    mEzX9PQaczzlPAlDe3m1AN0lP6E/1pYWLBGs6qGh18cWxdjyOWsO47nA1P+cTGSS
    AYe4kIOIx9kp2SxObdKeZTuZCBdWfQu/cuRE12ugQQFERlpwVRNd6NYuT3WyZ7v8
    ZXRw4f33FIt4CSrW1/AyM/vrA+tWNo7bbwr/CFaIcL8kINPccdFOpWh14erONd/P
    Eb3gO81yXIA6c1Vl4mce2JS0hd6EFohxS5yMQJMRIS/Zg8ufT3yHJXIaSnG+KRP7
    WWLR0ZaLraCykYi/EW9mmQ49LxQqvKOgjpRW9aNgDA+arKl1umjplkAFI1GZ0/qA
    sgKm4agdvLGZiCZqDXcRWNolG5PeOUUpim1f59pGnupZ3Rbz4BF84U+1uL+yd0OR
    5Y98AxWFyq0dqKz/zFYwQkMVnl9yW0pkJmP7r6PKj0bhWksQX+RjYPosj3wxPZ7i
    SKMX7xZaqon/CHpH9/Xm8CabGcDITrS6h+h8x0FFT/MV/LKgc3q8E4mlXelew1Rt
    xK4hzXFpXKl0WcQg54fj1Wqy47FlkArG50di0utCBGlmVZQA8nqE5oYkFLppiFXz
    1SXCXojff/XZdNF2WdgV8aDKOYTK1WDPUSLmqY+ofOkQL49YqZ9M5FR8hMAbvL6e
    4CbxVXCkWJ6Q9Lg79AzS3pvOXCJ/CUDQs7B30v026Ba5Ag0EVIgQPAEQAMHuPAv/
    B0KP9SEA1PsX5+37k46lTP7lv7VFd7VaD1rAUM/ZyD2fWgrJprcCPEpdMfuszfOH
    jGVQ708VQ+vlD3vFoOZE+KgeKnzDG9FzYXXPmxkWzEEqI168ameF/LQhN12VF1mq
    5LbukiAKx2ytb1I8onvCvNJDvH1D/3BxSj7ThV9bP/bFufcOHFBMFwtyBmUaR5Wx
    96Bq+7DEbTrxhshoQgUqILEudUyhZa05/TrpUvC4f8qc0deaqJFO1zD6guZxRWZd
    SWJdcFzTadyg36P4eyFMxa1Ft7BlDKdKLAFlCGgR0jfOnKRmdRKGRNFTLQ68aBld
    N4wxBuMwe0tmRw9zYwWwD43Aq9E26YtuxVR1wb3zUmi+47QH4ANAzMioimE9Mj5S
    qYrgzQJ0IGwIjBt+HNzHvYX+kyMuVFK41k2Vo6oUOVHuQMu3UgLvSPMsyw69d+Iw
    K/rrsQwuutrvJ8Qcda3rea1HvWBVcY/uyoRsOsCS7itS6MK6KKTKaW8iskmEb2/h
    Q1ZB1QaWm2sQ8Xcmb3QZgtyBfZKuC95T/mAXPT0uET6bTpP5DdEi3wFs+qw/c9FZ
    SNDZ4hfNuS24d2u3Rh8LWt/U83ieAutNntOLGhvuZm1jLYt2KvzXE8cLt3V75/ZF
    O+xEV7rLuOtrHKWlzgJQzsDp1gM4Tz9ULeY7ABEBAAGJAh8EGAEIAAkFAlSIEDwC
    GwwACgkQKTrNCQfZSVrIgBAArhCdo3ItpuEKWcxx22oMwDm+0dmXmzqcPnB8y9Tf
    NcocToIXP47H1+XEenZdTYZJOrdqzrK6Y1PplwQv6hqFToypgbQTeknrZ8SCDyEK
    cU4id2r73THTzgNSiC4QAE214i5kKd6PMQn7XYVjsxvin3ZalS2x4m8UFal2C9nj
    o8HqoTsDOSRy0mzoqAqXmeAe3X9pYme/CUwA6R8hHEgX7jUhm/ArVW5wZboAinw5
    BmKBjWiIwT1vxfvwgbC0EA1O24G4zQqEJ2ILmcM3RvWwtFFWasQqV7qnKdpD8EIb
    oPa8Ocl7joDc5seK8BzsI7tXN4Yjw0aHCOlZ15fWHPYKgDFRQaRFffODPNbxQNiz
    Yru3pbEWDLIUoQtJyKl+o2+8m4aWCYNzJ1WkEQje9RaBpHNDcyen5yC73tCEJsvT
    ZuMI4Xqc4xgLt8woreKE57GRdg2fO8fO40X3R/J5YM6SqG7y2uwjVCHFBeO2Nkkr
    8nOno+Rbn2b03c9MapMT4ll8jJds4xwhhpIjzPLWd2ZcX/ZGqmsnKPiroe9p1VPo
    lN72Ohr9lS+OXfvOPV2N+Ar5rCObmhnYbXGgU/qyhk1qkRu+w2bBZOOQIdaCfh5A
    Hbn3ZGGGQskgWZDFP4xZ3DWXFSWMPuvEjbmUn2xrh9oYsjsOGy9tyBFFySU2vyZP
    Mkc=
    =FcYC
    -----END PGP PUBLIC KEY BLOCK-----

targets:
  lxc:
    #create-message: |
    #  You just created an {{ image.description }} container.

    config:
      - type: all
        before: 5
        content: |-
          lxc.include = LXC_TEMPLATE_CONFIG/sabayon.common.conf

      - type: user
        before: 5
        content: |-
          lxc.include = LXC_TEMPLATE_CONFIG/sabayon.userns.conf

      - type: all
        after: 4
        content: |-
          lxc.include = LXC_TEMPLATE_CONFIG/common.conf

      - type: user
        after: 4
        content: |-
          lxc.include = LXC_TEMPLATE_CONFIG/userns.conf

      - type: all
        content: |-
          lxc.arch = {{ image.architecture_kernel }}

files:
- path: /etc/hostname
  generator: hostname

- path: /etc/hosts
  generator: hosts
  
- path: /var/lib/dbus/machine-id
  generator: remove

- path: /etc/netplan/10-lxc.yaml
  generator: dump
  content: |-
    

- path: /etc/network/interfaces
  generator: dump
  content: |-
    auto eth0
    iface eth0 inet dhcp
    hostname $(hostname)

- path: /etc/inittab
  generator: dump
  content: |-
    # /etc/inittab
    ::sysinit:/sbin/openrc sysinit
    ::sysinit:/sbin/openrc boot
    ::wait:/sbin/openrc default

    # Set up a couple of getty's
    ::respawn:/sbin/getty 38400 console
    #tty1::respawn:/sbin/getty 38400 tty1
    #tty2::respawn:/sbin/getty 38400 tty2
    #tty3::respawn:/sbin/getty 38400 tty3
    #tty4::respawn:/sbin/getty 38400 tty4

    # Stuff to do for the 3-finger salute
    ::ctrlaltdel:/sbin/reboot

    # Stuff to do before rebooting
    ::shutdown:/sbin/openrc shutdown

- path: /etc/inittab
  generator: template
  name: inittab
  content: |-
    # /etc/inittab
    ::sysinit:/sbin/openrc sysinit
    ::sysinit:/sbin/openrc boot
    ::wait:/sbin/openrc default

    # Set up a couple of getty's
    ::respawn:/sbin/getty 38400 console

    # Stuff to do for the 3-finger salute
    ::ctrlaltdel:/sbin/reboot

    # Stuff to do before rebooting
    ::shutdown:/sbin/openrc shutdown

packages:
  manager: apk
  update: true
  cleanup: true
  sets:
  - packages:
    - alpine-base
    - tzdata
    action: install

  #PKGS for Default
  - packages:
    - nano
    - openssh-server
    action: install
    variants:
    - default

  #PKGS for jenkinsAPKbuilder
  - packages:
    - nano
    - openssh-server
    - git
    - doas
    - doas-sudo-shim
    - alpine-sdk
    action: install
    variants:
    - jenkinsAPKbuilder

  - packages:
    - openjdk17-jre-headless
    action: install
    variants:
    - jenkinsAPKbuilder
    architectures:
    - aarch64
    - x86_64

  - packages:
    - openjdk8-jre
    action: install
    variants:
    - jenkinsAPKbuilder
    architectures:
    - armhf
    - armv7

  repositories:
  - name: /etc/apk/repositories
    url: |-
      #StartREPOS
      http://dl-4.alpinelinux.org/alpine/v{{ image.release }}/main
      http://dl-4.alpinelinux.org/alpine/v{{ image.release }}/community
      #EndREPOS
      
actions:
- trigger: post-unpack
  action: |-
    #!/bin/sh
    sed -i '/dl-cdn.alpinelinux.org/d' /etc/apk/repositories

- trigger: post-packages
  action: |-
    #!/bin/sh
    set -eux

    # Rewrite configuration for LXC
    sed -i 's/#rc_sys=""/rc_sys="lxc"/' /etc/rc.conf

    # Enable services
    for svc_name in bootmisc syslog; do
        ln -s /etc/init.d/${svc_name} /etc/runlevels/boot/${svc_name}
    done

    for svc_name in networking crond; do
        ln -s /etc/init.d/${svc_name} /etc/runlevels/default/${svc_name}
    done

    #Set TimeZone
    echo "Europe/Amsterdam" > /etc/timezone
    ln -s /usr/share/zoneinfo/Europe/Amsterdam /etc/localtime

- trigger: post-packages
  action: |-
    #!/bin/sh
    adduser --disabled-password --gecos "" jenkins
    passwd jenkins -d $(openssl rand -base64 64)
    addgroup jenkins abuild
    chgrp abuild /var/cache/distfiles
    chmod g+w /var/cache/distfiles
    echo "permit nopass root" > /etc/doas.d/jenkinsAPKbuilder.conf
    echo "permit nopass jenkins" >> /etc/doas.d/jenkinsAPKbuilder.conf
    chmod 0600 /etc/doas.d/jenkinsAPKbuilder.conf
    doas -u jenkins abuild-keygen -a -i -n
    rc-update add sshd
    doas -u jenkins  mkdir -p /home/jenkins/.ssh
    doas -u jenkins echo "ssh-rsa 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 BuilderNodes@Jenkins" > /home/jenkins/.ssh/authorized_keys 
  variants:
  - jenkinsAPKbuilder

mappings:
  architecture_map: alpinelinux