#
#   Licensed to the Apache Software Foundation (ASF) under one
#   or more contributor license agreements.  See the NOTICE file
#   distributed with this work for additional information
#   regarding copyright ownership.  The ASF licenses this file
#   to you under the Apache License, Version 2.0 (the
#   "License"); you may not use this file except in compliance
#   with the License.  You may obtain a copy of the License at
#
#     https://www.apache.org/licenses/LICENSE-2.0
#
#   Unless required by applicable law or agreed to in writing,
#   software distributed under the License is distributed on an
#   "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
#   KIND, either express or implied.  See the License for the
#   specific language governing permissions and limitations
#   under the License.
#
FROM debian:bullseye-slim
# Setup openldap package:
RUN apt-get update && apt-get install -y --no-install-recommends \
         gnupg \
         ca-certificates \
   && apt-key adv --keyserver keyserver.ubuntu.com --recv-keys DA26A148887DCBEB \
   && echo 'deb https://repo.symas.com/repo/deb/main/release25 bullseye main' > /etc/apt/sources.list.d/soldap-release25.list \
   # Install openldap
   && apt-get update && apt-get install -y --no-install-recommends \
         symas-openldap-clients \
         symas-openldap-server \
   && rm -rf /var/lib/apt/lists/* \
   && rm /etc/apt/sources.list.d/soldap-release25.list

# Add fortress schema and slapd config
ADD ldap/schema/*.schema /opt/symas/etc/openldap/schema/
ADD src/docker/openldap-for-apache-fortress-tests/slapd.conf /opt/symas/etc/openldap/
# Create run and db directories, create slapd user and group, prepare runtime env:
RUN mkdir -p /var/run/openldap \
 && mkdir -p "/var/symas/openldap-data/dc=example,dc=com" \
 && mkdir -p "/var/symas/openldap-data/cn=log" \
 && groupadd openldap \
 && useradd openldap -g openldap \
 && chown -R openldap:openldap /opt/symas/lib/ \
 && chown -R openldap:openldap /var/run/openldap/ \
 && chown -R openldap:openldap /opt/symas/etc/openldap/ \
 && chown -R openldap:openldap /var/symas/openldap-data/ \
 && /opt/symas/sbin/slaptest -u -f /opt/symas/etc/openldap/slapd.conf -u
EXPOSE 389
# Start daemon as non-root user:
CMD ["/opt/symas/lib/slapd", "-d", "stats", "-u", "openldap", "-g", "openldap", "-h", "ldap:/// ldaps:///"]