load("@container_structure_test//:defs.bzl", "container_structure_test")
load("@rules_apko//apko:defs.bzl", "apko_image")
load("@rules_oci//oci:defs.bzl", "oci_image", "oci_load")
load("@rules_pkg//:pkg.bzl", "pkg_tar")
load("//hack/build/rules/container:index.bzl", "container_push")

pkg_tar(
    name = "config",
    extension = "tgz",
    files = {
        ":sysctl.conf": "sysctl.conf",
    },
    mode = "440",
    package_dir = "/etc/",
    tags = [
        "manual",
        "no-remote-cache",
    ],
)

pkg_tar(
    name = "entrypoint",
    extension = "tgz",
    files = {
        ":wg-sync.sh": "wg-sync.sh",
    },
    mode = "550",
    package_dir = "/entrypoint",
    tags = [
        "manual",
        "no-remote-cache",
    ],
)

apko_image(
    name = "wireguard_base",
    config = "apko.yaml",
    contents = "@wireguard_lock//:contents",
    tag = "wireguard_base:latest",
    tags = ["requires-network"],
)

oci_image(
    name = "wireguard-image",
    base = ":wireguard_base",
    entrypoint = ["/entrypoint/wg-sync.sh"],
    tags = [
        "manual",
        "no-remote-cache",
    ],
    tars = [
        ":entrypoint",
        ":config",
    ],
)

oci_load(
    name = "wireguard-load",
    image = ":wireguard-image",
    repo_tags = ["latest"],
    tags = ["manual"],
)

filegroup(
    name = "wireguard.tar",
    srcs = [":wireguard-load"],
    output_group = "tarball",
)

container_structure_test(
    name = "wireguard-test",
    configs = [":wireguard-container-test.yaml"],
    driver = "tar",
    image = ":wireguard.tar",
)

container_push(
    image = ":wireguard-image",
    image_name = "wireguard-alpine",
    repository_file = "//hack/build/rules/container:workloads-repo",
    tags = ["manual"],
)