FROM registry.access.redhat.com/ubi8/ubi:latest

RUN curl -o /etc/pki/ca-trust/source/anchors/rh-root.crt https://gitlab.com/cki-project/containers/-/raw/main/files/rh-root.crt
RUN update-ca-trust

RUN rm -fv /etc/yum.repos.d/*
RUN curl -o /etc/yum.repos.d/rhel8.repo https://gitlab.com/cki-project/containers/-/raw/main/files/rhel8.repo

RUN echo '69442198804d44990c5113dede186076fd114e9d1ab75d5ffdbbe235d91013fd  /usr/lib64/python3.6/site-packages/libcomps/_libpycomps.so' > before.sha256
RUN echo '24a141069ef51ce8bd1479cebd0e24f17c47da044b5d5f366853210eb7b89466  /usr/lib64/python3.6/site-packages/libcomps/_libpycomps.so' > after.sha256

RUN dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
RUN rpm --verify --all || true
RUN sha256sum -c before.sha256

RUN dnf -y upgrade
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install libkcapi-hmaccalc openssl-devel perl-generators
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install dwarves libbpf-devel
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install krb5-devel
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install libxslt-devel
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install jq
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install which
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install cpio
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install createrepo
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install asciidoc audit-libs-devel bc binutils-devel bison bzip2 ccache diffstat elfutils-devel elfutils-libelf-devel flex gcc gcc-plugin-devel gettext git glibc-devel glibc-static gzip hostname java-devel kmod libbabeltrace-devel make m4 ncurses-devel net-tools newt-devel openssh-clients openssl patchutils pciutils-devel perl-ExtUtils-Embed procmail procps-ng redhat-rpm-config rng-tools rpm-build rsync tar tree wget xmlto xz xz-devel zlib-devel
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install opencsd-devel
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install kernel-rpm-macros
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install numactl-devel
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install pesign
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install glibc-langpack-en
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256

RUN dnf -y install annobin bpftool dnf-plugins-core kabi-dw libcap-devel libcap-ng-devel libmnl-devel llvm-toolset nss-tools python3 python3-devel python3-pip python3-sphinx
RUN rpm --verify --all || true
RUN sha256sum -c after.sha256