# Build inside Alpine so the binary does not depend on the host Nix store.
FROM alpine:latest AS build
RUN apk add --no-cache build-base curl-dev ncurses-dev pkgconf python3
WORKDIR /src
COPY . .
# Skip WebUI asset embedding quirks in minimal images if needed; keep default on.
RUN make -j"$(nproc)" cst-agent

FROM alpine:latest
RUN apk add --no-cache libcurl ncurses-libs ca-certificates
COPY --from=build /src/cst-agent /usr/local/bin/cst-agent
ENV XDG_CONFIG_HOME=/realm-config
WORKDIR /work
ENTRYPOINT ["cst-agent"]