ARG TAG
FROM job79/fedora:${TAG}
USER root

RUN arch="$(arch)" \
  sops_url="$(curl -s https://api.github.com/repos/getsops/sops/releases/latest | jq -r ".assets[] | select(.name | test(\"sops-.*.$arch.rpm\$\")) | .browser_download_url")" \
  echo "geheheeh $arch $sops_url"

RUN --mount=type=cache,id=dnf-cache,target=/var/cache/libdnf5 \
  arch="$(arch)" \
  sops_url="$(curl -s https://api.github.com/repos/getsops/sops/releases/latest | jq -r ".assets[] | select(.name | test(\"sops-.*.$arch.rpm\$\")) | .browser_download_url")" \
  dnf -y --setopt=keepcache=1 install kubectl k9s openssl age "$sops_url" && \
  curl -sL https://talos.dev/install | sh && \
  curl -s https://fluxcd.io/install.sh | bash

USER user