ARG TAG
FROM job79/fedora:${TAG}
USER root

RUN arch="$(arch)" \
  sops_url="$(curl -s https://api.github.com/repos/getsops/sops/releases/latest | jq -r '.assets[] | select(.name | test("sops-.*.$arch.rpm$")) | .browser_download_url')" \
  echo "$sops_url"
RUN --mount=type=cache,id=dnf-cache,target=/var/cache/libdnf5 \
  arch="$(arch)" \
  sops_url="$(curl -s https://api.github.com/repos/getsops/sops/releases/latest | jq -r '.assets[] | select(.name | test("sops-.*.$arch.rpm$")) | .browser_download_url')" \
  dnf -y --setopt=keepcache=1 install kubectl k9s openssl age "$sops_url" && \
  curl -sL https://talos.dev/install | sh && \
  curl -s https://fluxcd.io/install.sh | bash

USER user