ARG TAG
FROM job79/fedora:${TAG}
USER root

RUN --mount=type=cache,target=/var/cache/dnf \
  dnf -y install kubectl k9s openssl age "$(curl -s https://api.github.com/repos/getsops/sops/releases/latest | jq -r '.assets[] | select(.name | test("sops-.*.x86_64.rpm$")) | .browser_download_url')" && \
  dnf clean all && \
  curl -sL https://talos.dev/install | sh && \
  curl -s https://fluxcd.io/install.sh | bash

USER user