# see: publish-release.sh to build/run this

FROM node:10

ENV DEBIAN_FRONTEND=noninteractive

RUN \
  # Setup support for HTTPS apt sources
  apt update -y && \
  apt install -y apt-transport-https ca-certificates && \
  # Setup Yarn apt source
  curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add - && \
  echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list && \
  apt update -y

RUN \
  apt install -y \
    git \
    # Needed for yarn to build gl (see: https://github.com/yarnpkg/yarn/issues/1987)
    node-gyp xserver-xorg-dev libxi-dev libxext-dev libpango1.0-dev \
    yarn && \
  # npm-run-all is required to bootstrap existing package.json lines, which use "run-s"
  npm install -g npm-run-all && \
  mkdir -p /src

WORKDIR /src

ADD . .

# publish-release-cmd.sh will use `docker run --env NPM_TOKEN` for npm auth
ARG NPM_TOKEN

# Now setup npm/yarn to find the authToken in ${NPM_TOKEN} at docker run time
# Note the single quotes: this does NOT leak your NPM_TOKEN
RUN echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' > ~/.npmrc

CMD yarn publish