# The cloud runner image plus a Docker engine, for jobs that use Docker actions (src/server/ci/runner-sizes.ts).
# dockerd is not started here: the job script starts it on first use with the flags Cloudflare Containers need
# (no iptables, no IP forwarding), so jobs that never reach a Docker step pay nothing for it.
FROM node:24-bookworm
RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates curl unzip jq coreutils gnupg \
  && install -m 0755 -d /etc/apt/keyrings \
  && curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc \
  && chmod a+r /etc/apt/keyrings/docker.asc \
  && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian bookworm stable" > /etc/apt/sources.list.d/docker.list \
  && apt-get update && apt-get install -y --no-install-recommends docker-ce docker-ce-cli containerd.io docker-buildx-plugin \
  && rm -rf /var/lib/apt/lists/*
RUN curl -fsSL https://bun.sh/install | bash && ln -s /root/.bun/bin/bun /usr/local/bin/bun
WORKDIR /workspace
CMD ["sleep", "infinity"]