#!/bin/sh

# Build the OxygenFlow OpenTofu image and write it as a root file system

# tarball for `flow rootfs import`. Rebuild when OpenTofu or a pinned

# provider version, TFLint or its Google ruleset changes.

set -eu

here=$(cd "$(dirname "$0")" && pwd)

out=${1:-$here/oxygenflow-tofu.tar}

TOFU_VERSION=1.13.1

TOFU_SHA256=8ccbc6f8ee21d2827715f3c6e08a9b3e0209b1e62057c05067ef117e047c1a80

TFLINT_VERSION=0.64.0

TFLINT_SHA256=cca9d13e2e1d7a2c627af60ff899a3c9b74212899416aeb96ec764d2ef954537

TFLINT_GOOGLE_VERSION=0.40.0

TFLINT_GOOGLE_SHA256=a5c02b3de937456de2521155831eaf1cc876014a21445bf7dd1621654511fe28

docker build -q -t oxygenflow-tofu \

    --build-arg TOFU_VERSION=$TOFU_VERSION --build-arg TOFU_SHA256=$TOFU_SHA256 \

    --build-arg TFLINT_VERSION=$TFLINT_VERSION --build-arg TFLINT_SHA256=$TFLINT_SHA256 \

    --build-arg TFLINT_GOOGLE_VERSION=$TFLINT_GOOGLE_VERSION --build-arg TFLINT_GOOGLE_SHA256=$TFLINT_GOOGLE_SHA256 \

    "$here"

id=$(docker create oxygenflow-tofu)

docker export "$id" -o "$out"

docker rm "$id" >/dev/null

echo "$out"