# Custom docker-cli image for dind-pod.yaml's docker-cli container —
# bakes in everything the pipeline stages need at runtime (git, yq,
# bash, python3 + pip/venv for runHooks' python hooks, curl) so nothing
# gets apk-installed or curl-downloaded on every single build. Rebuild
# and push this (see the one-off build commands in the commit that
# added this file) whenever this list changes; dind-pod.yaml pins the
# resulting image tag explicitly, so a rebuild doesn't silently roll
# out until that pin is also bumped.
FROM docker:27-cli

RUN apk add --no-cache git bash python3 py3-pip py3-virtualenv curl \
    && curl -sL -o /usr/local/bin/yq https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 \
    && chmod +x /usr/local/bin/yq