FROM alpine:3

RUN apk -U --no-cache add \
  doas doas-sudo-shim \
  bash less \
  coreutils grep gawk perl 

RUN adduser -h /home/cli -s /bin/bash -D cli cli && \
    addgroup cli wheel && \
    echo "permit nopass :wheel" > /etc/doas.d/allow-wheel.conf

COPY home /home/cli

RUN chown -R cli:cli /home/cli

WORKDIR /home/cli

USER cli

CMD ["/bin/bash", "-l"]