FROM docker.io/library/alpine:3

RUN apk --no-cache update

RUN apk -U --no-cache add \
    doas doas-sudo-shim \
    bash less openvi \
    coreutils grep gawk perl \
    curl bind-tools

RUN adduser -h /home/cli -s /bin/bash -D cli cli && \
    addgroup cli wheel && \
    echo "permit nopass :wheel" > /etc/doas.d/allow-wheel.conf

ADD --chown=cli:cli home /home/cli

WORKDIR /home/cli

USER cli

CMD ["/bin/bash", "-l"]