FROM ubuntu:22.04

ENV DEBIAN_FRONTEND=noninteractive \
    TZ=Asia/Shanghai

ARG USE_INTRANET=false
ARG ARGUS_BUILD_UID=2133
ARG ARGUS_BUILD_GID=2015

ENV ARGUS_BUILD_UID=${ARGUS_BUILD_UID} \
    ARGUS_BUILD_GID=${ARGUS_BUILD_GID}

# Optional intranet mirror for build-time apt
RUN if [ "$USE_INTRANET" = "true" ]; then \
      echo "Configuring intranet apt sources..." && \
      cp /etc/apt/sources.list /etc/apt/sources.list.bak && \
      echo "deb [trusted=yes] http://10.68.64.1/ubuntu2204/ jammy main" > /etc/apt/sources.list && \
      echo 'Acquire::https::Verify-Peer "false";' > /etc/apt/apt.conf.d/99disable-ssl-check && \
      echo 'Acquire::https::Verify-Host "false";' >> /etc/apt/apt.conf.d/99disable-ssl-check; \
    fi

# Pre-install curl and common diagnostics to avoid runtime apt installs
RUN set -eux; \
    apt-get update; \
    apt-get install -y --no-install-recommends \
      curl ca-certificates tzdata \
      procps iproute2 net-tools lsof; \
    rm -rf /var/lib/apt/lists/*

USER root
CMD ["bash", "-lc", "sleep infinity"]