FROM docker.io/almalinux/9-minimal:latest as build

RUN microdnf update -y && microdnf install -y ca-certificates \
  gnupg2 \
  libatomic \
  wget \
  tar \
  gzip \
  && microdnf clean all && rm -fr /tmp/* /var/tmp/*

ARG BVERSION={{bitcoin_version}}
ARG CLVERSION={{clightning_version}}
ARG CLPLATFORM={{clightning_platform}}
ARG BITCOIN_CORE_SIGNATURE=71A3B16735405025D447E8F274810B012346C9A6

RUN mkdir /tmp/bitcoin && cd /tmp/bitcoin \
    && gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys ${BITCOIN_CORE_SIGNATURE} \
    && wget https://bitcoincore.org/bin/bitcoin-core-${BVERSION}/SHA256SUMS.asc \
    https://bitcoincore.org/bin/bitcoin-core-${BVERSION}/SHA256SUMS \
    https://bitcoincore.org/bin/bitcoin-core-${BVERSION}/bitcoin-${BVERSION}-x86_64-linux-gnu.tar.gz \
    && gpg --verify --status-fd 1 --verify SHA256SUMS.asc SHA256SUMS 2>/dev/null | grep "^\[GNUPG:\] VALIDSIG.*${BITCOIN_CORE_SIGNATURE}\$" \
    && sha256sum --ignore-missing --check SHA256SUMS \
    && tar -xzvf bitcoin-${BVERSION}-x86_64-linux-gnu.tar.gz --strip=1 -C / \
    && rm -v /bin/test_bitcoin /bin/bitcoin-qt /bin/bitcoind \
	&& mkdir /tmp/clightning && cd /tmp/clightning \
	&& wget https://raw.githubusercontent.com/ElementsProject/lightning/master/contrib/keys/cdecker.txt \
	&& wget https://raw.githubusercontent.com/ElementsProject/lightning/master/contrib/keys/rustyrussell.txt \
	&& gpg --import cdecker.txt rustyrussell.txt \
	&& wget https://github.com/ElementsProject/lightning/releases/download/v${CLVERSION}/clightning-v${CLVERSION}-${CLPLATFORM}.tar.gz \
	&& wget https://https://github.com/ElementsProject/lightning/releases/download/v${CLVERSION}/SHA256SUMS \
	&& wget https://github.com/ElementsProject/lightning/releases/download/v${CLVERSION}/SHA256SUMS.asc \
	&& gpg --verify --status-fd 1 --verify SHA256SUMS.asc SHA256SUMS 2>/dev/null | grep "^\[GNUPG:\].VALIDSIG" \
    && sha256sum --ignore-missing --check SHA256SUMS \
	&& tar -xzvf clightning-v${CLVERSION}-${CLPLATFORM}.tar.gz -C /

COPY entrypoint.sh /entrypoint.sh

RUN chmod +x /entrypoint.sh

EXPOSE 9735 9835

ENTRYPOINT ["/entrypoint.sh"]

CMD ["lightningd"]