## renovate: datasource=docker depName=docker.gitea.com/runner-images
FROM docker.gitea.com/runner-images:ubuntu-latest@sha256:30ad0c51af70f33f852a760ed9b94fc01a537d4eb8d57258ae94be5aae7ceefd

RUN set -eux; \
    apt-get update; \
    apt-get install -y --no-install-recommends rsync; \
    rm -rf /var/lib/apt/lists/*; \
    rsync --version

## renovate: datasource=github-releases depName=getsops/sops
ARG SOPS_VERSION=v3.13.3

RUN set -eux; \
    arch=$(dpkg --print-architecture); \
    asset="sops-${SOPS_VERSION}.linux.${arch}"; \
    url="https://github.com/getsops/sops/releases/download/${SOPS_VERSION}"; \
    curl -fsSL -o "/tmp/$asset" "$url/$asset"; \
    curl -fsSL -o /tmp/checksums.txt "$url/sops-${SOPS_VERSION}.checksums.txt"; \
    (cd /tmp && grep " ${asset}$" checksums.txt | sha256sum -c -); \
    install -m 0755 "/tmp/$asset" /usr/local/bin/sops; \
    rm -f "/tmp/$asset" /tmp/checksums.txt; \
    sops --version
