FROM alpine:3.20

# Node 20 + git + podman + tini + bash
RUN apk add --no-cache nodejs-current npm git podman ca-certificates tini bash

# Non-root user 1001:1001 to match your setup
RUN addgroup -g 1001 ci \
 && adduser -D -u 1001 -G ci -h /home/ci ci \
 && mkdir -p /home/ci/.config && chown -R 1001:1001 /home/ci

ENV HOME=/home/ci SHELL=/bin/bash
USER 1001:1001
WORKDIR /workspace

ENTRYPOINT ["/sbin/tini","--"]
CMD ["tail","-f","/dev/null"]