cdupuis/frontend:dhi-docker-kit

schemaVersion: "2"
kind: mixin
name: dhi-docker
permissions:
    network:
        allow:
            - dhi.io
            - index.docker.io
            - registry-1.docker.io
            - auth.docker.io
            - production.cloudflare.docker.com
ports:
    - container: 22
      protocol: tcp
      name: ssh
setup:
    startup:
        - command:
            - sh
            - -c
            - |
              set -e
              # Wait for the in-sandbox docker daemon (DinD) to accept connections.
              for _ in $(seq 1 60); do
                docker info >/dev/null 2>&1 && break
                sleep 1
              done
              if ! docker buildx ls | grep -q "dhi"; then
                docker buildx create \
                  --name dhi \
                  --driver docker-container \
                  --driver-opt image=dhi/buildkit:0-dev \
                  --driver-opt default-load=true \
                  --driver-opt env.BUILDKIT_STEP_LOG_MAX_SIZE=-1 \
                  --driver-opt env.BUILDKIT_STEP_LOG_MAX_SPEED=-1 \
                  --driver-opt "env.HTTP_PROXY=http://gateway.docker.internal:3128" \
                  --driver-opt "env.HTTPS_PROXY=http://gateway.docker.internal:3128" \
                  --driver-opt "env.http_proxy=http://gateway.docker.internal:3128" \
                  --driver-opt "env.https_proxy=http://gateway.docker.internal:3128" \
                  --driver-opt '"env.no_proxy=localhost,127.0.0.1,::1,gateway.docker.internal"' \
                  --driver-opt '"env.NO_PROXY=localhost,127.0.0.1,::1,gateway.docker.internal"' \
                  --driver-opt "env.JAVA_TOOL_OPTIONS=-Dhttp.proxyHost=gateway.docker.internal -Dhttp.proxyPort=3128 -Dhttps.proxyHost=gateway.docker.internal -Dhttps.proxyPort=3128 -Dhttp.nonProxyHosts=localhost|127.*" \
                  --bootstrap \
                  --use
              fi
              docker cp /etc/ssl/certs/ca-certificates.crt buildx_buildkit_dhi0:/etc/ssl/certs/ca-certificates.crt
          user: agent
          description: Create the proxy-aware 'dhi' buildx builder and seed its CA certs