Dockerfile.multiarch

# Multi-architecture Dockerfile for Guardian Agent (Rust)
# Supports: linux/amd64, linux/arm64, linux/arm/v7

# Build stage
FROM --platform=$BUILDPLATFORM rust:1.75-slim AS builder

ARG TARGETPLATFORM
ARG BUILDPLATFORM

# Install build dependencies
RUN apt-get update && apt-get install -y \
    pkg-config \
    libssl-dev \
    gcc \
    && rm -rf /var/lib/apt/lists/*

# Install cross-compilation toolchain if needed
RUN case ${TARGETPLATFORM} in \
    "linux/amd64")  rustup target add x86_64-unknown-linux-gnu ;; \
    "linux/arm64")  rustup target add aarch64-unknown-linux-gnu && \
                    apt-get update && apt-get install -y gcc-aarch64-linux-gnu ;; \
    "linux/arm/v7") rustup target add armv7-unknown-linux-gnueabihf && \
                    apt-get update && apt-get install -y gcc-arm-linux-gnueabihf ;; \
    esac

WORKDIR /app

# Copy manifests
COPY Cargo.toml Cargo.lock ./

# Copy source
COPY src ./src
COPY build.rs ./

# Determine target architecture
RUN case ${TARGETPLATFORM} in \
    "linux/amd64")  TARGET=x86_64-unknown-linux-gnu ;; \
    "linux/arm64")  TARGET=aarch64-unknown-linux-gnu ;; \
    "linux/arm/v7") TARGET=armv7-unknown-linux-gnueabihf ;; \
    *)              TARGET=x86_64-unknown-linux-gnu ;; \
    esac && \
    cargo build --release --target $TARGET --features server

# Runtime stage
FROM --platform=$TARGETPLATFORM debian:bookworm-slim

# Install runtime dependencies
RUN apt-get update && apt-get install -y \
    ca-certificates \
    libssl3 \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app

# Copy binary from builder (architecture-specific)
COPY --from=builder /app/target/*/release/guardian /usr/local/bin/guardian

# Create log directory
RUN mkdir -p /var/lib/guardian

# Use non-root user
RUN useradd -r -u 1000 guardian && \
    chown -R guardian:guardian /app /var/lib/guardian

USER guardian

# Expose port
EXPOSE 8080

# Run server
CMD ["guardian"]