# TODO test alpine base image
FROM docker.io/debian:bullseye-slim

# TODO test if ca-certificates is required at runtime (cert pinned?)
RUN apt-get update \
    && apt-get install --no-install-recommends --yes \
        curl
# TODO merge
RUN apt-get install --no-install-recommends --yes \
        ca-certificates
# TODO merge
RUN curl https://archive.toit.io/cli/v1.18.2/linux \
        | tar -xvzf - -C /usr/local/bin \
    && apt-get install --autoremove --yes curl \
    && rm -r /var/lib/apt/lists/*

# TODO change user