jenkins-inbound-agent/Dockerfile

FROM jenkins/inbound-agent:latest-trixie-jdk17 AS jnlp

# USER jenkins
USER root
RUN apt-get update && \
  apt-get -y install ca-certificates curl pkg-config python3-dev python3-pip \
     python3-setuptools python3.13 python3.13-venv && \
  apt -y install gdebi && \
  curl -O https://www.princexml.com/download/prince_20251030-1_debian13_amd64.deb && \
  gdebi --n ./prince_20251030-1_debian13_amd64.deb && \
  apt-get clean && \
  rm -rf /var/lib/apt/lists/* /var/cache/apt/archives/*

ARG DOCKER_VERSION=24.0.6
ARG DOCKER_COMPOSE_VERSION=1.21.0
ARG DOCKER_BUILDX_VERSION=0.30.1
RUN curl -fsSL https://download.docker.com/linux/static/stable/`uname -m`/docker-$DOCKER_VERSION.tgz \
   | tar --strip-components=1 -xz -C /usr/local/bin docker/docker && \
  curl -fsSL https://github.com/docker/compose/releases/download/$DOCKER_COMPOSE_VERSION/docker-compose-`uname -s`-`uname -m` > /usr/local/bin/docker-compose && chmod +x /usr/local/bin/docker-compose

# Enable buildx plugin
## buildx is released as amd64, and uname calls it x86_64
RUN uname -m > /tmp/arch \
    && sed -i 's/x86_64/amd64/g' /tmp/arch \
    && mkdir -p /usr/libexec/docker/cli-plugins/

RUN curl -fsSL https://github.com/docker/buildx/releases/download/v$DOCKER_BUILDX_VERSION/buildx-v$DOCKER_BUILDX_VERSION.linux-`cat /tmp/arch` > /usr/libexec/docker/cli-plugins/docker-buildx
RUN chmod +x /usr/libexec/docker/cli-plugins/docker-buildx \
    && docker buildx install \
    && rm /tmp/arch

# RUN docker buildx create \
#   --name jenkinsbuilder \
#   --driver docker-container \
#   --bootstrap --use

RUN groupadd docker
RUN usermod -aG docker jenkins

COPY ca-chain.crt /usr/local/share/ca-certificates/ca-chain.crt
RUN /usr/sbin/update-ca-certificates

USER jenkins

RUN mkdir $HOME/.ssh/
RUN touch $HOME/.ssh/known_hosts
RUN ssh-keyscan github.com >> ~/.ssh/known_hosts

ENTRYPOINT ["/usr/local/bin/jenkins-agent"]