FROM debian:trixie

# Prevent interactive prompts during build
ENV DEBIAN_FRONTEND=noninteractive

# Set timezone to UTC
ENV TZ=UTC

# Set UTF-8 locale to avoid Qt warnings
ENV LANG=C.UTF-8
ENV LC_ALL=C.UTF-8

# Use Alibaba Cloud Debian mirror for faster downloads in China (Debian Trixie uses deb822 format)
RUN sed -i 's|http://deb.debian.org/debian|http://mirrors.aliyun.com/debian|g' /etc/apt/sources.list.d/debian.sources \
    && sed -i 's|http://security.debian.org/debian-security|http://mirrors.aliyun.com/debian-security|g' /etc/apt/sources.list.d/debian.sources

# Add xpra official repository
RUN apt-get update && apt-get install -y \
    ca-certificates \
    wget \
    gnupg \
    && wget -O "/usr/share/keyrings/xpra.asc" https://xpra.org/xpra.asc \
    && echo "deb [arch=amd64,arm64 signed-by=/usr/share/keyrings/xpra.asc] https://xpra.org trixie main" > /etc/apt/sources.list.d/xpra.list \
    && apt-get update

# Install xpra and dependencies
# Lock xpra version for reproducible builds
RUN apt-get install -y \
    wireshark-common \
    wireshark \
    xpra=6.4.3* \
    xpra-x11 \
    xvfb \
    curl \
    x11-utils \
    && rm -rf /var/lib/apt/lists/*

# Metadata
LABEL maintainer="YueGuobin <yueguobin@outlook.com>"
LABEL description="Web Wireshark container with xpra for GNS3"

# Create gns3 user
RUN groupadd -g 1000 gns3 && \
    useradd -u 1000 -g gns3 -m -s /bin/bash gns3

# Create sessions directory with proper permissions
RUN mkdir -p /tmp/sessions && chmod 1777 /tmp/sessions

# Create XDG runtime directory for gns3 user
RUN mkdir -p /run/user/1000 && chown -R gns3:gns3 /run/user/1000 && chmod 700 /run/user/1000

# Set XDG environment variables
ENV XDG_RUNTIME_DIR=/run/user/1000


# Set default user
USER gns3

# No EXPOSE - port will be dynamically allocated
# Keep container running
CMD ["tail", "-f", "/dev/null"]