# syntax=docker/dockerfile:1
# will-service-base: minimal Arch runtime for the phenotype container.
# Rebuilt deliberately (mise run base-service) when inputs change; normal
# commits copy bundles onto the recorded digest (spec: pinned runtime bases).
FROM docker.io/library/archlinux:base

RUN pacman-key --init && pacman -Sy --noconfirm --needed \
      archlinux-keyring ca-certificates \
    && pacman -Su --noconfirm \
    && pacman -S --noconfirm --needed nodejs \
    && paccache -rfk0 || true \
    && useradd --system --create-home --shell /usr/sbin/nologin will-service \
    && mkdir -p /srv/will-data && chown will-service:will-service /srv/will-data

USER root