Containerfile.pkg

# --------------------------------------------------------------------------
# THIS FILE IS AUTOGENERATED - DO NOT EDIT MANUALLY
#
# Source: Containerfile.pkg.j2
# --------------------------------------------------------------------------

ARG BASE_VERSION=15
FROM ghcr.io/daemonless/base:${BASE_VERSION}

ARG FREEBSD_ARCH=amd64
ARG PACKAGES="tailscale"
ARG UPSTREAM_URL="https://api.github.com/repos/tailscale/tailscale/releases/latest"
ARG UPSTREAM_JQ=".tag_name"

# --- Metadata (Injected by Generator) ---
LABEL org.opencontainers.image.title="Tailscale" \
      org.opencontainers.image.description="Zero-config mesh VPN built on WireGuard — securely connect your devices without port forwarding or firewall changes." \
      org.opencontainers.image.source="https://github.com/daemonless/tailscale" \
      org.opencontainers.image.url="https://tailscale.com/" \
      org.opencontainers.image.documentation="https://tailscale.com/kb/" \
      org.opencontainers.image.licenses="BSD-3-Clause" \
      org.opencontainers.image.vendor="daemonless" \
      org.opencontainers.image.authors="daemonless" \
      io.daemonless.category="Infrastructure" \
      io.daemonless.volumes="/config" \
      io.daemonless.arch="${FREEBSD_ARCH}" \
      io.daemonless.pkg-source="pkg" \
      io.daemonless.upstream-url="${UPSTREAM_URL}" \
      io.daemonless.upstream-jq="${UPSTREAM_JQ}" \
      io.daemonless.healthcheck-url="tailscale-status" \
      io.daemonless.packages="${PACKAGES}"

# Install Tailscale from FreeBSD packages
RUN pkg update && \
    pkg install -y ${PACKAGES} && \
    mkdir -p /app && pkg info tailscale | sed -n 's/.*Version.*: *//p' > /app/version && \
    pkg clean -ay && \
    rm -rf /var/cache/pkg/* /var/db/pkg/repos/*

# Create config and runtime directories
RUN mkdir -p /config /var/run/tailscale && \
    chmod 700 /config

# Copy service definition and init scripts
COPY root/ /

# Make scripts executable
RUN chmod +x /etc/services.d/tailscaled/run /etc/cont-init.d/* /healthz 2>/dev/null || true

# --- Expose (Injected by Generator) ---

# --- Volumes (Injected by Generator) ---
VOLUME /config