Dockerfile.agent

# Agent image — runs on each Docker host, talks to the local Docker socket.
FROM node:22-alpine AS build
WORKDIR /app
COPY package.json package-lock.json* ./
COPY packages/shared/package.json packages/shared/
COPY packages/agent/package.json packages/agent/
RUN npm install --omit=dev=false
COPY packages/shared packages/shared
COPY packages/agent packages/agent
RUN npm run build --workspace @cbm/shared && npm run build --workspace @cbm/agent

FROM node:22-alpine AS runtime
# docker-cli: the agent shells out to `docker` for exec/tar/inspect.
# restic: incremental/deduplicated/encrypted storage engine (optional per destination).
# openssh-client + sshpass: restic's SFTP backend (key or password auth, jump host).
RUN apk add --no-cache docker-cli restic openssh-client sshpass
WORKDIR /app
COPY --from=build /app/node_modules ./node_modules
COPY --from=build /app/packages/shared/dist ./packages/shared/dist
COPY --from=build /app/packages/shared/package.json ./packages/shared/
COPY --from=build /app/packages/agent/dist ./packages/agent/dist
COPY --from=build /app/packages/agent/package.json ./packages/agent/
ENV AGENT_WORK_DIR=/var/lib/cbm-agent
VOLUME ["/var/run/docker.sock"]
CMD ["node", "packages/agent/dist/index.js"]