# syntax=dhi.io/build:2-alpine3.23

contents:
  repositories:
    - https://dl-cdn.alpinelinux.org/alpine/v3.23/main
    - https://dl-cdn.alpinelinux.org/alpine/v3.23/community
  packages:
    - mariadb
    - mariadb-client
    - ca-certificates

accounts:
  groups:
    - gid: 65532
      name: mysql
  users:
    - uid: 65532
      gid: 65532
      name: mysql
  run-as: mysql

environment:
  PATH: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
  DATADIR: /var/lib/mysql

entrypoint:
  - /usr/bin/mariadbd
  - --user=mysql
  - --datadir=/var/lib/mysql

annotations:
  org.opencontainers.image.title: "hardened-mariadb"
  org.opencontainers.image.description: "A secure, minimal MariaDB container image built with DHI"