docker.nix

{ nixpkgs ? import <nixpkgs> {} }:

with nixpkgs.pkgs;

let
  nixos_encryption_manager = callPackage ./default.nix {};
  entry-point = writeScriptBin "entry-point" ''
    #!${runtimeShell}
    nixos_encryption_manager
  '';
in dockerTools.buildImage {
  name = "nixos_encryption_manager";
  contents = [
    bashInteractive   # Provide the BASH shell
    cacert            # X.509 certificates of public CA's
    coreutils         # Basic utilities expected in GNU OS's
    curl              # CLI tool for transferring files via URLs
    glibcLocales      # Locale information for the GNU C Library
    iana-etc          # IANA protocol and port number assignments
    iproute           # Utilities for controlling TCP/IP networking
    iputils           # Useful utilities for Linux networking
    libidn            # Library for internationalized domain names
    utillinux         # System utilities for Linux
    nixos_encryption_manager
    entry-point
  ];
  config = {
    EntryPoint = [ "${entry-point}/bin/entry-point" ];
  };
}