FROM alpine:latest
# gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org
# gpg --output tor.keyring --export 0xEF6E286DDA85EA2A4BA7DE684E2C6E8793298290
RUN wget -O tor.tar.xz https://dist.torproject.org/torbrowser/10.0.8/tor-browser-linux64-10.0.8_en-US.tar.xz && \
    wget -O tor.tar.xz.asc https://dist.torproject.org/torbrowser/10.0.8/tor-browser-linux64-10.0.8_en-US.tar.xz.asc
COPY sha512sum.txt .
COPY tor.keyring .
RUN apk add --update gnupg && \
    sha512sum -c sha512sum.txt && \
    gpg --keyring ./tor.keyring -k "EF6E286DDA85EA2A4BA7DE684E2C6E8793298290" && \
    gpg --keyring ./tor.keyring --verify tor.tar.xz.asc && \
    unxz tor.tar.xz

FROM ubuntu:bionic

RUN apt-get update && \
  DEBIAN_FRONTEND=noninteractive apt-get -y install gosu libdbus-1-3 libx11-xcb1 libx11-6 libxext6 libxrender1 libxt6 libatk1.0-0 libcairo-gobject2 libcairo2 libssl1.0.0 libdbus-glib-1-2 libevent-2.1-6 libfontconfig1 libfreetype6 libgtk-3-0 libgtk2.0-0 libgdk-pixbuf2.0-0 libglib2.0-0 libglib2.0-0 libglib2.0-0 libglib2.0-0 libgtk-3-0 libgtk2.0-0 libpango-1.0-0 libpangocairo-1.0-0 libpangoft2-1.0-0 libssl1.0.0 libxcb-shm0 libxcb1 && \
    rm -rf /var/lib/apt/lists

COPY --from=0 tor.tar .
RUN mkdir -p /home/user && \
    tar -xf tor.tar -C /home/user && \
    rm -vf tor.tar && \
    chown -Rh 1000:1000 -- /home/user

COPY ./launch /launch
ENTRYPOINT [ "/bin/sh", "/launch" ]
LABEL maintainer="Andrey Arapov <andrey.arapov@nixaid.com>"