--- /dev/null
+# syntax=docker/dockerfile:1
+#######################################################################################
+# Copyright ETSI Contributors and Others.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+# implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#######################################################################################
+
+
+#######################
+# Stage 1: Base stage#
+#######################
+
+FROM python:3.10-alpine AS base
+
+ENV PYTHONUNBUFFERED=1 \
+ PYTHONDONTWRITEBYTECODE=1 \
+ PIP_DISABLE_PIP_VERSION_CHECK=1
+
+##############################################################################################################################################
+
+#########################
+# Stage 2: builder stage#
+#########################
+
+FROM base AS builder
+
+# Install build dependencies
+RUN apk add --no-cache \
+ gcc \
+ musl-dev \
+ libffi-dev \
+ openssl-dev \
+ make \
+ cmake \
+ build-base \
+ patch \
+ curl \
+ git \
+ bash \
+ libmagic
+
+# Isolate dependencies in a venv
+RUN python -m venv /app/osmclient/.venv
+ENV PATH="/app/osmclient/.venv/bin:$PATH"
+
+# Install OSM packages (assuming they provide source packages or wheels)
+ARG IM_GERRIT_REFSPEC=master
+
+RUN --mount=type=cache,target=/root/.cache/pip \
+ git clone --filter=blob:none --tags https://osm.etsi.org/gerrit/osm/IM.git /tmp/osm-im && \
+ cd /tmp/osm-im && \
+ git fetch origin ${IM_GERRIT_REFSPEC} && \
+ git checkout FETCH_HEAD && \
+ cd - && \
+ pip install --no-cache-dir -r /tmp/osm-im/requirements.txt && \
+ pip install /tmp/osm-im
+
+COPY . /tmp/osmclient/
+RUN --mount=type=cache,target=/root/.cache/pip \
+ cd /tmp/osmclient && \
+ pip install --no-cache-dir -r /tmp/osmclient/requirements.txt && \
+ pip install /tmp/osmclient && \
+ cd -
+
+#####################################################################################################################################################
+
+#######################
+# Stage 3: Final image#
+#######################
+
+FROM python:3.10-alpine AS final
+
+# Install runtime dependencies
+RUN apk add --no-cache \
+ bash \
+ libmagic
+
+ENV VIRTUAL_ENV=/app/osmclient/.venv \
+ PATH="/app/osmclient/.venv/bin:$PATH"
+
+# Copy Python packages from build stage
+COPY --from=builder --chown=appuser:appuser /app/osmclient/.venv /app/osmclient/.venv
+
+# Copy OSM binaries
+COPY --from=builder /app/osmclient/.venv/bin/osm /usr/local/bin/osm
+COPY charm.sh /usr/sbin/charm
+
+# Create app user
+RUN addgroup -g 1000 appuser && \
+ adduser -u 1000 -G appuser -D appuser && \
+ mkdir -p /app/osmclient && \
+ chown -R appuser:appuser /app
+
+WORKDIR /app/osmclient
+
+# Set environment variables
+ENV LC_ALL=C.UTF-8i \
+ LANG=C.UTF-8 \
+ OSM_HOSTNAME=nbi:9999 \
+ OSM_USER=admin \
+ OSM_PASSWORD=admin \
+ OSM_PROJECT=admin
+
+# Switch to non-root user
+USER appuser
+
+CMD ["/usr/local/bin/osm"]
--- /dev/null
+#!/bin/bash
+#######################################################################################
+# Copyright ETSI Contributors and Others.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+# implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#######################################################################################
+
+# Workaround for charm build
+
+function build() {
+ echo "$@"
+ charm-build "$@"
+}
+
+params="$@"
+delete=build
+
+params=("${params[@]/$delete}")
+
+build $params