# Pull $OS_DISTRO from Docker Hub
FROM $OS_DISTRO:$OS_RELEASE as user-stage

# Configure DNF and YUM proxies
RUN echo "proxy=http://proxy-chain.intel.com:911" >> /etc/dnf/dnf.conf \
  && echo -e 'proxy=http://proxy-chain.intel.com:911\nno_proxy=.intel.com' >> /etc/yum.conf

# Update package lists, and upgrade to the latest Red Hat packages
RUN dnf clean all \
  && dnf -y upgrade \
  && dnf clean all

# repositories.intel.com content begins here
#
# Intel certificates which would allow internal signed certs to be
# used are not being installed, so turn sslverify=0 on the 
# repository.
#
# To install the certs would be something like:
#
# A. Copy ca certs to /etc/pki/ca-trust/source/anchors/
# B. run update-ca-trust
#
# Once that is done, the 'sslverify=0' can be removed from 
# the repository definition below.
#
# Add Intel Graphics repository
#
RUN { \
  echo "[intel-graphics]" ; \
  echo "name=Intel Graphics Drivers Repository" ; \
  echo "baseurl=${PACKAGE_REPOSITORY}/${OS_DISTRO}/${PACKAGE_STREAM}/" ; \
  echo "sslverify=0" ; \
  echo "enabled=1" ; \
  echo "gpgcheck=0" ; \
} > /etc/yum.repos.d/intel-graphics.repo

# Disable proxy for Intel URLs
RUN echo "no_proxy=.jf.intel.com" >> /etc/yum.conf