FROM dockerv2-gfx-build.gfx-assets.intel.com/upstream/rhel:8.0.0 AS user-stage

# Configure DNF and YUM proxies
RUN echo "proxy=http://proxy-chain.intel.com:911" >> /etc/dnf/dnf.conf \
  && echo -e 'proxy=http://proxy-chain.intel.com:911\nno_proxy=.intel.com' >> /etc/yum.conf

# Remove any pre-configured repositories
RUN rm -rf /etc/yum.repos.d/*

# Install the Red Hat partner repositories
RUN { \
  echo "[RHEL-8-appstream-partners]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (AppStream) - x86_64" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/AppStream/x86_64/os" ; \
  echo "enabled=1" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-appstream-partners-debug]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (AppStream) - x86_64 - Debug" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/AppStream/x86_64/debug/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-appstream-partners-source]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (AppStream) - Source" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/AppStream/source/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
} > /etc/yum.repos.d/RHEL-8-appstream-intel-partner.repo
RUN { \
  echo "[RHEL-8-baseos-partners]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (BaseOS) - x86_64" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/BaseOS/x86_64/os" ; \
  echo "enabled=1" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-baseos-partners-debug]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (BaseOS) - x86_64 - Debug" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/BaseOS/x86_64/debug/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-baseos-partners-source]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (BaseOS) - Source" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/BaseOS/source/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
} > /etc/yum.repos.d/RHEL-8-baseos-intel-partner.repo
RUN { \
  echo "[RHEL-8-crb-partners]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (CRB) - x86_64" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/CRB/x86_64/os" ; \
  echo "enabled=1" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-crb-partners-debug]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (CRB) - x86_64 - Debug" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/CRB/x86_64/debug/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-crb-partners-source]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (CRB) - Source" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/CRB/source/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
} > /etc/yum.repos.d/RHEL-8-crb-intel-partner.repo
RUN { \
  echo "[RHEL-8-highavailability-partners]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (HighAvailability) - x86_64" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/HighAvailability/x86_64/os" ; \
  echo "enabled=1" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-highavailability-partners-debug]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (HighAvailability) - x86_64 - Debug" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/HighAvailability/x86_64/debug/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-highavailability-partners-source]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (HighAvailability) - Source" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/HighAvailability/source/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
} > /etc/yum.repos.d/RHEL-8-highavailability-intel-partner.repo
RUN { \
  echo "[RHEL-8-resilientstorage-partners]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (ResilientStorage) - x86_64" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/ResilientStorage/x86_64/os" ; \
  echo "enabled=1" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-resilientstorage-partners-debug]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (ResilientStorage) - x86_64 - Debug" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/ResilientStorage/x86_64/debug/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-resilientstorage-partners-source]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (ResilientStorage) - Source" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/ResilientStorage/source/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
} > /etc/yum.repos.d/RHEL-8-resilientstorage-intel-partner.repo
RUN { \
  echo "[RHEL-8-rt-partners]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (RT) - x86_64" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/RT/x86_64/os" ; \
  echo "enabled=1" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-rt-partners-debug]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (RT) - x86_64 - Debug" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/RT/x86_64/debug/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
  echo "[RHEL-8-rt-partners-source]" ; \
  echo "name=Red Hat Enterprise Linux 8.0.0 Partners (RT) - Source" ; \
  echo "baseurl=ftp://partners.redhat.com/1c5d859a/91fe32f09e2de2cc3eb0f86526b4c7ca/RHEL-8.0.0-GA/RT/source/tree" ; \
  echo "enabled=0" ; \
  echo "gpgcheck=1" ; \
  echo "gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release,file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta" ; \
  echo "skip_if_unavailable=1" ; \
  echo "" ; \
} > /etc/yum.repos.d/RHEL-8-rt-intel-partner.repo

# Update package lists, and upgrade to the latest Red Hat packages
RUN dnf clean all \
  && dnf -y upgrade \
  && dnf clean all

# repositories.intel.com specific content begins here
#
# Intel certificates which would allow internal signed certs to be
# used are not being installed, so turn sslverify=0 on the 
# repository.
#
# To install the certs would be something like:
#
# A. Copy ca certs to /etc/pki/ca-trust/source/anchors/
# B. run update-ca-trust
#
# Once that is done, the 'sslverify=0' can be removed from 
# the repository definition below.
#
# Add Intel Graphics repository
#
RUN { \
  echo "[intel-graphics]" ; \
  echo "name=Intel Graphics Drivers Repository" ; \
  echo "baseurl=${PACKAGE_REPOSITORY}/${OS_DISTRO}/${PACKAGE_STREAM}/" ; \
  echo "sslverify=0" ; \
  echo "enabled=1" ; \
  echo "gpgcheck=0" ; \
} > /etc/yum.repos.d/intel-graphics.repo

# Disable proxy for Intel URLs
RUN echo "no_proxy=.jf.intel.com" >> /etc/yum.conf