# SPDX-License-Identifier: Apache-2.0
# Copyright (c) 2024 Matter Labs
{ lib
, stdenv
, openssl
, curl
, dockerTools
, buildEnv
, teepot
, nixsgx
}:
if (stdenv.hostPlatform.isDarwin) then {
  # FIXME: dockerTools.buildLayeredImage seems to be broken on Darwin
} else
  dockerTools.buildLayeredImage {
    name = "tdx-test";

    config.Entrypoint = [ "${teepot.teepot.tdx_test}/bin/tdx-test" ];
    config.Env = [
      "SSL_CERT_FILE=/etc/ssl/certs/ca-bundle.crt"
    ];

    contents = buildEnv {
      name = "image-root";

      paths = with dockerTools; [
        teepot.teepot.tdx_test
        openssl.out
        curl.out
        # nixsgx.sgx-dcap.quote_verify
        # nixsgx.sgx-dcap.default_qpl
        usrBinEnv
        binSh
        caCertificates
        fakeNss
      ];
      pathsToLink = [ "/bin" "/lib" "/etc" "/share" ];
    };
  }