FROM jenkins/inbound-agent:latest-jdk21

USER root

RUN apt-get update \
    && apt-get install -y --no-install-recommends \
        ca-certificates \
        curl \
        xz-utils \
        tini \
    && rm -rf /var/lib/apt/lists/*

RUN mkdir -p /nix /etc/nix \
    && chmod 0755 /nix \
    && chown jenkins:jenkins /nix \
    && printf '%s\n' \
        'sandbox = false' \
        'filter-syscalls = false' \
        'experimental-features = nix-command flakes' \
        > /etc/nix/nix.conf

USER jenkins

RUN curl --fail --location https://nixos.org/nix/install \
    | sh -s -- --no-daemon

ENV PATH="/home/jenkins/.nix-profile/bin:${PATH}"

RUN nix --version