FROM archlinux:latest

# archlinux:latest ships iproute2, iptables, awk, sed, ip6tables, busybox
# tools. Install conntrack-tools for the drain monitor + conntrack -D path.
# Tolerate offline builds: the script falls back to /proc/net/nf_conntrack
# when conntrack CLI is unavailable.
RUN pacman --noconfirm -Sy conntrack-tools 2>/dev/null || \
    echo "[build] conntrack-tools unavailable; script will degrade gracefully"

# Harness + switch script
COPY docker/router-entrypoint.sh /usr/local/bin/router-entrypoint.sh
COPY root/usr/sbin/zt-gateway-switch /usr/sbin/zt-gateway-switch
RUN chmod +x /usr/local/bin/router-entrypoint.sh /usr/sbin/zt-gateway-switch

ENTRYPOINT ["/usr/local/bin/router-entrypoint.sh"]
CMD ["sleep", "infinity"]