FROM docker.io/fedora:latest

RUN dnf install -y \
      chromium \
      curl \
      firefox \
      passwd \
      supervisor \
      sudo \
      tigervnc \
      tigervnc-server \
      vim \
      wget \
      @xfce

RUN sudo dnf remove -y xfce4-power-manager && \
    printf 'test' > /tmp/remotepassword && \
    dbus-uuidgen > /var/lib/dbus/machine-id && \
    echo "enforcing=0" | sudo tee -a /etc/security/pwquality.conf && \
    printf '#!/bin/sh\n\
      read password\n\
      echo "${password}" | sudo tee /root/password.txt\n\
      echo -n "${password}" | sudo sh -c "vncpasswd -f > /root/.vnc/passwd" || exit 1\n\
      echo "root:$(echo -n "${password}")" | sudo sh -c "chpasswd" || exit 1\n\
      echo -n "${password}" | sudo sh -c "vncpasswd -f > /home/testuser/.vnc/passwd" || exit 1\n\
      echo -n "${password}" | sudo sh -c "passwd --stdin testuser" || exit 1\n\
      sudo sed -i "s/password={SHA}.*/password={SHA}$(echo -n "${password}" | sha1sum | awk "{print \\$1}")/g" /etc/supervisord.conf || exit 1\n\
      sudo chmod 600 /root/.vnc/passwd || exit 1\n\
      sudo chmod -R go-rwx /home/testuser/.vnc || exit 1\n\
      sudo chown -R testuser:root /home/testuser/ || exit 1\n\
    \n' | sudo tee /usr/local/bin/setpassword.sh && chmod +x /usr/local/bin/setpassword.sh && \
    mkdir /root/.vnc && \
    mkdir /root/Desktop && \
    echo "startxfce4" > /root/.Xclients && \
    chmod +x /root/.Xclients && \
    adduser -r -g 0 -m testuser && \
    usermod -a -G wheel testuser && \
    mkdir /home/testuser/.vnc && \
    mkdir /home/testuser/Desktop && \
    echo "startxfce4" > /home/testuser/.Xclients && \
    chmod +x /home/testuser/.Xclients && \
    sed -i 's/^%wheel.*/%wheel ALL=(ALL) NOPASSWD: ALL/g' /etc/sudoers && \
    sed -i 's/^\(Defaults.*env_reset\)/#\1/g' /etc/sudoers && \
    printf '#!/bin/sh\n\
      unset SESSION_MANAGER\n\
      unset DBUS_SESSION_BUS_ADDRESS\n\
      exec xfce4-session\n\
    ' | sudo tee -a /root/.vnc/xstartup && \
    chmod a+x /root/.vnc/xstartup && \
    cp /root/.vnc/xstartup /home/testuser/.vnc/xstartup && \
    chown testuser:root /home/testuser/.vnc/xstartup && \
    printf '\n\
      [supervisord]\n\
      user=root\n\
      logfile=/dev/stdout\n\
      logfile_maxbytes=0\n\
      loglevel=info\n\
      pidfile=/var/run/supervisor/supervisord.pid\n\
      minfds=1024\n\
      minprocs=200\n\
      \n\
      [unix_http_server]\n\
      file=/var/run/supervisor/supervisor.sock\n\
      username=root\n\
      password={SHA}REPLACEPASSWORD\n\
      \n\
      [rpcinterface:supervisor]\n\
      supervisor.rpcinterface_factory=supervisor.rpcinterface:make_main_rpcinterface\n\
      \n\
      [supervisorctl]\n\
      serverurl=unix:///var/run/supervisor/supervisor.sock\n\
      \n\
      [include]\n\
      files=/etc/supervisord.d/*.supervisord.conf\n\
    ' | sudo tee /etc/supervisord.conf && \
    printf '\n\
      [program:vncserver1]\n\
      command=/usr/bin/vncserver :1 -fg\n\
      stdout_logfile=/dev/stdout\n\
      stdout_logfile_maxbytes=0\n\
      redirect_stderr=true\n\
      startsecs=1\n\
      priority=50\n\
    ' | sudo tee /etc/supervisord.d/vncserver1.supervisord.conf && \
    printf '#!/bin/sh\n\
      sleep 5 # Try to avoid deadlock with the root VNC starting at the same time\n\
      /usr/sbin/runuser -l testuser -c "/usr/bin/vncserver :2 -fg"\n\
    ' | sudo tee /usr/local/bin/startvnctestuser.sh && \
    sudo chmod +x /usr/local/bin/startvnctestuser.sh && \
    printf '\n\
      [program:vncserver2]\n\
      command=/usr/local/bin/startvnctestuser.sh\n\
      stdout_logfile=/dev/stdout\n\
      stdout_logfile_maxbytes=0\n\
      redirect_stderr=true\n\
      startsecs=1\n\
      priority=51\n\
    ' | sudo tee /etc/supervisord.d/vncserver2.supervisord.conf && \
    sudo mkdir -p /var/run/supervisor/ && \
    printf '#!/bin/sh\n\
      ssh-keygen -A || exit 1\n\
      \n\
      if [ -e /usr/local/bin/extended_entrypoint.sh ]; then\n\
        chmod a+x /usr/local/bin/extended_entrypoint.sh\n\
        /usr/local/bin/extended_entrypoint.sh || exit 1\n\
      fi\n\
      \n\
      if [ "$#" -gt 0 ]; then\n\
        supervisord -c /etc/supervisord.conf &> /var/log/supervisord.log || exit 1 &\n\
        exec "$@" || exit 1\n\
      else\n\
        supervisord -n -c /etc/supervisord.conf || exit 1\n\
      fi\n\
      \n\
    ' | sudo tee -a /usr/local/bin/entrypoint.sh && chmod a+rx /usr/local/bin/entrypoint.sh && \
    mv /etc/xdg/autostart/xfce-polkit.desktop /etc/xdg/autostart/xfce-polkit.desktop.disabled && \
    sudo chmod a+x /usr/share/applications/firefox.desktop && \
    sudo ln -s /usr/share/applications/firefox.desktop /home/testuser/Desktop/ && \
    sudo chmod a+x /usr/share/applications/xfce4-terminal.desktop && \
    sudo ln -s /usr/share/applications/xfce4-terminal.desktop /home/testuser/Desktop/ && \
    sudo mkdir -p /root/.config/xfce4/ && \
    printf 'WebBrowser=firefox' | sudo tee /root/.config/xfce4/helpers.rc && \
    sudo mkdir -p /home/testuser/.config/xfce4/ && \
    printf 'WebBrowser=firefox' | sudo tee /home/testuser/.config/xfce4/helpers.rc && \
    sudo chown -R testuser:root /home/testuser/ && \
    echo -n "$(sudo head -n 1 /tmp/remotepassword)" | /usr/local/bin/setpassword.sh

EXPOSE 5901 5902

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]