FROM scratch AS rootfs # Install S6 overlay COPY --from=ghcr.io/n0rthernl1ghts/s6-rootfs:3.2.0.2 ["/", "/"] # Install init-docker-secrets service COPY --from=ghcr.io/n0rthernl1ghts/docker-env-secrets:latest ["/", "/"] # Copy over base files COPY ["./rootfs", "/"] FROM knatnetwork/github-runner-kms:latest RUN set -eux \ && apk add --no-cache bash COPY --from=rootfs ["/", "/"] ENV NORMALIZE_SECRET_NAMES=0 ENTRYPOINT ["/init"]