From 75064718c538182d00a6520fe62355e626fd6fd2 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Mon, 8 Jun 2026 22:51:24 +1000
Subject: [PATCH] Initial scaffold: infrastructure toolchain agent container

---
 .gitignore              |  1 +
 .woodpecker/build.yaml  |  9 +++++++++
 .woodpecker/docker.yaml | 16 ++++++++++++++++
 Dockerfile              | 16 ++++++++++++++++
 4 files changed, 42 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 .woodpecker/build.yaml
 create mode 100644 .woodpecker/docker.yaml
 create mode 100644 Dockerfile

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..e660fd9
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+bin/
diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml
new file mode 100644
index 0000000..fa7f444
--- /dev/null
+++ b/.woodpecker/build.yaml
@@ -0,0 +1,9 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: docker-build
+    image: woodpeckerci/plugin-docker-buildx
+    settings:
+      repo: git.unkin.net/unkin/agent-infra
+      dry_run: true
diff --git a/.woodpecker/docker.yaml b/.woodpecker/docker.yaml
new file mode 100644
index 0000000..b84ce42
--- /dev/null
+++ b/.woodpecker/docker.yaml
@@ -0,0 +1,16 @@
+when:
+  - event: tag
+    ref: refs/tags/v*
+
+steps:
+  - name: docker
+    image: woodpeckerci/plugin-docker-buildx
+    settings:
+      registry: git.unkin.net
+      repo: git.unkin.net/unkin/agent-infra
+      username: droneci
+      password:
+        from_secret: DRONECI_PASSWORD
+      tags:
+        - ${CI_COMMIT_TAG}
+        - latest
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..8eef715
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,16 @@
+FROM git.unkin.net/unkin/agent-base:latest
+
+USER root
+
+RUN dnf install -y \
+        kubectl \
+        kustomize \
+        helm \
+        helmfile \
+        opentofu \
+        vault \
+        consul \
+        terragrunt \
+    && dnf clean all
+
+USER agent