# frida-verifier — WebAuthn Relying Party (the frida RP).
#
# Prebuilt-copy: build the binary natively on the build host, then package it.
# TLS is terminated at the ingress, so this process serves plain HTTP on
# FRIDA_LISTEN (default 0.0.0.0:8080 in-cluster). RP identity is env-driven:
# FRIDA_RP_ID = registrable domain (e.g. g11.se)
# FRIDA_RP_ORIGIN = exact https origin the browser is on (e.g. https://frida.g11.se)
# FRIDA_LISTEN = bind address (e.g. 0.0.0.0:8080)
#
# Build (from the frida repo root):
# cargo build --release -p frida-verifier
# cp target/release/frida-verifier ./frida-verifier
# podman build -t <registry>/frida-server:<tag> -f Dockerfile .
FROM debian:trixie-slim
RUN apt-get update \
&& apt-get install -y --no-install-recommends ca-certificates \
&& rm -rf /var/lib/apt/lists/*
# The prebuilt release binary (staged next to this Dockerfile at build time).
COPY frida-verifier /usr/local/bin/frida-verifier
EXPOSE 8080
ENTRYPOINT ["/usr/local/bin/frida-verifier"]