#!/usr/bin/env bash
# Build the turnstone VM image: podman image -> boco qcow2.
set -euo pipefail
cd "$(dirname "$0")/.."

# Dedicated ssh keypair for the VM ops channel (created once)
if [ ! -f configs/ssh/id_ed25519 ]; then
  ssh-keygen -t ed25519 -N "" -C "marvin-turnstone-vm" -f configs/ssh/id_ed25519
fi
ssh-keygen -y -f configs/ssh/id_ed25519 > configs/ssh/authorized_keys

podman build \
  --build-arg USER_ID="$(id -u)" \
  --build-arg GROUP_ID="$(id -g)" \
  -t marvin-turnstone .

boco build qcow2 marvin-turnstone