# Egress filter for opencode-sandbox: squid on the host network. The rendered squid.conf is
# mounted into /etc/opencode-sandbox (a directory, so editors' rename-on-save is picked up).
FROM fedora:44

RUN dnf install -y squid && dnf clean all

COPY entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh

ENTRYPOINT ["/entrypoint.sh"]