From 761378f583990d6b3d77c598ed0b46adf8efb6ca Mon Sep 17 00:00:00 2001
From: Thomas SharedInbox <sharedinbox@thomas-guettler.de>
Date: Wed, 3 Jun 2026 17:30:30 +0200
Subject: [PATCH] Dockerfile.

---
 .forgejo/Dockerfile | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.forgejo/Dockerfile b/.forgejo/Dockerfile
index 39766ae..ade49f3 100644
--- a/.forgejo/Dockerfile
+++ b/.forgejo/Dockerfile
@@ -4,8 +4,18 @@
 # In systemd service:
 #    ExecStartPre=docker build -t forgejo-act-runner:latest /etc/forgejo/runner
 #    ExecStart=/usr/local/bin/forgejo-runner daemon --config /etc/forgejo/config.yml
+
 FROM ghcr.io/catthehacker/ubuntu:go-24.04
 
+# Infrastructure tools required by CI workflows
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    jq \
+    && rm -rf /var/lib/apt/lists/*
+
+# SOPS
+RUN curl -fsSL -o /usr/local/bin/sops https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.linux.amd64 \
+    && chmod +x /usr/local/bin/sops
+
 # Dagger CLI — pinned to match the engine version on the runner host
 RUN curl -fsSL https://dl.dagger.io/dagger/install.sh \
     | DAGGER_VERSION=0.20.8 BIN_DIR=/usr/local/bin sh