Update Dockerfile

Dockerfile

@@ -1,7 +1,15 @@
-# Use Ubuntu as base image
-FROM ubuntu:latest
+# syntax=docker/dockerfile:experimental
+RUN git clone https://github.com/coder/code-server /tmp/code-server
+
+# Change directory to code-server repository
+WORKDIR /tmp/code-server/ci/release-image 
+
+ARG BASE=debian:12
+FROM scratch AS packages
+COPY release-packages/code-server*.deb /tmp/
+
+FROM $BASE
 
-# Install git and curl
 RUN apt-get update \
   && apt-get install -y \
     curl \
@@ -21,19 +29,34 @@ RUN apt-get update \
     zsh \
   && git lfs install \
   && rm -rf /var/lib/apt/lists/*
-# Clone the repository
-RUN git clone https://github.com/coder/code-server.git /code-server
 
-# Change directory to the cloned repository
-WORKDIR /code-server
+# https://wiki.debian.org/Locale#Manually
+RUN sed -i "s/# en_US.UTF-8/en_US.UTF-8/" /etc/locale.gen \
+  && locale-gen
+ENV LANG=en_US.UTF-8
+
+RUN adduser --gecos '' --disabled-password coder \
+  && echo "coder ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers.d/nopasswd
+
+RUN ARCH="$(dpkg --print-architecture)" \
+  && curl -fsSL "https://github.com/boxboat/fixuid/releases/download/v0.6.0/fixuid-0.6.0-linux-$ARCH.tar.gz" | tar -C /usr/local/bin -xzf - \
+  && chown root:root /usr/local/bin/fixuid \
+  && chmod 4755 /usr/local/bin/fixuid \
+  && mkdir -p /etc/fixuid \
+  && printf "user: coder\ngroup: coder\n" > /etc/fixuid/config.yml
 
-# Run CI script from the ci directory
-RUN cd ci 
+COPY ci/release-image/entrypoint.sh /usr/bin/entrypoint.sh
+RUN --mount=from=packages,src=/tmp,dst=/tmp/packages dpkg -i /tmp/packages/code-server*$(dpkg --print-architecture).deb
 
-# Copy entry point script
-COPY entrypoint.sh home/entrypoint.sh
+# Allow users to have scripts run on container startup to prepare workspace.
+# https://github.com/coder/code-server/issues/5177
+ENV ENTRYPOINTD=${HOME}/entrypoint.d
 
-# Make entrypoint script executable
-RUN chmod +x *
-ENV ENTRYPOINTD=code-server/entrypoint.d
-ENTRYPOINT ["/code-server/ci/release-image/entrypoint.sh", "--bind-addr", "0.0.0.0:7860", "."]]
+EXPOSE 8080
+# This way, if someone sets $DOCKER_USER, docker-exec will still work as
+# the uid will remain the same. note: only relevant if -u isn't passed to
+# docker-run.
+USER 1000
+ENV USER=coder
+WORKDIR /home/coder
+ENTRYPOINT ["/usr/bin/entrypoint.sh", "--bind-addr", "0.0.0.0:8080", "."]