From 0447584b00e662b064adf7e48e4286d2e7cd1792 Mon Sep 17 00:00:00 2001
From: spahuja-harness <135065014+spahuja-harness@users.noreply.github.com>
Date: Sun, 1 Mar 2026 18:30:55 -0600
Subject: [PATCH] feat: [CI-21188]: Add Dockerfile for tmate binary for Harness
 CI builds

Add support for building tmate Docker images via Harness CI pipeline.
Tmate is a C-based terminal sharing application (tmux fork).

Changes:
- Created docker/Dockerfile-tmate for building binary images
  * Multi-stage build using GAR Alpine 3.21
  * Builds libssh and tmate with static linking
  * Scratch-based final image with binary at /binaries/tmate
  * Includes build metadata labels
- Added config/manifest.yaml for Harness CI pipeline integration

This enables building harness/harness-vm-runner-tmate images that will be
bundled into harness-vm-runner-binaries for VM injection.

Note: Tmate is a C project and does not use Go versioning patterns.
Version is managed via configure.ac (autotools).
---
 config/manifest.yaml    |  2 ++
 docker/Dockerfile-tmate | 77 +++++++++++++++++++++++++++++++++++++++++
 2 files changed, 79 insertions(+)
 create mode 100644 config/manifest.yaml
 create mode 100644 docker/Dockerfile-tmate

diff --git a/config/manifest.yaml b/config/manifest.yaml
new file mode 100644
index 00000000..f81d59c3
--- /dev/null
+++ b/config/manifest.yaml
@@ -0,0 +1,2 @@
+DOCKER_FILE_PATH: /harness/tmate/docker/Dockerfile-tmate
+CONTEXT_PATH: /harness/tmate
diff --git a/docker/Dockerfile-tmate b/docker/Dockerfile-tmate
new file mode 100644
index 00000000..a7494204
--- /dev/null
+++ b/docker/Dockerfile-tmate
@@ -0,0 +1,77 @@
+# ---------------------------------------------------------#
+#                   Build Tmate Binary                     #
+# ---------------------------------------------------------#
+FROM us-west1-docker.pkg.dev/gar-setup/docker/alpine:3.21 as builder
+
+WORKDIR /build
+
+# Install build dependencies
+RUN apk add --no-cache wget cmake make gcc g++ linux-headers zlib-dev openssl-dev \
+            automake autoconf libevent-dev ncurses-dev msgpack-c-dev libexecinfo-dev \
+            ncurses-static libexecinfo-static libevent-static msgpack-c ncurses-libs \
+            libevent libexecinfo openssl zlib git
+
+# Build libssh
+RUN set -ex; \
+    mkdir -p /src/libssh/build; \
+    cd /src; \
+    wget -O libssh.tar.xz https://www.libssh.org/files/0.9/libssh-0.9.0.tar.xz; \
+    tar -xf libssh.tar.xz -C /src/libssh --strip-components=1; \
+    cd /src/libssh/build; \
+    cmake -DCMAKE_INSTALL_PREFIX:PATH=/usr \
+    -DWITH_SFTP=OFF -DWITH_SERVER=OFF -DWITH_PCAP=OFF \
+    -DWITH_STATIC_LIB=ON -DWITH_GSSAPI=OFF ..; \
+    make -j $(nproc); \
+    make install
+
+# Copy source code
+COPY compat ./compat
+COPY *.c *.h autogen.sh Makefile.am configure.ac ./
+
+# Build arguments for metadata
+ARG BUILD_VERSION
+ARG BUILD_TIME
+ARG COMMIT_SHA
+ARG BRANCH_NAME
+ARG TARGETOS=linux
+ARG TARGETARCH
+
+# Build tmate
+RUN ./autogen.sh && ./configure --enable-static
+RUN make -j $(nproc)
+RUN objcopy --only-keep-debug tmate tmate.symbols && chmod -x tmate.symbols && strip tmate
+
+# Verify build
+RUN ./tmate -V
+
+# ---------------------------------------------------------#
+#                   Create final image                     #
+# ---------------------------------------------------------#
+FROM scratch
+
+WORKDIR /binaries
+
+# Copy the binary
+COPY --from=builder /build/tmate /binaries/tmate
+
+# Build metadata labels
+ARG BUILD_VERSION
+ARG BUILD_TIME
+ARG COMMIT_SHA
+ARG BRANCH_NAME
+ARG TARGETARCH
+ARG TARGETOS
+
+LABEL org.opencontainers.image.title="Tmate"
+LABEL org.opencontainers.image.description="Tmate terminal sharing binary for Harness CI"
+LABEL org.opencontainers.image.vendor="Harness Inc."
+LABEL org.opencontainers.image.created="${BUILD_TIME}"
+LABEL org.opencontainers.image.revision="${COMMIT_SHA}"
+LABEL org.opencontainers.image.source="https://github.com/harness/tmate"
+LABEL org.opencontainers.image.version="${BUILD_VERSION}"
+LABEL BUILD_VERSION="${BUILD_VERSION}"
+LABEL BUILD_TIME="${BUILD_TIME}"
+LABEL BRANCH_NAME="${BRANCH_NAME}"
+LABEL COMMIT_SHA="${COMMIT_SHA}"
+LABEL ARCHITECTURE="${TARGETARCH}"
+LABEL OS="${TARGETOS}"