FROM coder-devbox-base-config:latest AS base-default

USER root

# XFCE4 desktop + TigerVNC + noVNC — browser-based desktop access (no native
# VNC client needed), for running/testing GUI apps (e.g. Flutter Linux
# builds) that need a real display.
RUN DEBIAN_FRONTEND=noninteractive apt-get update -qq \
    && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
       xfce4 xfce4-terminal dbus-x11 \
       tigervnc-standalone-server tigervnc-common \
       novnc websockify \
       fonts-dejavu-core \
       x11vnc \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*
# x11vnc is installed only for its `storepasswd` tool — this Ubuntu
# tigervnc-standalone-server/tigervnc-common split ships no vncpasswd
# equivalent at all (checked dpkg -L and Xtigervnc -help), but the VNC
# password file format is a shared standard, so x11vnc's tool can generate
# the file that Xtigervnc/tigervncserver reads. x11vnc itself is never run.

# Lives outside /home/coder — see vnc-startup.sh header comment.
COPY ./vnc-startup.sh /usr/local/bin/vnc-startup.sh
RUN chmod +x /usr/local/bin/vnc-startup.sh

USER coder