build corrosion image based on wolfi]

Dockerfile

@@ -7,8 +7,23 @@ COPY . .
 RUN GOOS=${TARGETOS} GOARCH=${TARGETARCH} go build -o uncloudd cmd/uncloudd/main.go
 
 
+FROM alpine:latest AS corrosion-download
+RUN wget -q -O /tmp/corrosion.tar.gz \
+      https://github.com/psviderski/corrosion/releases/latest/download/corrosion-aarch64-unknown-linux-gnu.tar.gz  \
+    && tar -xzf /tmp/corrosion.tar.gz -C /tmp \
+    && install /tmp/corrosion /usr/local/bin/corrosion \
+    && rm /tmp/corrosion.tar.gz /tmp/corrosion
+
+FROM chainguard/wolfi-base:latest AS corrosion
+# TODO: create uncloud user
+COPY --from=corrosion-download /usr/local/bin/corrosion /usr/local/bin/corrosion
+
+
 FROM docker:27.3.1-dind
 RUN apk --no-cache add \
     wireguard-tools
+# Create system group and user 'uncloud'.
+RUN addgroup -S uncloud && adduser -SHD -h /nonexistent -G uncloud -g "" uncloud
 COPY --from=uncloudd /go/uncloudd /usr/local/bin/uncloudd
+# TODO: socat to forward uncloud.sock unix socket?
 CMD ["uncloudd"]