commit 07294453b297968e1096fabafe5a512499b577fd
Author: anthorob <tony@bobert.me>
Date:   Fri Nov 14 13:22:04 2025 -0500

    Initial commit

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
new file mode 100644
index 0000000..2421c6a
--- /dev/null
+++ b/.gitlab-ci.yml
@@ -0,0 +1,26 @@
+image: quay.io/buildah/stable@sha256:7950cabdb65648ef74496c80f2ade316e76f5a19a719dc5b1755470ed50d084f
+
+variables:
+  STORAGE_DRIVER: vfs
+  BUILDAH_FORMAT: docker
+  FQ_IMAGE_NAME: "$CI_REGISTRY_IMAGE"
+  BUILDAH_NO_PROMPT: "1"
+
+stages:
+  - base
+
+build_base:
+  stage: base
+  script:
+    - buildah bud --storage-driver=${STORAGE_DRIVER} -t ${FQ_IMAGE_NAME}:latest -f Dockerfile.base .
+    - echo "$CI_REGISTRY_PASSWORD" | buildah login -u "$CI_REGISTRY_USER" --password-stdin "$CI_REGISTRY"
+    - buildah push ${FQ_IMAGE_NAME}:latest
+  rules:
+    - changes:
+        - Dockerfile.base
+    - if: '$CI_PIPELINE_SOURCE == "schedule"'
+    - when: never
+
+include:
+  - "tools/coder-cli/.gitlab-ci.yml"
+  - "tools/terraform-shell/.gitlab-ci.yml"
\ No newline at end of file
diff --git a/Dockerfile.base b/Dockerfile.base
new file mode 100644
index 0000000..008e221
--- /dev/null
+++ b/Dockerfile.base
@@ -0,0 +1,19 @@
+FROM docker.io/codercom/enterprise-base:ubuntu@sha256:05cdf15023f7c17713f1a6aec984e693484d46858bad11324963634aa91c2cdb
+
+USER root
+
+# Shared base utilities only
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+        curl \
+        unzip \
+        git \
+        nano \
+        ca-certificates \
+        software-properties-common \
+        lsb-release \
+        gnupg \
+        && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+USER coder
+WORKDIR /home/coder
\ No newline at end of file
diff --git a/tools/coder-cli/.gitlab-ci.yml b/tools/coder-cli/.gitlab-ci.yml
new file mode 100644
index 0000000..f8dfe78
--- /dev/null
+++ b/tools/coder-cli/.gitlab-ci.yml
@@ -0,0 +1,11 @@
+build_cli:
+  stage: base
+  script:
+    - buildah info
+    - buildah bud --storage-driver=${STORAGE_DRIVER} -t ${FQ_IMAGE_NAME}:cli -f tools/coder-cli/Dockerfile .
+    - echo "$CI_REGISTRY_PASSWORD" | buildah login -u "$CI_REGISTRY_USER" --password-stdin "$CI_REGISTRY"
+    - buildah push ${FQ_IMAGE_NAME}:cli
+  rules:
+    - changes:
+        - tools/coder-cli/**
+    - if: '$CI_PIPELINE_SOURCE == "schedule"'
\ No newline at end of file
diff --git a/tools/coder-cli/Dockerfile b/tools/coder-cli/Dockerfile
new file mode 100644
index 0000000..1266c44
--- /dev/null
+++ b/tools/coder-cli/Dockerfile
@@ -0,0 +1,6 @@
+FROM alpine:latest@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
+
+RUN apk add --no-cache curl sed
+RUN curl -fsSL https://coder.com/install.sh | sh
+
+ENTRYPOINT []
\ No newline at end of file
diff --git a/tools/terraform-shell/.gitlab-ci.yml b/tools/terraform-shell/.gitlab-ci.yml
new file mode 100644
index 0000000..54a4f96
--- /dev/null
+++ b/tools/terraform-shell/.gitlab-ci.yml
@@ -0,0 +1,11 @@
+build_shell:
+  stage: base
+  script:
+    - buildah info
+    - buildah bud --storage-driver=${STORAGE_DRIVER} -t ${FQ_IMAGE_NAME}:terraform -f tools/terraform-shell/Dockerfile .
+    - echo "$CI_REGISTRY_PASSWORD" | buildah login -u "$CI_REGISTRY_USER" --password-stdin "$CI_REGISTRY"
+    - buildah push ${FQ_IMAGE_NAME}:terraform
+  rules:
+    - changes:
+        - tools/terraform-shell/**
+    - if: '$CI_PIPELINE_SOURCE == "schedule"'
\ No newline at end of file
diff --git a/tools/terraform-shell/Dockerfile b/tools/terraform-shell/Dockerfile
new file mode 100644
index 0000000..eae373e
--- /dev/null
+++ b/tools/terraform-shell/Dockerfile
@@ -0,0 +1,2 @@
+FROM docker.io/hashicorp/terraform:1.13.5@sha256:6bbb82d575aa7bd4f0a2c6e3a0838ab9590426c08a71d7a2783643f01004d356
+ENTRYPOINT []
\ No newline at end of file