# Minimal reproduction case for Railway overlay filesystem bug
# This demonstrates that files deleted with rm -rf still appear in the running container

FROM alpine:latest

# The base alpine image comes with /etc/apk directory
# Let's try to delete it in the same RUN command where we do other setup
RUN set -eux; \
    rm -rf /etc/apk; \
    ls -la /etc/ || true

# Create test files that we'll try to delete
RUN echo "test" > /should-be-deleted.txt && \
    mkdir -p /should-be-deleted-dir && \
    echo "test" > /should-be-deleted-dir/file.txt

# Now try to delete them in a separate layer
RUN rm -rf /should-be-deleted.txt /should-be-deleted-dir

# Expected result: /should-be-deleted.txt and /should-be-deleted-dir should NOT exist
# Expected result: /etc/apk should NOT exist
# Actual result on Railway: They still exist!

# To test this bug, build and deploy to Railway.
# Then `railway ssh` and check:
# ls -la /should-be-deleted.txt (should give "No such file")
# ls -la /should-be-deleted-dir (should give "No such file")
# ls -la /etc/apk (should give "No such file")

CMD ["sh", "-c", "echo 'Checking if deleted files exist:'; ls -la /should-be-deleted.txt 2>&1; ls -la /should-be-deleted-dir 2>&1; ls -la /etc/apk 2>&1; echo 'If you see the files above, the overlay FS is broken'; echo 'Container staying alive for inspection...'; tail -f /dev/null"]

FROM alpine:latest

RUN CACHE_BUST=2 
RUN echo "test" > test.txt
RUN ls -la . && stat test.txt
RUN mv test.txt test2.txt
RUN ls -la . && stat test2.txt || echo "gone"

ENTRYPOINT ["sleep", "infinity"]

PS C:\Development\railway-rm-investigaton> railway ssh
  ✓ Connected to interactive shell                                                                                                                           
/ # ls
bin        etc        lib        mnt        proc       run        srv        test.txt   tmp        var
dev        home       media      opt        root       sbin       sys        test2.txt  usr
/ #

FROM debian:bookworm
RUN touch /repro-file
RUN rm -f /repro-file
CMD sleep infinity

docker build -t whiteout-repro .

docker run --rm -it whiteout-repro ls -l /repro-file
ls: cannot access '/repro-file': No such file or directory

docker save whiteout-repro -o repro.tar

mkdir repro && tar -xf repro.tar -C repro

jq -r '.manifests[0].digest' repro/index.json
sha256:5f5246ed027b82fb1bbe00bd016e3b15dec5b5b4d6e0dc218e1af61a05220c5a

jq . repro/blobs/sha256/0cfaa8515320c857097036846c1c0e92846e2bc5452eebccb346fd25ffa38e2c

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.manifest.v1+json",
  "config": {
    "mediaType": "application/vnd.oci.image.config.v1+json",
    "digest": "sha256:d596c3844275eb4764b9c23547e1723eb4dfe841781b2227356524842cde00ba",
    "size": 1071
  },
  "layers": [
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:1029f5ddc0d24726f1cefbb8def7a88f8ec819a1fdc4c05ce523011b4b73c72d",
      "size": 48366072
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:e11c9e95aab1c1fd8e0353abb5a14d36ce3a7d85d3c368834554e20a77836f73",
      "size": 98
    },
    {
      "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
      "digest": "sha256:9f67ea6e4b03671446cf49a43744772dbcc605cdd4c9777895a798bd8b346833",
      "size": 80
    }
  ]
}

tar -tf repro/blobs/sha256/9f67ea6e4b03671446cf49a43744772dbcc605cdd4c9777895a798bd8b346833 | grep '\.wh\.'

.wh.repro-file