From 1f3ff91baf53eea93ffccc47af15506252ea35d6 Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 14:23:38 +0000
Subject: [PATCH 01/14] docker buildx build --platform=linux/amd64,linux/arm64

---
 Makefile | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 0f113acac..ad9585660 100644
--- a/Makefile
+++ b/Makefile
@@ -63,7 +63,10 @@ release: pristine cross
 .PHONY: release
 
 image:
-	docker build -t quay.io/${ORG}/helmfile:${TAG} .
+	docker buildx build \
+		--platform=linux/amd64,linux/arm64 \
+		-t quay.io/${ORG}/helmfile:${TAG} \
+		.
 
 run: image
 	docker run --rm -it -t quay.io/${ORG}/helmfile:${TAG} sh
@@ -72,7 +75,11 @@ push: image
 	docker push quay.io/${ORG}/helmfile:${TAG}
 
 image/debian:
-	docker build -f Dockerfile.debian -t quay.io/${ORG}/helmfile:${TAG}-stable-slim .
+	docker buildx build \
+		--platform=linux/amd64,linux/arm64 \
+		-f Dockerfile.debian \
+		-t quay.io/${ORG}/helmfile:${TAG}-stable-slim \
+		.
 
 push/debian: image/debian
 	docker push quay.io/${ORG}/helmfile:${TAG}-stable-slim

From e8eed8e14b3cbfbf156488f33f364ce57537dc4f Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 14:25:04 +0000
Subject: [PATCH 02/14] Upgrade to helm-diff 3.2.0

---
 Dockerfile              | 2 +-
 Dockerfile.debian       | 2 +-
 Dockerfile.helm3        | 2 +-
 Dockerfile.helm3.ubuntu | 2 +-
 test/integration/run.sh | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 3a3e9ee7d..6e3d94d19 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -46,7 +46,7 @@ RUN set -x && \
     rm kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
     mv kustomize /usr/local/bin/kustomize
 
-RUN helm plugin install https://github.com/databus23/helm-diff --version v3.1.3 && \
+RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0 && \
     helm plugin install https://github.com/jkroepke/helm-secrets --version v3.5.0 && \
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.10.0 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v0.10.0
diff --git a/Dockerfile.debian b/Dockerfile.debian
index 90e1e03b4..f267bb627 100644
--- a/Dockerfile.debian
+++ b/Dockerfile.debian
@@ -60,7 +60,7 @@ RUN set -x && \
     rm kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
     mv kustomize /usr/local/bin/kustomize
 
-RUN helm plugin install https://github.com/databus23/helm-diff --version v3.1.3 && \
+RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0 && \
     helm plugin install https://github.com/jkroepke/helm-secrets --version v3.5.0 && \
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.10.0 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v0.10.0
diff --git a/Dockerfile.helm3 b/Dockerfile.helm3
index 1ae12f4c6..4c68fc8fc 100644
--- a/Dockerfile.helm3
+++ b/Dockerfile.helm3
@@ -45,7 +45,7 @@ RUN set -x && \
     rm kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
     mv kustomize /usr/local/bin/kustomize
 
-RUN helm plugin install https://github.com/databus23/helm-diff --version v3.1.3 && \
+RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0 && \
     helm plugin install https://github.com/jkroepke/helm-secrets --version v3.5.0 && \
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.10.0 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v0.10.0
diff --git a/Dockerfile.helm3.ubuntu b/Dockerfile.helm3.ubuntu
index ae46fd4f2..36845a44c 100644
--- a/Dockerfile.helm3.ubuntu
+++ b/Dockerfile.helm3.ubuntu
@@ -53,7 +53,7 @@ RUN set -x && \
 
 RUN pip install sops
 
-RUN helm plugin install https://github.com/databus23/helm-diff --version v3.1.3 && \
+RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0 && \
     helm plugin install https://github.com/jkroepke/helm-secrets --version v3.5.0 && \
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.10.0 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v0.10.0
diff --git a/test/integration/run.sh b/test/integration/run.sh
index f30c79623..7a791c269 100755
--- a/test/integration/run.sh
+++ b/test/integration/run.sh
@@ -26,7 +26,7 @@ export HELM_HOME="${HELM_DATA_HOME}"
 export HELM_PLUGINS="${HELM_DATA_HOME}/plugins"
 export HELM_CONFIG_HOME="${helm_dir}/config"
 HELM_SECRETS_VERSION=3.5.0
-HELM_DIFF_VERSION=3.1.3
+HELM_DIFF_VERSION=3.2.0
 export GNUPGHOME="${PWD}/${dir}/.gnupg"
 export SOPS_PGP_FP="B2D6D7BBEC03B2E66571C8C00AD18E16CFDEF700"
 

From 6880681387b20e1268c33c6c96aad27f54562f88 Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 15:14:41 +0000
Subject: [PATCH 03/14] Update Dockerfiles for arm64

---
 Dockerfile              | 41 ++++++++++++++++++----------------------
 Dockerfile.debian       | 27 ++++++++------------------
 Dockerfile.helm3        | 42 +++++++++++++++++++----------------------
 Dockerfile.helm3.ubuntu | 41 +++++++++++++++++-----------------------
 Dockerfile.ubuntu       | 34 +++++++++++++--------------------
 5 files changed, 75 insertions(+), 110 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 6e3d94d19..ead7c8d75 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,49 +1,44 @@
-FROM golang:1.17.3-alpine3.13 as builder
-
-RUN apk add --no-cache make git
-WORKDIR /workspace/helmfile
-COPY . /workspace/helmfile
-RUN make static-linux
-
-# -----------------------------------------------------------------------------
-
 FROM alpine:3.13
 
 RUN apk add --no-cache ca-certificates git bash curl jq
 
+ARG TARGETARCH
 ARG HELM_VERSION="v3.7.2"
-ARG HELM_SHA256="4ae30e48966aba5f807a4e140dad6736ee1a392940101e4d79ffb4ee86200a9e"
 ARG HELM_LOCATION="https://get.helm.sh"
-ARG HELM_FILENAME="helm-${HELM_VERSION}-linux-amd64.tar.gz"
+ARG HELM_FILENAME="helm-${HELM_VERSION}-linux-${TARGETARCH}.tar.gz"
 
 RUN set -x && \
+    wget ${HELM_LOCATION}/${HELM_FILENAME}.sha256sum && \
+    HELM_SHA256=$(cat ${HELM_FILENAME}.sha256sum) && \
     wget ${HELM_LOCATION}/${HELM_FILENAME} && \
     echo Verifying ${HELM_FILENAME}... && \
-    sha256sum ${HELM_FILENAME} | grep -q "${HELM_SHA256}" && \
+    sha256sum ${HELM_FILENAME} | grep "${HELM_SHA256}" && \
     echo Extracting ${HELM_FILENAME}... && \
-    tar zxvf ${HELM_FILENAME} && mv /linux-amd64/helm /usr/local/bin/ && \
-    rm ${HELM_FILENAME} && rm -r /linux-amd64
+    tar zxvf ${HELM_FILENAME} && mv /linux-${TARGETARCH}/helm /usr/local/bin/ && \
+    rm ${HELM_FILENAME} && rm -r /linux-${TARGETARCH}
 
 # using the install documentation found at https://kubernetes.io/docs/tasks/tools/install-kubectl/
 # for now but in a future version of alpine (in the testing version at the time of writing)
 # we should be able to install using apk add.
-# the sha256 sum can be found at https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256
+# the sha256 sum can be found at https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl.sha256
 # maybe a good idea to automate in the future?
 ENV KUBECTL_VERSION="v1.21.4"
-ENV KUBECTL_SHA256="9410572396fb31e49d088f9816beaebad7420c7686697578691be1651d3bf85a"
 RUN set -x && \
-    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" && \
+    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl.sha256" && \
+    KUBECTL_SHA256=$(cat kubectl.sha256) && \
+    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl" && \
     sha256sum kubectl | grep ${KUBECTL_SHA256} && \
     chmod +x kubectl && \
     mv kubectl /usr/local/bin/kubectl
 
 ENV KUSTOMIZE_VERSION="v3.8.8"
-ENV KUSTOMIZE_SHA256="175938206f23956ec18dac3da0816ea5b5b485a8493a839da278faac82e3c303"
 RUN set -x && \
-    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
-    sha256sum kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz | grep ${KUSTOMIZE_SHA256} && \
-    tar zxf kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
-    rm kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
+    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/checksums.txt && \
+    KUSTOMIZE_SHA256=$(grep kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz checksums.txt | awk '{print $1}') && \
+    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
+    sha256sum kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz | grep ${KUSTOMIZE_SHA256} && \
+    tar zxf kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
+    rm kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
     mv kustomize /usr/local/bin/kustomize
 
 RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0 && \
@@ -51,6 +46,6 @@ RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.10.0 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v0.10.0
 
-COPY --from=builder /workspace/helmfile/dist/helmfile_linux_amd64 /usr/local/bin/helmfile
+COPY dist/helmfile_linux_${TARGETARCH} /usr/local/bin/helmfile
 
 CMD ["/usr/local/bin/helmfile"]
diff --git a/Dockerfile.debian b/Dockerfile.debian
index f267bb627..826e3213f 100644
--- a/Dockerfile.debian
+++ b/Dockerfile.debian
@@ -1,18 +1,3 @@
-FROM golang:1.17.3 as builder
-
-RUN apt-get update \
- && apt-get install --no-install-recommends -y \
-    build-essential \
-    git \
- && rm -rf /var/lib/apt/lists/*
-
-WORKDIR /workspace/helmfile
-COPY . /workspace/helmfile
-
-RUN make static-linux
-
-# -----------------------------------------------------------------------------
-
 FROM debian:stable-slim
 
 RUN apt-get update \ 
@@ -25,12 +10,14 @@ RUN apt-get update \
     wget \
  && rm -rf /var/lib/apt/lists/* 
 
+ARG TARGETARCH
 ARG HELM_VERSION="v3.7.2"
-ARG HELM_SHA256="4ae30e48966aba5f807a4e140dad6736ee1a392940101e4d79ffb4ee86200a9e"
 ARG HELM_LOCATION="https://get.helm.sh"
 ARG HELM_FILENAME="helm-${HELM_VERSION}-linux-amd64.tar.gz"
 
 RUN set -x && \
+    wget ${HELM_LOCATION}/${HELM_FILENAME}.sha256sum && \
+    HELM_SHA256=$(cat ${HELM_FILENAME}.sha256sum) && \
     wget "${HELM_LOCATION}/${HELM_FILENAME}" && \
     echo "Verifying ${HELM_FILENAME}..." && \
     sha256sum "${HELM_FILENAME}" | grep -q "${HELM_SHA256}" && \
@@ -44,16 +31,18 @@ RUN set -x && \
 # the sha256 sum can be found at https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256
 # maybe a good idea to automate in the future?
 ENV KUBECTL_VERSION="v1.21.4"
-ENV KUBECTL_SHA256="9410572396fb31e49d088f9816beaebad7420c7686697578691be1651d3bf85a"
 RUN set -x && \
+    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl.sha256" && \
+    KUBECTL_SHA256=$(cat kubectl.sha256) && \
     wget "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" && \
     sha256sum kubectl | grep ${KUBECTL_SHA256} && \
     chmod +x kubectl && \
     mv kubectl /usr/local/bin/kubectl
 
 ENV KUSTOMIZE_VERSION="v3.8.8"
-ENV KUSTOMIZE_SHA256="175938206f23956ec18dac3da0816ea5b5b485a8493a839da278faac82e3c303"
 RUN set -x && \
+    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/checksums.txt && \
+    KUSTOMIZE_SHA256=$(grep kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz checksums.txt | awk '{print $1}') && \
     curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
     sha256sum kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz | grep ${KUSTOMIZE_SHA256} && \
     tar zxf kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
@@ -65,6 +54,6 @@ RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.10.0 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v0.10.0
 
-COPY --from=builder /workspace/helmfile/dist/helmfile_linux_amd64 /usr/local/bin/helmfile
+COPY dist/helmfile_linux_${TARGETARCH} /usr/local/bin/helmfile
 
 CMD ["/usr/local/bin/helmfile"]
diff --git a/Dockerfile.helm3 b/Dockerfile.helm3
index 4c68fc8fc..f6d25c4cb 100644
--- a/Dockerfile.helm3
+++ b/Dockerfile.helm3
@@ -1,48 +1,44 @@
-FROM golang:1.17.3-alpine3.13 as builder
-
-RUN apk add --no-cache make git
-WORKDIR /workspace/helmfile
-COPY . /workspace/helmfile
-RUN make static-linux
-
-# -----------------------------------------------------------------------------
-
 FROM alpine:3.13
 
 RUN apk add --no-cache ca-certificates git bash curl jq
 
+ARG TARGETARCH
 ARG HELM_VERSION="v3.7.2"
 ARG HELM_LOCATION="https://get.helm.sh"
-ARG HELM_FILENAME="helm-${HELM_VERSION}-linux-amd64.tar.gz"
-ARG HELM_SHA256="4ae30e48966aba5f807a4e140dad6736ee1a392940101e4d79ffb4ee86200a9e"
+ARG HELM_FILENAME="helm-${HELM_VERSION}-linux-${TARGETARCH}.tar.gz"
+
 RUN set -x && \
+    wget ${HELM_LOCATION}/${HELM_FILENAME}.sha256sum && \
+    HELM_SHA256=$(cat ${HELM_FILENAME}.sha256sum) && \
     wget ${HELM_LOCATION}/${HELM_FILENAME} && \
     echo Verifying ${HELM_FILENAME}... && \
-    sha256sum ${HELM_FILENAME} | grep -q "${HELM_SHA256}" && \
+    sha256sum ${HELM_FILENAME} | grep "${HELM_SHA256}" && \
     echo Extracting ${HELM_FILENAME}... && \
-    tar zxvf ${HELM_FILENAME} && mv /linux-amd64/helm /usr/local/bin/ && \
-    rm ${HELM_FILENAME} && rm -r /linux-amd64
+    tar zxvf ${HELM_FILENAME} && mv /linux-${TARGETARCH}/helm /usr/local/bin/ && \
+    rm ${HELM_FILENAME} && rm -r /linux-${TARGETARCH}
 
 # using the install documentation found at https://kubernetes.io/docs/tasks/tools/install-kubectl/
 # for now but in a future version of alpine (in the testing version at the time of writing)
 # we should be able to install using apk add.
-# the sha256 sum can be found at https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256
+# the sha256 sum can be found at https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl.sha256
 # maybe a good idea to automate in the future?
 ENV KUBECTL_VERSION="v1.18.9"
-ENV KUBECTL_SHA256="6a68756a2d3d04b4d0f52b00de6493ba2c1fcb28b32f3e4a0e99b3d9f6c4e8ed"
 RUN set -x && \
-    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" && \
+    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl.sha256" && \
+    KUBECTL_SHA256=$(cat kubectl.sha256) && \
+    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl" && \
     sha256sum kubectl | grep ${KUBECTL_SHA256} && \
     chmod +x kubectl && \
     mv kubectl /usr/local/bin/kubectl
 
 ENV KUSTOMIZE_VERSION="v3.8.8"
-ENV KUSTOMIZE_SHA256="175938206f23956ec18dac3da0816ea5b5b485a8493a839da278faac82e3c303"
 RUN set -x && \
-    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
-    sha256sum kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz | grep ${KUSTOMIZE_SHA256} && \
-    tar zxf kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
-    rm kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
+    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/checksums.txt && \
+    KUSTOMIZE_SHA256=$(grep kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz checksums.txt | awk '{print $1}') && \
+    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
+    sha256sum kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz | grep ${KUSTOMIZE_SHA256} && \
+    tar zxf kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
+    rm kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
     mv kustomize /usr/local/bin/kustomize
 
 RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0 && \
@@ -50,6 +46,6 @@ RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.10.0 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v0.10.0
 
-COPY --from=builder /workspace/helmfile/dist/helmfile_linux_amd64 /usr/local/bin/helmfile
+COPY dist/helmfile_linux_${TARGETARCH} /usr/local/bin/helmfile
 
 CMD ["/usr/local/bin/helmfile"]
diff --git a/Dockerfile.helm3.ubuntu b/Dockerfile.helm3.ubuntu
index 36845a44c..2ba025797 100644
--- a/Dockerfile.helm3.ubuntu
+++ b/Dockerfile.helm3.ubuntu
@@ -1,14 +1,3 @@
-FROM golang:1.17.3-buster as builder
-
-RUN apt update -qq && \
-    apt install --no-install-recommends -y make git && \
-    rm -rf /var/lib/apt/lists/*
-WORKDIR /workspace/helmfile
-COPY . /workspace/helmfile
-RUN make static-linux
-
-# -----------------------------------------------------------------------------
-
 FROM ubuntu:20.10
 
 RUN apt update -qq && \
@@ -17,38 +6,42 @@ RUN apt update -qq && \
     git bash curl jq pip wget && \
     rm -rf /var/lib/apt/lists/*
 
+ARG TARGETARCH
 ARG HELM_VERSION="v3.7.2"
 ARG HELM_LOCATION="https://get.helm.sh"
-ARG HELM_FILENAME="helm-${HELM_VERSION}-linux-amd64.tar.gz"
-ARG HELM_SHA256="4ae30e48966aba5f807a4e140dad6736ee1a392940101e4d79ffb4ee86200a9e"
+ARG HELM_FILENAME="helm-${HELM_VERSION}-linux-${TARGETARCH}.tar.gz"
 RUN set -x && \
+    wget ${HELM_LOCATION}/${HELM_FILENAME}.sha256sum && \
+    HELM_SHA256=$(cat ${HELM_FILENAME}.sha256sum) && \
     wget ${HELM_LOCATION}/${HELM_FILENAME} && \
     echo Verifying ${HELM_FILENAME}... && \
     sha256sum ${HELM_FILENAME} | grep -q "${HELM_SHA256}" && \
     echo Extracting ${HELM_FILENAME}... && \
-    tar zxvf ${HELM_FILENAME} && mv /linux-amd64/helm /usr/local/bin/ && \
-    rm ${HELM_FILENAME} && rm -r /linux-amd64
+    tar zxvf ${HELM_FILENAME} && mv /linux-${TARGETARCH}/helm /usr/local/bin/ && \
+    rm ${HELM_FILENAME} && rm -r /linux-${TARGETARCH}
 
 # using the install documentation found at https://kubernetes.io/docs/tasks/tools/install-kubectl/
 # for now but in a future version of alpine (in the testing version at the time of writing)
 # we should be able to install using apk add.
-# the sha256 sum can be found at https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256
+# the sha256 sum can be found at https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl.sha256
 # maybe a good idea to automate in the future?
 ENV KUBECTL_VERSION="v1.18.9"
-ENV KUBECTL_SHA256="6a68756a2d3d04b4d0f52b00de6493ba2c1fcb28b32f3e4a0e99b3d9f6c4e8ed"
 RUN set -x && \
-    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" && \
+    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl.sha256" && \
+    KUBECTL_SHA256=$(cat kubectl.sha256) && \
+    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl" && \
     sha256sum kubectl | grep ${KUBECTL_SHA256} && \
     chmod +x kubectl && \
     mv kubectl /usr/local/bin/kubectl
 
 ENV KUSTOMIZE_VERSION="v3.8.8"
-ENV KUSTOMIZE_SHA256="175938206f23956ec18dac3da0816ea5b5b485a8493a839da278faac82e3c303"
 RUN set -x && \
-    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
-    sha256sum kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz | grep ${KUSTOMIZE_SHA256} && \
-    tar zxf kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
-    rm kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
+    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/checksums.txt && \
+    KUSTOMIZE_SHA256=$(grep kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz checksums.txt | awk '{print $1}') && \
+    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
+    sha256sum kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz | grep ${KUSTOMIZE_SHA256} && \
+    tar zxf kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
+    rm kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
     mv kustomize /usr/local/bin/kustomize
 
 RUN pip install sops
@@ -58,6 +51,6 @@ RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.10.0 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v0.10.0
 
-COPY --from=builder /workspace/helmfile/dist/helmfile_linux_amd64 /usr/local/bin/helmfile
+COPY --from=builder /workspace/helmfile/dist/helmfile_linux_${TARGETARCH} /usr/local/bin/helmfile
 
 CMD ["/usr/local/bin/helmfile"]
diff --git a/Dockerfile.ubuntu b/Dockerfile.ubuntu
index 4bfc5942e..96a282c53 100644
--- a/Dockerfile.ubuntu
+++ b/Dockerfile.ubuntu
@@ -1,14 +1,3 @@
-FROM golang:1.17.3-buster as builder
-
-RUN apt update -qq && \
-    apt install --no-install-recommends -y make git && \
-    rm -rf /var/lib/apt/lists/*
-WORKDIR /workspace/helmfile
-COPY . /workspace/helmfile
-RUN make static-linux
-
-# -----------------------------------------------------------------------------
-
 FROM ubuntu:20.10
 
 RUN apt update -qq && \
@@ -17,28 +6,31 @@ RUN apt update -qq && \
     git bash curl jq pip wget && \
     rm -rf /var/lib/apt/lists/*
 
+ARG TARGETARCH
 ARG HELM_VERSION="v2.17.0"
 ARG HELM_LOCATION="https://kubernetes-helm.storage.googleapis.com"
-ARG HELM_FILENAME="helm-${HELM_VERSION}-linux-amd64.tar.gz"
-ARG HELM_SHA256="f3bec3c7c55f6a9eb9e6586b8c503f370af92fe987fcbf741f37707606d70296"
+ARG HELM_FILENAME="helm-${HELM_VERSION}-linux-${TARGETARCH}.tar.gz"
 RUN set -x && \
+    wget ${HELM_LOCATION}/${HELM_FILENAME}.sha256sum && \
+    HELM_SHA256=$(cat ${HELM_FILENAME}.sha256sum) && \
     wget ${HELM_LOCATION}/${HELM_FILENAME} && \
     echo Verifying ${HELM_FILENAME}... && \
-    sha256sum ${HELM_FILENAME} | grep -q "${HELM_SHA256}" && \
+    sha256sum ${HELM_FILENAME} | grep "${HELM_SHA256}" && \
     echo Extracting ${HELM_FILENAME}... && \
-    tar zxvf ${HELM_FILENAME} && mv /linux-amd64/helm /usr/local/bin/ && \
-    mv /linux-amd64/tiller /usr/local/bin/ && \
-    rm ${HELM_FILENAME} && rm -r /linux-amd64
+    tar zxvf ${HELM_FILENAME} && mv /linux-${TARGETARCH}/helm /usr/local/bin/ && \
+    mv /linux-${TARGETARCH}/tiller /usr/local/bin/ && \
+    rm ${HELM_FILENAME} && rm -r /linux-${TARGETARCH}
 
 # using the install documentation found at https://kubernetes.io/docs/tasks/tools/install-kubectl/
 # for now but in a future version of alpine (in the testing version at the time of writing)
 # we should be able to install using apk add.
-# the sha256 sum can be found at https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256
+# the sha256 sum can be found at https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl.sha256
 # maybe a good idea to automate in the future?
 ENV KUBECTL_VERSION="v1.18.9"
-ENV KUBECTL_SHA256="6a68756a2d3d04b4d0f52b00de6493ba2c1fcb28b32f3e4a0e99b3d9f6c4e8ed"
 RUN set -x & \
-    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" && \
+    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl.sha256" && \
+    KUBECTL_SHA256=$(cat kubectl.sha256) && \
+    curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl" && \
     sha256sum kubectl | grep ${KUBECTL_SHA256} && \
     chmod +x kubectl && \
     mv kubectl /usr/local/bin/kubectl
@@ -52,6 +44,6 @@ RUN helm plugin install https://github.com/databus23/helm-diff && \
     helm plugin install https://github.com/aslafy-z/helm-git.git && \
     helm plugin install https://github.com/rimusz/helm-tiller
 
-COPY --from=builder /workspace/helmfile/dist/helmfile_linux_amd64 /usr/local/bin/helmfile
+COPY dist/helmfile_linux_${TARGETARCH} /usr/local/bin/helmfile
 
 CMD ["/usr/local/bin/helmfile", "--help"]

From b316de4cc7f8232fe94e4a73a44ce4508ea4d231 Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 15:29:56 +0000
Subject: [PATCH 04/14] Install qemu arm64 in .circleci/config.yml

---
 .circleci/config.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 5ced18519..37d0e28bd 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -40,6 +40,7 @@ jobs:
         command: |
           make tools
           go mod vendor
+          docker run --rm --privileged tonistiigi/binfmt:latest --install linux/amd64,linux/arm64
           ORG=roboll BUILD_URL="$CIRCLE_BUILD_URL" make image
 
   image_debian:
@@ -57,6 +58,7 @@ jobs:
         command: |
           make tools
           go mod vendor
+          docker run --rm --privileged tonistiigi/binfmt:latest --install linux/amd64,linux/arm64
           ORG=roboll BUILD_URL="$CIRCLE_BUILD_URL" make image/debian
 
   test:

From 62c0a951f71984c28df466b76ac5966654e9bcbb Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 15:35:00 +0000
Subject: [PATCH 05/14] Fix docker buildx version

image: docker/stable
---
 .circleci/config.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 37d0e28bd..87ae67be6 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -25,9 +25,10 @@ jobs:
           root: ./
           paths:
             - .
+
   image:
     docker:
-    - image: circleci/golang:1.17.3
+    - image: docker:stable
     working_directory: /home/circleci/workspace/helmfile
     steps:
     - checkout
@@ -45,7 +46,7 @@ jobs:
 
   image_debian:
     docker:
-    - image: circleci/golang:1.17.3
+    - image: docker:stable
     working_directory: /home/circleci/workspace/helmfile
     steps:
     - checkout

From 8134f3364cbe9a40d04a8051ca51c575498ec680 Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 15:42:39 +0000
Subject: [PATCH 06/14] Follow circleci guide

https://circleci.com/blog/building-docker-images-for-multiple-os-architectures/
---
 .circleci/config.yml | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 87ae67be6..4691c8dfa 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -28,7 +28,7 @@ jobs:
 
   image:
     docker:
-    - image: docker:stable
+    - image: jdrouet/docker-with-buildx:stable
     working_directory: /home/circleci/workspace/helmfile
     steps:
     - checkout
@@ -36,7 +36,8 @@ jobs:
         keys:
         - go-mod-cache-v1-{{ checksum "./go.sum" }}
         - go-mod-cache-v1-
-    - setup_remote_docker
+    - setup_remote_docker:
+        version: 18.09.3
     - run:
         command: |
           make tools
@@ -46,7 +47,7 @@ jobs:
 
   image_debian:
     docker:
-    - image: docker:stable
+    - image: jdrouet/docker-with-buildx:stable
     working_directory: /home/circleci/workspace/helmfile
     steps:
     - checkout
@@ -54,7 +55,8 @@ jobs:
         keys:
         - go-mod-cache-v1-{{ checksum "./go.sum" }}
         - go-mod-cache-v1-
-    - setup_remote_docker
+    - setup_remote_docker:
+        version: 18.09.3
     - run:
         command: |
           make tools
@@ -126,7 +128,8 @@ jobs:
         keys:
         - go-mod-cache-v1-{{ checksum "./go.sum" }}
         - go-mod-cache-v1-
-    - setup_remote_docker
+    - setup_remote_docker:
+        version: 18.09.3
     - run:
         no_output_timeout: 30m
         command: |

From e439bdec7650624639594cb094eae87fa18bbb47 Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 15:57:15 +0000
Subject: [PATCH 07/14] fixup! Update Dockerfiles for arm64

---
 .circleci/config.yml | 33 +++++++++++++++++----------------
 1 file changed, 17 insertions(+), 16 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 4691c8dfa..6e0b2801f 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -32,17 +32,16 @@ jobs:
     working_directory: /home/circleci/workspace/helmfile
     steps:
     - checkout
-    - restore_cache:
-        keys:
-        - go-mod-cache-v1-{{ checksum "./go.sum" }}
-        - go-mod-cache-v1-
+    - run: mkdir ~/build
+    - attach_workspace:
+        at: ~/build
+    - run: mv -v ~/build/dist .
     - setup_remote_docker:
         version: 18.09.3
     - run:
         command: |
-          make tools
-          go mod vendor
-          docker run --rm --privileged tonistiigi/binfmt:latest --install linux/amd64,linux/arm64
+          find dist
+          #docker run --rm --privileged tonistiigi/binfmt:latest --install linux/amd64,linux/arm64
           ORG=roboll BUILD_URL="$CIRCLE_BUILD_URL" make image
 
   image_debian:
@@ -51,17 +50,15 @@ jobs:
     working_directory: /home/circleci/workspace/helmfile
     steps:
     - checkout
-    - restore_cache:
-        keys:
-        - go-mod-cache-v1-{{ checksum "./go.sum" }}
-        - go-mod-cache-v1-
+    - run: mkdir ~/build
+    - attach_workspace:
+        at: ~/build
+    - run: mv -v ~/build/dist .
     - setup_remote_docker:
         version: 18.09.3
     - run:
         command: |
-          make tools
-          go mod vendor
-          docker run --rm --privileged tonistiigi/binfmt:latest --install linux/amd64,linux/arm64
+          #docker run --rm --privileged tonistiigi/binfmt:latest --install linux/amd64,linux/arm64
           ORG=roboll BUILD_URL="$CIRCLE_BUILD_URL" make image/debian
 
   test:
@@ -143,8 +140,12 @@ workflows:
   build_and_test:
     jobs:
       - build
-      - image
-      - image_debian
+      - image:
+          requires:
+            - build
+      - image_debian:
+          requires:
+            - build
       - test
       - integration_tests:
           requires:

From 00a8881eddebc19aed39aa0ae940087d0bcb50e7 Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 16:14:05 +0000
Subject: [PATCH 08/14] HACK: disable test and integration jobs

---
 .circleci/config.yml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 6e0b2801f..8393f51fa 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -146,13 +146,6 @@ workflows:
       - image_debian:
           requires:
             - build
-      - test
-      - integration_tests:
-          requires:
-            - build
-          matrix:
-            parameters:
-              helm-version: ["v3.4.2", "v3.5.4", "v3.6.3", "v3.7.2"]
       - release:
           filters:
             branches:

From 84384a8b6b63d18fc281e0c87b990efc454d733e Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 16:48:59 +0000
Subject: [PATCH 09/14] HACK: speed up make cross

---
 Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index ad9585660..b43513cfd 100644
--- a/Makefile
+++ b/Makefile
@@ -38,7 +38,7 @@ integration/vagrant:
 .PHONY: integration/vagrant
 
 cross:
-	env CGO_ENABLED=0 gox -os 'windows darwin linux' -arch '386 amd64 arm64' -osarch '!darwin/386' -output "dist/{{.Dir}}_{{.OS}}_{{.Arch}}" -ldflags '-X github.com/roboll/helmfile/pkg/app/version.Version=${TAG}' ${TARGETS}
+	env CGO_ENABLED=0 gox -os 'linux' -arch 'amd64 arm64' -osarch '!darwin/386' -output "dist/{{.Dir}}_{{.OS}}_{{.Arch}}" -ldflags '-X github.com/roboll/helmfile/pkg/app/version.Version=${TAG}' ${TARGETS}
 .PHONY: cross
 
 static-linux:

From 3717ffd7b6ff690a6adfe6b30d1ff927dbb78808 Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 16:18:07 +0000
Subject: [PATCH 10/14] apk add make

---
 .circleci/config.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 8393f51fa..75d96a45e 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -42,6 +42,7 @@ jobs:
         command: |
           find dist
           #docker run --rm --privileged tonistiigi/binfmt:latest --install linux/amd64,linux/arm64
+          apk add --no-cache make git
           ORG=roboll BUILD_URL="$CIRCLE_BUILD_URL" make image
 
   image_debian:
@@ -59,6 +60,7 @@ jobs:
     - run:
         command: |
           #docker run --rm --privileged tonistiigi/binfmt:latest --install linux/amd64,linux/arm64
+          apk add --no-cache make git
           ORG=roboll BUILD_URL="$CIRCLE_BUILD_URL" make image/debian
 
   test:

From 7cf9aa44faca07bdb66961850a2f53a9ae9529da Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 16:23:58 +0000
Subject: [PATCH 11/14] make cross in build job

---
 .circleci/config.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 75d96a45e..d84bc925f 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -17,6 +17,10 @@ jobs:
       - run: go env
       - run: make build
       - run: make build-test-tools
+      - run: |
+          make tools
+          go mod vendor
+          make cross
       - save_cache:
           key: go-mod-cache-v1-{{ checksum "./go.sum" }}
           paths:

From dea709f91307c7616f39c3d5676d2a61fe89b917 Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 17:21:49 +0000
Subject: [PATCH 12/14] restore binfmt misc

---
 .circleci/config.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index d84bc925f..6e160c281 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -45,7 +45,7 @@ jobs:
     - run:
         command: |
           find dist
-          #docker run --rm --privileged tonistiigi/binfmt:latest --install linux/amd64,linux/arm64
+          docker run --rm --privileged tonistiigi/binfmt:latest --install linux/arm64
           apk add --no-cache make git
           ORG=roboll BUILD_URL="$CIRCLE_BUILD_URL" make image
 
@@ -63,7 +63,7 @@ jobs:
         version: 18.09.3
     - run:
         command: |
-          #docker run --rm --privileged tonistiigi/binfmt:latest --install linux/amd64,linux/arm64
+          docker run --rm --privileged tonistiigi/binfmt:latest --install linux/arm64
           apk add --no-cache make git
           ORG=roboll BUILD_URL="$CIRCLE_BUILD_URL" make image/debian
 

From 38dcee7858ffa49cfec9137b233c760f76b5c226 Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 17:32:34 +0000
Subject: [PATCH 13/14] fixup! Update Dockerfiles for arm64

---
 Dockerfile.debian | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/Dockerfile.debian b/Dockerfile.debian
index 826e3213f..d901d6113 100644
--- a/Dockerfile.debian
+++ b/Dockerfile.debian
@@ -13,7 +13,7 @@ RUN apt-get update \
 ARG TARGETARCH
 ARG HELM_VERSION="v3.7.2"
 ARG HELM_LOCATION="https://get.helm.sh"
-ARG HELM_FILENAME="helm-${HELM_VERSION}-linux-amd64.tar.gz"
+ARG HELM_FILENAME="helm-${HELM_VERSION}-linux-${TARGETARCH}.tar.gz"
 
 RUN set -x && \
     wget ${HELM_LOCATION}/${HELM_FILENAME}.sha256sum && \
@@ -22,19 +22,19 @@ RUN set -x && \
     echo "Verifying ${HELM_FILENAME}..." && \
     sha256sum "${HELM_FILENAME}" | grep -q "${HELM_SHA256}" && \
     echo "Extracting ${HELM_FILENAME}..." && \
-    tar zxvf "${HELM_FILENAME}" && mv /linux-amd64/helm /usr/local/bin/ && \
-    rm ${HELM_FILENAME} && rm -r /linux-amd64
+    tar zxvf "${HELM_FILENAME}" && mv /linux-${TARGETARCH}/helm /usr/local/bin/ && \
+    rm ${HELM_FILENAME} && rm -r /linux-${TARGETARCH}
 
 # using the install documentation found at https://kubernetes.io/docs/tasks/tools/install-kubectl/
 # for now but in a future version of alpine (in the testing version at the time of writing)
 # we should be able to install using apk add.
-# the sha256 sum can be found at https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256
+# the sha256 sum can be found at https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl.sha256
 # maybe a good idea to automate in the future?
 ENV KUBECTL_VERSION="v1.21.4"
 RUN set -x && \
     curl --retry 5 --retry-connrefused -LO "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl.sha256" && \
     KUBECTL_SHA256=$(cat kubectl.sha256) && \
-    wget "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/amd64/kubectl" && \
+    wget "https://storage.googleapis.com/kubernetes-release/release/${KUBECTL_VERSION}/bin/linux/${TARGETARCH}/kubectl" && \
     sha256sum kubectl | grep ${KUBECTL_SHA256} && \
     chmod +x kubectl && \
     mv kubectl /usr/local/bin/kubectl
@@ -43,10 +43,10 @@ ENV KUSTOMIZE_VERSION="v3.8.8"
 RUN set -x && \
     curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/checksums.txt && \
     KUSTOMIZE_SHA256=$(grep kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz checksums.txt | awk '{print $1}') && \
-    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
-    sha256sum kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz | grep ${KUSTOMIZE_SHA256} && \
-    tar zxf kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
-    rm kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \
+    curl --retry 5 --retry-connrefused -LO https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize/${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
+    sha256sum kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz | grep ${KUSTOMIZE_SHA256} && \
+    tar zxf kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
+    rm kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
     mv kustomize /usr/local/bin/kustomize
 
 RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0 && \

From 3f50356d51cfc69bf454ba76b2d45faa1b35778d Mon Sep 17 00:00:00 2001
From: Morgan Christiansson <git@mog.se>
Date: Sat, 8 Jan 2022 18:11:40 +0000
Subject: [PATCH 14/14] set -x helm plugin install

---
 Dockerfile        | 3 ++-
 Dockerfile.debian | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index ead7c8d75..3200529eb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -41,7 +41,8 @@ RUN set -x && \
     rm kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
     mv kustomize /usr/local/bin/kustomize
 
-RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0 && \
+RUN set -x && \
+    helm plugin install https://github.com/databus23/helm-diff --version v3.2.0 && \
     helm plugin install https://github.com/jkroepke/helm-secrets --version v3.5.0 && \
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.10.0 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v0.10.0
diff --git a/Dockerfile.debian b/Dockerfile.debian
index d901d6113..2b0d2ffbe 100644
--- a/Dockerfile.debian
+++ b/Dockerfile.debian
@@ -49,7 +49,8 @@ RUN set -x && \
     rm kustomize_${KUSTOMIZE_VERSION}_linux_${TARGETARCH}.tar.gz && \
     mv kustomize /usr/local/bin/kustomize
 
-RUN helm plugin install https://github.com/databus23/helm-diff --version v3.2.0 && \
+RUN set -x && \
+    helm plugin install https://github.com/databus23/helm-diff --version v3.2.0 && \
     helm plugin install https://github.com/jkroepke/helm-secrets --version v3.5.0 && \
     helm plugin install https://github.com/hypnoglow/helm-s3.git --version v0.10.0 && \
     helm plugin install https://github.com/aslafy-z/helm-git.git --version v0.10.0