# The sandbox of `skylar agent`: a Linux shell with common compilers and tools, run with --network none, a read-only
# root and the task folder mounted on /work. Built automatically the first time `skylar agent` needs it.
FROM debian:trixie-slim
RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
        bash coreutils findutils grep sed gawk diffutils file procps less tree bc jq sqlite3 git make patch \
        gnucobol python3 python3-venv gcc g++ libc6-dev default-jdk-headless nodejs zip unzip xz-utils ca-certificates \
    && rm -rf /var/lib/apt/lists/*
RUN useradd -m -u 1000 -s /bin/bash agent && mkdir -p /work && chown agent:agent /work
USER agent
WORKDIR /work
ENV HOME=/home/agent LANG=C.UTF-8
CMD ["bash"]
