# SPDX-License-Identifier: MPL-2.0

# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>

#

# Dev Container image for a2ml-pre-commit

# Base: Chainguard Wolfi (minimal, supply-chain-secure)

# Build: podman build -t a2ml-pre-commit-dev -f .devcontainer/Containerfile .

FROM cgr.dev/chainguard/wolfi-base:latest

# Install common development tools

RUN apk update && apk add --no-cache \

bash \

curl \

git \

openssh-client \

ca-certificates \

build-base \

posix-libc-utils \

shadow \

&& rm -rf /var/cache/apk/*

# Create non-root dev user (matches devcontainer.json remoteUser)

RUN groupadd -g 1000 nonroot || true \

&& useradd -m -u 1000 -g 1000 -s /bin/bash nonroot || true

# Set workspace directory

WORKDIR /workspaces/a2ml-pre-commit

# Default shell

ENV SHELL=/bin/bash

USER nonroot