# syntax=docker/dockerfile:1
# dockerfiles/Dockerfile.hermes-chat-sandbox
FROM python:3.13-slim@sha256:9662417aace5ae7b8e2609cce472b72a8958e134ba372808abe9cc1a0c0125e6

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    HOME=/workspace

RUN groupadd --gid 20000 sandbox \
    && useradd --uid 20000 --gid 20000 --home-dir /workspace --no-create-home sandbox

COPY --chown=20000:20000 dockerfiles/hermes-chat-sandbox-server.py /opt/sandbox/server.py

USER 20000:20000
WORKDIR /workspace
EXPOSE 9080

ENTRYPOINT ["python", "-I", "/opt/sandbox/server.py"]