FROM python:3.14-slim@sha256:9aaa474097d094040649f2162a627c0049b408f52138d980916788d80f04802f
ARG SOPS_VERSION=3.13.3
ARG AGE_VERSION=1.3.2
RUN apt-get update && apt-get install -y --no-install-recommends curl ca-certificates nodejs php-cli && rm -rf /var/lib/apt/lists/*
RUN curl -fsSL -o /usr/local/bin/sops https://github.com/getsops/sops/releases/download/v${SOPS_VERSION}/sops-v${SOPS_VERSION}.linux.amd64 \
 && curl -fsSL -o /tmp/checksums https://github.com/getsops/sops/releases/download/v${SOPS_VERSION}/sops-v${SOPS_VERSION}.checksums.txt \
 && expected="$(grep "  sops-v${SOPS_VERSION}.linux.amd64$" /tmp/checksums | cut -d' ' -f1)" \
 && test -n "$expected" && echo "$expected  /usr/local/bin/sops" | sha256sum -c - \
 && chmod 755 /usr/local/bin/sops
RUN curl -fsSL https://github.com/FiloSottile/age/releases/download/v${AGE_VERSION}/age-v${AGE_VERSION}-linux-amd64.tar.gz | tar -xz -C /tmp \
 && install -m 755 /tmp/age/age /tmp/age/age-keygen /usr/local/bin/ && rm -rf /tmp/age
WORKDIR /lab
COPY . /lab
CMD ["python", "capture.py"]
