FROM python:3.11-slim

# Create non-root user
RUN adduser --disabled-password --gecos '' sandboxuser && \
	chmod 755 /home/sandboxuser

# Set safe workspace
WORKDIR /sandbox
RUN chown sandboxuser:sandboxuser /sandbox

# minimal dependencies....idk
RUN apt-get update && \
	apt-get install -y --no-install-recommends gcc python3-dev && \
	rm -rf /var/lib/apt/lists/*

USER sandboxuser
ENTRYPOINT ["python", "/sandbox/script.py"]