# Production-like Debian/systemd image used only by the release qualification
# harness. The candidate installation itself runs with UV_OFFLINE=1; apt is
# used solely to create the disposable test machine before qualification.
FROM ghcr.io/astral-sh/uv:0.11.22 AS uv

FROM debian:bookworm-slim

COPY --from=uv /uv /uvx /usr/local/bin/

RUN apt-get update \
    && apt-get install --yes --no-install-recommends \
        ca-certificates \
        curl \
        dbus \
        python3 \
        systemd \
        systemd-sysv \
    && rm -rf /var/lib/apt/lists/*

# Tell PID 1 it is in a container so it does not try to mount or manage host
# services. The runner gives it an isolated cgroup namespace at invocation.
ENV container=docker
STOPSIGNAL SIGRTMIN+3
CMD ["/lib/systemd/systemd"]
