# Docker Official Image, Python 3.13 slim Bookworm; index digest checked 2026-10-21.
# Refresh the reviewed digest deliberately; a mutable tag can resolve differently later.
FROM python:3.13-slim-bookworm@sha256:b4409e44a3e971621ee4bc2f3dc7a53859980685d261ab7a3a7bd4f0b84445c7
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 LAB_BIND=0.0.0.0 LAB_DATA_DIR=/data
WORKDIR /app
COPY fde-container-lab.py /app/fde-container-lab.py
RUN mkdir /data && chown 10001:10001 /data
USER 10001:10001
EXPOSE 8080
CMD ["python", "/app/fde-container-lab.py"]