FROM python:3.12-slim

ARG PASSWORD=root
ENV DEBIAN_FRONTEND=noninteractive
ENV HOME=/home/ctfuser
WORKDIR /home/ctfuser/chall

RUN apt-get update && apt-get install -y --no-install-recommends \
    openssh-server \
    build-essential \
    libffi-dev \
    libssl-dev \
    python3-dev \
    socat \
    bash \
    && rm -rf /var/lib/apt/lists/*

RUN useradd -m -d /home/ctfuser -s /bin/bash ctfuser && \
    echo "ctfuser:${PASSWORD}" | chpasswd

RUN mkdir -p /var/run/sshd

COPY requirements.txt /tmp/requirements.txt
RUN pip install --no-cache-dir -r /tmp/requirements.txt

COPY ./src /home/ctfuser/chall/src
COPY ./start.sh /start.sh
RUN chmod +x /start.sh /home/ctfuser/chall/src/run.sh

RUN chown -R root:root /home/ctfuser/chall && \
    chmod -R 555 /home/ctfuser/chall && \
    chown ctfuser:ctfuser /home/ctfuser/chall/src/chall.py && \
    chmod 755 /home/ctfuser/chall/src/chall.py

EXPOSE 8000 22
CMD ["/start.sh"]