FROM python:3.13-slim@sha256:bf44cdfcb76cd3b41e879bc058fc37ec5872002ccfde7fcb765e218cde0cd79c

# Pin the Debian revision; do not silently validate a different filter release.
RUN apt-get -o Acquire::Retries=2 -o Acquire::http::Timeout=20 update \
    && apt-get install --no-install-recommends -y fail2ban=1.1.0-8 \
    && rm -rf /var/lib/apt/lists/*

COPY lab.py /opt/example/lab.py
USER 65534:65534
ENTRYPOINT ["/usr/bin/python3", "-u", "/opt/example/lab.py"]
