FROM debian:trixie-slim
RUN apt-get update \
 && apt-get install -y --no-install-recommends qemu-system-x86 zstd \
 && rm -rf /var/lib/apt/lists/*
COPY src/deploy/run_vm.sh /run_vm.sh
# bzImage + rootfs.img.zst are mounted read-only at /srv; cert (optional) at /certs.
# run_vm.sh unpacks the rootfs into the container's /tmp.
ENV OUT=/srv IMG_DIR=/tmp HOSTPORT=443 CERT_DIR=/certs
ENTRYPOINT ["bash", "/run_vm.sh"]
