# Pinned base resolved by docker pull on 2026-11-02; archive checksum in prepare.py.
FROM python:3.11.18-slim@sha256:ffe4b0c76963e64f05484d74dbb3f67fad1effcf3c5c22c2235f0fafc8a9c98f
ENV XDG_CACHE_HOME=/opt/tex-cache PYTHONDONTWRITEBYTECODE=1 TECTONIC_UNTRUSTED_MODE=1
COPY prepare.py /opt/puremethod/prepare.py
RUN python -I /opt/puremethod/prepare.py && chmod -R a+rX /opt/tex-cache
COPY draft_runtime.py /opt/puremethod/draft_runtime.py
LABEL org.puremethod.draft-runtime="2" org.puremethod.tectonic.version="0.17.0"
USER 65532:65532
WORKDIR /input
ENTRYPOINT ["python", "-I", "/opt/puremethod/draft_runtime.py"]
