FROM public.ecr.aws/lambda/python:3.11

LABEL parent-images=lambda-python311

# Install necessary tools (useradd lives in shadow-utils)
RUN yum update -y \
    && yum install shadow-utils -y \
    && /usr/sbin/useradd -u 1010 --comment "" worker \
    && yum remove shadow-utils -y \
    && yum clean all

RUN python -m pip install --upgrade pip setuptools upgrade_ensurepip wheel \
    && python -m upgrade_ensurepip \
    && rm -f /var/lang/lib/python3.11/ensurepip/_bundled/setuptools-65.*.whl \
    /var/lang/lib/python3.11/ensurepip/_bundled/pip-24.*.whl

RUN chown -R worker:worker /var/task
RUN chown -R worker:worker /var/lang

# Run container as the worker user
USER worker