# NOTE: This hash is pinned to avoid version and environment differences.
FROM ubuntu:25.04@sha256:34e8533bf27ac50f60bec267f6ce18c9aeb9556574e1ec1a8ce89926d32ea8f3 AS base
WORKDIR /app

COPY --chmod=555 chall run
COPY --chmod=444 flag.txt /flag.txt
RUN mv /flag.txt /flag-$(md5sum /flag.txt | awk '{print $1}').txt

FROM pwn.red/jail
COPY --from=base / /srv
COPY nsjail.cfg /nsjail.cfg
ENV JAIL_TIME=600 JAIL_MEM=5G

CMD ["/jail/nsjail", "--config", "/nsjail.cfg"]
