FROM ghcr.io/astral-sh/uv:python3.11-bookworm-slim

RUN useradd -m labuser
WORKDIR /workspace
COPY pyproject.toml .
RUN chown -R labuser:labuser /workspace
USER labuser

RUN uv sync
ENV PATH="/workspace/.venv/bin:${PATH}"

EXPOSE 8888
CMD ["jupyter", "lab", "--ip=0.0.0.0", "--port=8888", "--no-browser", "--NotebookApp.token=''"]