# PTCA image
FROM mcr.microsoft.com/aifx/acpt/stable-ubuntu2204-cu126-py310-torch280:biweekly.202603.1

USER root

# Install unzip and upgrade OS packages to fix vulnerabilities
RUN apt-get -y update && apt-get -y upgrade && apt-get -y install unzip libc-bin libc-dev locales libc6 dpkg-dev dpkg libdpkg-perl libssl-dev libssl3 openssl && apt-get clean && rm -rf /var/lib/apt/lists/*

# Install required packages from pypi
COPY requirements.txt .
RUN pip install -r requirements.txt --no-cache-dir

# protobuf is a transitive dep of mlflow-skinny/onnx; parents use loose floors (>=3.12.0), cannot force 6.33.5
RUN pip install --no-cache-dir --upgrade pip==26.0 wheel==0.46.2 protobuf==6.33.5 cryptography==46.0.5 pyasn1==0.6.2 pillow==12.1.1

# Upgrade requests, urllib3, aiohttp in the system Python (3.13) for fixing vulnerability
RUN /opt/conda/bin/python3.13 -m pip install --no-cache-dir --upgrade requests==2.32.4 urllib3==2.6.3 aiohttp==3.13.3 pip==26.0 wheel==0.46.2 setuptools==82.0.0 cryptography==46.0.5