# Lab 02 — ML primer for security practitioners (Chapter 2).
#
# Runs THIS lab in isolation on the shared base image. Most users should instead
# use the pack-level `docker compose up` (labs/docker-compose.yml). This lab is
# fully self-contained and offline: it trains a small SmallCNN/MNIST model
# in-process, so it needs no model-api service.
#
# Build the shared base once from the labs/ root:
#   docker build -t aais-labs:1.0.0 ./labs
# Then build + run just this lab (JupyterLab on :8888, token "aais"):
#   docker build -t aais-lab02 ./labs/02-ml-for-security-practitioners
#   docker run --rm -p 8888:8888 -v "$PWD/labs":/work aais-lab02
# Open the printed http://127.0.0.1:8888/lab?token=aais URL and run
# 02_ml_primer.ipynb (build it first with labs/build_notebooks.sh).
FROM aais-labs:1.0.0

WORKDIR /work
EXPOSE 8888

CMD ["jupyter", "lab", "--ip=0.0.0.0", "--port=8888", "--no-browser", \
     "--allow-root", "--ServerApp.root_dir=/work", \
     "--IdentityProvider.token=aais"]
