# Lab 09 — The DP-SGD privacy/utility trade-off.
# The shared base image carries the whole pinned stack (NumPy, scikit-learn,
# pandas, matplotlib, jupytext); this lab needs nothing beyond it. This Dockerfile
# only documents how to run this single lab in isolation — for the full pack, use
# the top-level docker-compose.yml instead.
FROM aais-labs:1.0.0

# Build the notebook from the jupytext source at image build time.
WORKDIR /labs/09-privacy-preserving-ml
COPY 09_dp_sgd_tradeoff.py ./
RUN jupytext --to notebook 09_dp_sgd_tradeoff.py

# Default: launch JupyterLab on this lab.
EXPOSE 8888
CMD ["jupyter", "lab", "--ip=0.0.0.0", "--port=8888", "--no-browser", "--allow-root"]
