From 9d3f993b4e64397c9034c36837710f6a1d213323 Mon Sep 17 00:00:00 2001
From: Illia Polosukhin <ilblackdragon@gmail.com>
Date: Wed, 4 Feb 2026 16:02:31 -0800
Subject: [PATCH] Docker file for sandbox

---
 docker/sandbox.Dockerfile | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 docker/sandbox.Dockerfile

diff --git a/docker/sandbox.Dockerfile b/docker/sandbox.Dockerfile
new file mode 100644
index 00000000..69c4da15
--- /dev/null
+++ b/docker/sandbox.Dockerfile
@@ -0,0 +1,25 @@
+FROM rust:1.86-slim-bookworm
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    bash \
+    ca-certificates \
+    curl \
+    git \
+    pkg-config \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install WASM targets
+RUN rustup target add wasm32-wasip2 wasm32-unknown-unknown
+
+# Install wasm-tools for component manipulation
+RUN cargo install wasm-tools --locked
+
+# Create non-root user for sandbox
+RUN useradd -m -u 1000 sandbox
+USER sandbox
+
+WORKDIR /workspace
+
+# Default command
+CMD ["bash"]