# Kernel builder (RFC 005 §2.6): native cross-compile, never under qemu-user (E2).
# Built by scripts/build-guest.sh with the digests from guest/images.lock; no build context.
ARG DEBIAN_IMAGE
FROM ${DEBIAN_IMAGE}
ARG DEBIAN_SNAPSHOT
# apt reads only the pinned snapshot.debian.org timestamp; the image's own sources are dropped.
RUN set -eu; rm -f /etc/apt/sources.list.d/debian.sources; \
    echo "deb [check-valid-until=no] http://snapshot.debian.org/archive/debian/${DEBIAN_SNAPSHOT} trixie main" \
      > /etc/apt/sources.list; \
    apt-get -o Acquire::Retries=5 update; \
    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
      gcc-riscv64-linux-gnu binutils-riscv64-linux-gnu gcc libc6-dev make bc bison flex perl \
      xz-utils patch gzip ca-certificates; \
    rm -rf /var/lib/apt/lists/*; \
    dpkg-query -W -f '${Package} ${Version}\n' > /packages.txt