{
  bash,
  cacert,
  coreutils,
  curlWithGnuTls,
  dockerTools,
  gawk,
  gnugrep,
  findutils,
  jq,
  packer,
  pup,
  shellcheck,
  python3,

  name,
  ...
}:
dockerTools.buildLayeredImage {
  name = name "vm-test";
  tag = "latest";
  contents = [
    bash
    dockerTools.binSh
    dockerTools.caCertificates
    coreutils
    curlWithGnuTls
    dockerTools.fakeNss
    gawk
    gnugrep
    findutils
    jq
    packer
    pup
    (python3.withPackages (x: with x; [ pyyaml ]))
    shellcheck
    dockerTools.usrBinEnv
  ];
  extraCommands = ''
    mkdir -p tmp
    chmod  1777 tmp
  '';
  config.Env = [
    "CURL_CA_BUNDLE=${cacert}/etc/ssl/certs/ca-bundle.crt"
  ];
}