{
  bash,
  cacert,
  coreutils,
  curlWithGnuTls,
  dockerTools,
  gawk,
  gnugrep,
  findutils,
  jq,
  packer,
  pup,
  shellcheck,
  python3,
  xonsh,

  name,
  ...
}:
let
  basicPython = (python3.withPackages (p: with p; [ pyyaml ]));
  x = xonsh.overridePythonAttrs (old: {
    python3 = basicPython;
    propagatedBuildInputs =
      (if builtins.hasAttr "propagatedBuildInputs" old then old.propagatedBuildInputs else [ ])
      ++ [ basicPython.pkgs.pyyaml ];
  });
in
dockerTools.buildLayeredImage {
  name = name "vm-test";
  tag = "latest";
  contents = [
    bash
    dockerTools.binSh
    dockerTools.caCertificates
    coreutils
    curlWithGnuTls
    dockerTools.fakeNss
    gawk
    gnugrep
    findutils
    jq
    packer
    pup
    shellcheck
    dockerTools.usrBinEnv
    x
  ];
  extraCommands = ''
    mkdir -p tmp
    chmod  1777 tmp
  '';
  config.Env = [
    "CURL_CA_BUNDLE=${cacert}/etc/ssl/certs/ca-bundle.crt"
  ];
}