{
  bash,
  cacert,
  coreutils,
  curlWithGnuTls,
  dockerTools,
  gawk,
  gnugrep,
  findutils,
  jq,
  packer,
  pup,
  shellcheck,
  python3,
  xonsh,
}:
let
  basicPython = (python3.withPackages (p: with p; [ pyyaml ]));
  x = xonsh.overridePtyhonAttrs (old:
    {
      python3 = basicPython;
      propagatedbuildInputs = old.propagatedBuildInputs ++ [ basicPython.pkgs.pyyaml ];
    });
in
dockerTools.buildLayeredImage {
  name = "vm-test";
  tag = "latest";
  contents = [
    bash
    dockerTools.binSh
    dockerTools.caCertificates
    coreutils
    curlWithGnuTls
    dockerTools.fakeNss
    gawk
    gnugrep
    findutils
    jq
    packer
    pup
    shellcheck
    dockerTools.usrBinEnv
    x
  ];
  extraCommands = ''
    mkdir -p tmp
    chmod  1777 tmp
  '';
  config.Env = [
    "CURL_CA_BUNDLE=${cacert}/etc/ssl/certs/ca-bundle.crt"
  ];
};