localstack-core 4.10.1.dev4__tar.gz → 4.12.1.dev46__tar.gz

localstack_core-4.12.1.dev46/AGENTS.md

@@ -0,0 +1,178 @@
+# AGENTS.md — LocalStack Pro
+
+LocalStack is a fully functional local AWS cloud stack that emulates AWS services (S3, Lambda, DynamoDB, etc.) for development and testing. It runs in Docker, provides AWS-like APIs locally, enabling offline workflows, integration testing, and CI without calling real AWS endpoints.
+
+This codebase contains both the AWS emulator in `localstack-core`.
+
+---
+
+## ⚠️ Critical Hard Constraints
+
+**NEVER:**
+- Modify `*.snapshot.json` or `*.validation.json` files manually — generated by running tests against AWS
+- Use plain `assert` in validated tests — **ALWAYS** use `snapshot.match()`
+- Create AWS resources directly in test bodies — **ALWAYS** use fixtures
+- Hardcode account IDs or region names — use `account_id` and `region_name` fixtures
+- Modify files in `aws/api/` — auto-generated from AWS API definitions
+- Add new project dependencies without approval
+- Run `git push` or modify repository history
+
+---
+
+## Commands
+
+```bash
+# Testing
+pytest <path/to/test_file.py>                # Run test file
+pytest <path/to/test_file.py> -k <test_name> # Run specific test
+AWS_PROFILE=ls-sandbox TEST_TARGET=AWS_CLOUD SNAPSHOT_UPDATE=1 pytest <path>  # Run against AWS
+
+# Code quality
+make lint           # Lint check
+make format         # Format all
+make format-modified # Format staged only
+```
+
+---
+
+## Project Structure
+
+```
+localstack-core/
+├── localstack/core/
+│   ├── services/<service>/        # Service implementations
+│   │   ├── provider.py            # API handlers
+│   │   ├── models.py              # State stores
+│   │   └── resource_providers/    # CloudFormation resources
+│   ├── aws/api/<service>/         # Auto-generated API types (DO NOT EDIT)
+│   └── providers.py               # Service registration & Moto fallbacks
+├── tests/aws/services/<service>/  # Integration tests
+├── tests/unit/                    # Unit tests (prefer integration tests)
+├── tests/bootstrap/               # Container startup tests
+```
+
+### Moto Fallback
+
+Moto is a library used to implement services not fully implemented in LocalStack. Requests can fall back to Moto operations, with the disadvantage that state is kept in Moto and Moto changes may break the implementation. Check `providers.py` for fallback configurations.
+
+---
+
+## Implementing AWS Operations
+
+### Reference Implementation
+
+For a complete example of provider patterns, state management, and error handling, see the **CodeBuild** service:
+
+- **Provider:** `localstack-pro-core/localstack/pro/core/services/codebuild/provider.py`
+- **Models (state store):** `localstack-pro-core/localstack/pro/core/services/codebuild/models.py`
+
+Refer to this implementation when:
+- Creating a new service from scratch
+- Understanding the `@handler` decorator pattern (with and without `expand=False`)
+- Learning the `AccountRegionBundle` state management pattern
+- Implementing service-specific exceptions
+- Using helper functions like `get_store(context)` and utility functions outside the class
+
+### Key Conventions
+
+- **Types:** Import from `localstack.pro.core.aws.api.<service>` (auto-generated, don't modify)
+- **Errors:** Use service-specific exceptions from API module, or `CommonServiceException`
+- **IDs:** Use `short_uid()` from `localstack.utils.strings`
+- **ARNs:** Use helpers from `localstack.utils.aws.arns`
+- **Logging:** `LOG = logging.getLogger(__name__)` at module top
+
+---
+
+## Writing Parity Tests
+
+### Reference Implementation
+
+For complete examples of test patterns, fixtures, and snapshots, see the **Pipes** tests:
+
+- **Validation tests:** `localstack-pro-core/tests/aws/services/pipes/test_pipes_validation.py`
+- **Integration tests:** `localstack-pro-core/tests/aws/services/pipes/test_pipes.py`
+- **Fixtures (conftest):** `localstack-pro-core/tests/aws/services/pipes/conftest.py`
+
+Refer to these when:
+- Writing `@markers.aws.validated` tests with snapshot matching
+- Creating fixture factories with cleanup (see `pipes_create_pipe` in conftest)
+- Understanding the `@pytest.mark.parametrize` pattern
+- Testing error cases with `pytest.raises` and `snapshot.match`
+
+### Test Markers
+
+Use `@markers.aws.validated` for tests that run against AWS (preferred), or `@markers.aws.only_localstack` for implementation-specific assertions.
+
+### Core Patterns
+
+All test patterns are demonstrated in the reference files. Refer to:
+
+- **Validation tests with error handling:** `test_pipes_validation.py:9-35` — shows `@markers.aws.validated`, `pytest.raises`, and `snapshot.match` for error responses
+- **Parametrized tests:** `test_pipes_validation.py:304-377` — shows `@pytest.mark.parametrize` with multiple test cases
+- **Fixture with cleanup:** `conftest.py:55-76` — shows the `pipes_create_pipe` fixture factory pattern with `LOG.debug()` cleanup
+- **Async resource handling:** `test_pipes.py:134-139` — shows `poll_condition` for waiting on resource state
+
+### Fixture Rules
+
+- **Return the entire response** from create operations
+- **Store only names/ARNs** in cleanup list (not full responses)
+- **Log cleanup errors** with `LOG.debug()` for debugging with `-s`
+
+### Transformers
+
+Add transformers **before** `snapshot.match()` for non-deterministic values:
+
+- **By key (preferred):** `snapshot.add_transformer(snapshot.transform.key_value("FooArn"))`
+- **By regex:** `snapshot.add_transformer(snapshot.transform.regex(dynamic_value, "<placeholder>"))`
+- **For sorting:** Use `SortingTransformer` from `localstack.testing.snapshots.transformer`
+
+### Key Fixtures
+
+- `aws_client` — Boto3 clients (e.g., `aws_client.s3`, `aws_client.lambda_`)
+- `snapshot` — Snapshot matching and transformers
+- `account_id`, `region_name` — Current account/region (never hardcode)
+- `deploy_cfn_template` — Deploy CloudFormation with lifecycle management
+- `cleanups` — Register arbitrary cleanup code for teardown
+
+For common resource fixtures (S3 buckets, KMS keys, etc.), check `localstack-core/localstack/testing/pytest/fixtures.py`
+
+---
+
+## Development Process
+
+1. **Write a failing test first** — Capture AWS behavior with `TEST_TARGET=AWS_CLOUD SNAPSHOT_UPDATE=1`
+2. **Find the provider** — Look in `services/<service>/provider.py` for the handler
+3. **Check the store** — State issues often in `models.py`
+4. **Compare with AWS docs** — Verify expected behavior
+5. **Run test against LocalStack** — Ensure snapshot matches
+6. **Iterate** — Run tests individually, see failures, fix, re-run
+
+**Important:** When developing tests for functionality that doesn't exist in LocalStack yet, run tests against AWS to ensure validity. Don't run with `TEST_TARGET=LOCALSTACK` until the functionality exists.
+
+---
+
+## Best Practices
+
+### Always
+
+- Run new tests against AWS first
+- Use fixtures for resource creation with cleanup
+- Add transformers for dynamic values
+- Follow patterns in nearby existing code
+- Use simple, concise, Sphinx docstrings
+- Use type hints
+- Start simple (CRUD), then add edge cases, errors, pagination
+
+### Avoid
+
+- Over-commenting tests — test name and structure should be self-explanatory
+- Adding comments for standard steps (transformers, snapshot matching)
+- Creating new markers without discussion
+
+---
+
+## Reference
+
+- **Testing Docs:** https://github.com/localstack/localstack/tree/main/docs/testing
+- **Architecture:** https://github.com/localstack/localstack/blob/main/docs/localstack-concepts/README.md
+- **Common Fixtures:** `localstack-core/localstack/testing/pytest/fixtures.py`

localstack_core-4.12.1.dev46/CODEOWNERS

@@ -0,0 +1,261 @@
+######################
+###  CODE OWNERS   ###
+######################
+
+# CODEOWNERS
+/CODEOWNERS @dominikschubert @alexrashed
+
+# README / Docs
+/docs/ @thrau @HarshCasper
+/README.md @HarshCasper
+/CODE_OF_CONDUCT.md @HarshCasper
+/LICENSE.txt @HarshCasper @alexrashed
+
+# Docker
+/bin/docker-entrypoint.sh @thrau @alexrashed
+/.dockerignore @alexrashed
+/Dockerfile* @alexrashed @silv-io
+
+# Git, Pipelines, GitHub config
+/.github @alexrashed @dfangl @dominikschubert @silv-io @k-a-il
+/.test_durations @silv-io @k-a-il
+/.git-blame-ignore-revs @alexrashed @thrau
+/bin/release-dev.sh @thrau @alexrashed
+/bin/release-helper.sh @thrau @alexrashed
+
+# Python project, packaging, and dependencies
+/pyproject.toml @alexrashed @silv-io @k-a-il @bentsku @sannya-singal
+/requirements-*.txt @alexrashed @silv-io @k-a-il @bentsku @sannya-singal
+/.pre-commit-config.yaml @alexrashed @silv-io @k-a-il @bentsku @sannya-singal
+
+# ASF
+/localstack-core/localstack/aws/ @thrau
+/tests/unit/aws/ @thrau
+# ASF parsers and serializers
+/localstack-core/localstack/aws/protocol @alexrashed
+# left empty (without owner) because the generated APIs belong to the specific service owners
+# you can overwrite this for single services afterwards
+/localstack-core/localstack/aws/api/
+
+# CLI
+/localstack-core/localstack/cli/ @thrau @alexrashed
+/tests/unit/cli/ @thrau @alexrashed
+/tests/cli/ @thrau @alexrashed
+
+# Plugins
+/localstack-core/localstack/plugins.py @thrau
+/localstack-core/localstack/config.py @thrau
+/tests/unit/services/test_internal.py @thrau
+
+# Extensions
+/localstack-core/localstack/extensions/ @thrau
+
+# Container utils
+/localstack-core/localstack/utils/container_utils/ @dfangl @dominikschubert
+/localstack-core/localstack/utils/docker_utils.py @dfangl @dominikschubert
+/tests/unit/test_docker_utils.py @dfangl @dominikschubert
+/tests/unit/test_dockerclient.py @dfangl @dominikschubert
+
+# Package Installers
+/localstack-core/localstack/packages/ @alexrashed
+/localstack-core/localstack/services/kinesis/packages.py @alexrashed
+
+# DNS server
+/localstack-core/localstack/dns @simonrw @dfangl
+
+# HTTP framework
+/localstack-core/localstack/http/ @thrau
+/tests/unit/http_/ @thrau
+
+# Runtime
+/localstack-core/localstack/runtime/ @thrau
+
+# Logging
+/localstack-core/localstack/logging/ @dfangl @alexrashed @dominikschubert
+
+# Stores
+/localstack-core/localstack/services/stores.py @viren-nadkarni
+/tests/unit/test_stores.py @viren-nadkarni
+
+# Analytics client
+/localstack-core/localstack/utils/analytics/ @thrau
+/tests/unit/utils/analytics/ @thrau
+
+# Snapshot testing
+/localstack-core/localstack/testing/snapshots/ @dominikschubert @steffyP
+/localstack-core/localstack/testing/pytest/ @dominikschubert
+
+# Scenario testing
+/localstack-core/localstack/testing/scenario/ @dominikschubert @steffyP
+
+# Bootstrap tests
+/tests/bootstrap @simonrw
+/localstack-core/localstack/testing/pytest/container.py @dominikschubert @simonrw
+
+# Test Selection
+/localstack-core/localstack/testing/testselection @dominikschubert @alexrashed @silv-io
+
+######################
+### SERVICE OWNERS ###
+######################
+# DO NOT modify anything below!
+# Everything below is _autogenerated_ and any manual changes will be overwritten.
+
+
+# acm
+/localstack-core/localstack/aws/api/acm/ @alexrashed
+/localstack-core/localstack/services/acm/ @alexrashed
+/tests/aws/services/acm/ @alexrashed
+
+# apigateway
+/localstack-core/localstack/aws/api/apigateway/ @bentsku @cloutierMat
+/localstack-core/localstack/services/apigateway/ @bentsku @cloutierMat
+/tests/aws/services/apigateway/ @bentsku @cloutierMat
+/tests/unit/services/apigateway/ @bentsku @cloutierMat
+
+# cloudcontrol
+/localstack-core/localstack/aws/api/cloudcontrol/ @simonrw
+/tests/aws/services/cloudcontrol/ @simonrw
+
+# cloudformation
+/localstack-core/localstack/aws/api/cloudformation/ @simonrw @pinzon @dominikschubert
+/localstack-core/localstack/services/cloudformation/ @simonrw @pinzon @dominikschubert
+/tests/aws/services/cloudformation/ @simonrw @pinzon @dominikschubert
+/tests/unit/services/cloudformation/ @simonrw @pinzon @dominikschubert
+
+# cloudwatch
+/localstack-core/localstack/aws/api/cloudwatch/ @pinzon @steffyP
+/localstack-core/localstack/services/cloudwatch/ @pinzon @steffyP
+/tests/aws/services/cloudwatch/ @pinzon @steffyP
+/tests/unit/services/cloudwatch/ @pinzon @steffyP
+
+# dynamodb
+/localstack-core/localstack/aws/api/dynamodb/ @viren-nadkarni @giograno
+/localstack-core/localstack/services/dynamodb/ @viren-nadkarni @giograno
+/tests/aws/services/dynamodb/ @viren-nadkarni @giograno
+/tests/unit/services/dynamodb/ @viren-nadkarni @giograno
+
+# ec2
+/localstack-core/localstack/aws/api/ec2/ @viren-nadkarni @macnev2013
+/localstack-core/localstack/services/ec2/ @viren-nadkarni @macnev2013
+/tests/aws/services/ec2/ @viren-nadkarni @macnev2013
+
+# ecr
+/localstack-core/localstack/services/ecr/ @dfangl
+
+# es
+/localstack-core/localstack/aws/api/es/ @alexrashed @silv-io
+/localstack-core/localstack/services/es/ @alexrashed @silv-io
+/tests/aws/services/es/ @alexrashed @silv-io
+
+# events
+/localstack-core/localstack/aws/api/events/ @maxhoheiser @bentsku
+/localstack-core/localstack/services/events/ @maxhoheiser @bentsku
+/tests/aws/services/events/ @maxhoheiser @bentsku
+/tests/unit/services/events/ @maxhoheiser @bentsku
+
+# firehose
+/localstack-core/localstack/aws/api/firehose/ @pinzon
+/localstack-core/localstack/services/firehose/ @pinzon
+/tests/aws/services/firehose/ @pinzon
+
+# iam
+/localstack-core/localstack/aws/api/iam/ @dfangl @pinzon
+/localstack-core/localstack/services/iam/ @dfangl @pinzon
+/tests/aws/services/iam/ @dfangl @pinzon
+
+# kms
+/localstack-core/localstack/aws/api/kms/ @k-a-il
+/localstack-core/localstack/services/kms/ @k-a-il
+/tests/aws/services/kms/ @k-a-il
+/tests/unit/services/kms/ @k-a-il
+
+# lambda
+/localstack-core/localstack/aws/api/lambda_/ @joe4dev @dominikschubert @dfangl @gregfurman
+/localstack-core/localstack/services/lambda_/ @joe4dev @dominikschubert @dfangl @gregfurman
+/tests/aws/services/lambda_/ @joe4dev @dominikschubert @dfangl @gregfurman
+/tests/unit/services/lambda_/ @joe4dev @dominikschubert @dfangl @gregfurman
+
+# logs
+/localstack-core/localstack/aws/api/logs/ @pinzon @steffyP
+/localstack-core/localstack/services/logs/ @pinzon @steffyP
+/tests/aws/services/logs/ @pinzon @steffyP
+/tests/unit/services/logs/ @pinzon @steffyP
+
+# opensearch
+/localstack-core/localstack/aws/api/opensearch/ @alexrashed @silv-io
+/localstack-core/localstack/services/opensearch/ @alexrashed @silv-io
+/tests/aws/services/opensearch/ @alexrashed @silv-io
+/tests/unit/services/opensearch/ @alexrashed @silv-io
+
+# pipes
+/localstack-core/localstack/aws/api/pipes/ @tiurin @gregfurman @joe4dev @carole-lavillonniere
+
+# resourcegroupstaggingapi
+/localstack-core/localstack/aws/api/resourcegroupstaggingapi/ @aidehn
+/localstack-core/localstack/services/resourcegroupstaggingapi/ @aidehn
+/tests/aws/services/resourcegroupstaggingapi/ @aidehn
+
+# route53
+/localstack-core/localstack/aws/api/route53/ @giograno
+/localstack-core/localstack/services/route53/ @giograno
+/tests/aws/services/route53/ @giograno
+
+# route53resolver
+/localstack-core/localstack/aws/api/route53resolver/ @macnev2013 @sannya-singal
+/localstack-core/localstack/services/route53resolver/ @macnev2013 @sannya-singal
+/tests/aws/services/route53resolver/ @macnev2013 @sannya-singal
+
+# s3
+/localstack-core/localstack/aws/api/s3/ @bentsku @k-a-il
+/localstack-core/localstack/services/s3/ @bentsku @k-a-il
+/tests/aws/services/s3/ @bentsku @k-a-il
+/tests/unit/services/s3/ @bentsku @k-a-il
+
+# s3control
+/localstack-core/localstack/aws/api/s3control/ @bentsku
+/localstack-core/localstack/services/s3control/ @bentsku
+/tests/aws/services/s3control/ @bentsku
+
+# secretsmanager
+/localstack-core/localstack/aws/api/secretsmanager/ @macnev2013
+/localstack-core/localstack/services/secretsmanager/ @macnev2013
+/tests/aws/services/secretsmanager/ @macnev2013
+
+# ses
+/localstack-core/localstack/aws/api/ses/ @viren-nadkarni
+/localstack-core/localstack/services/ses/ @viren-nadkarni
+/tests/aws/services/ses/ @viren-nadkarni
+
+# sns
+/localstack-core/localstack/aws/api/sns/ @bentsku @baermat
+/localstack-core/localstack/services/sns/ @bentsku @baermat
+/tests/aws/services/sns/ @bentsku @baermat
+/tests/unit/services/sns/ @bentsku @baermat
+
+# sqs
+/localstack-core/localstack/aws/api/sqs/ @thrau @baermat @gregfurman
+/localstack-core/localstack/services/sqs/ @thrau @baermat @gregfurman
+/tests/aws/services/sqs/ @thrau @baermat @gregfurman
+/tests/unit/services/sqs/ @thrau @baermat @gregfurman
+
+# ssm
+/localstack-core/localstack/aws/api/ssm/ @viren-nadkarni @dominikschubert
+/localstack-core/localstack/services/ssm/ @viren-nadkarni @dominikschubert
+/tests/aws/services/ssm/ @viren-nadkarni @dominikschubert
+
+# stepfunctions
+/localstack-core/localstack/aws/api/stepfunctions/ @dominikschubert @joe4dev @gregfurman @tiurin
+/localstack-core/localstack/services/stepfunctions/ @dominikschubert @joe4dev @gregfurman @tiurin
+/tests/aws/services/stepfunctions/ @dominikschubert @joe4dev @gregfurman @tiurin
+/tests/unit/services/stepfunctions/ @dominikschubert @joe4dev @gregfurman @tiurin
+
+# sts
+/localstack-core/localstack/aws/api/sts/ @pinzon @dfangl
+/localstack-core/localstack/services/sts/ @pinzon @dfangl
+/tests/aws/services/sts/ @pinzon @dfangl
+
+# transcribe
+/localstack-core/localstack/aws/api/transcribe/ @silv-io @k-a-il
+/localstack-core/localstack/services/transcribe/ @silv-io @k-a-il
+/tests/aws/services/transcribe/ @silv-io @k-a-il

localstack_core-4.12.1.dev46/Dockerfile

@@ -0,0 +1,192 @@
+#
+# base: Stage which installs necessary runtime dependencies (OS packages, etc.)
+#
+FROM python:3.13.11-slim-trixie@sha256:1f3781f578e17958f55ada96c0a827bf279a11e10d6a458ecb8bde667afbb669 AS base
+ARG TARGETARCH
+
+# Install runtime OS package dependencies
+RUN --mount=type=cache,target=/var/cache/apt \
+    apt-get update && \
+        # Install dependencies to add additional repos
+        apt-get install -y --no-install-recommends \
+            # Runtime packages (groff-base is necessary for AWS CLI help)
+            ca-certificates curl gnupg git make openssl tar pixz zip unzip groff-base iputils-ping nss-passwords procps iproute2 xz-utils libatomic1 binutils && \
+        # patch for CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
+        apt-get install --only-upgrade libexpat1
+
+# Install nodejs package from the dist release server. Note: we're installing from dist binaries, and not via
+#  `apt-get`, to avoid installing `python3.11` into the image (which otherwise comes as a dependency of nodejs).
+# See https://github.com/nodejs/docker-node/blob/main/22/trixie/Dockerfile
+RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
+  && case "${dpkgArch##*-}" in \
+    amd64) ARCH='x64';; \
+    arm64) ARCH='arm64';; \
+    *) echo "unsupported architecture"; exit 1 ;; \
+  esac \
+  # gpg keys listed at https://github.com/nodejs/node#release-keys
+  && set -ex \
+  && for key in \
+    5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 \
+    DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 \
+    CC68F5A3106FF448322E48ED27F5E38D5B0A215F \
+    8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 \
+    890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 \
+    C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C \
+    108F52B48DB57BB0CC439B2997B01419BD92F80A \
+    A363A499291CBBC940DD62E41F10027AF002F8B0 \
+  ; do \
+      gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" || \
+      gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" ; \
+  done \
+  && curl -LO https://nodejs.org/dist/latest-v22.x/SHASUMS256.txt \
+  && LATEST_VERSION_FILENAME=$(cat SHASUMS256.txt | grep -o "node-v.*-linux-$ARCH" | sort | uniq) \
+  && rm SHASUMS256.txt \
+  && curl -fsSLO --compressed "https://nodejs.org/dist/latest-v22.x/$LATEST_VERSION_FILENAME.tar.xz" \
+  && curl -fsSLO --compressed "https://nodejs.org/dist/latest-v22.x/SHASUMS256.txt.asc" \
+  && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \
+  && grep " $LATEST_VERSION_FILENAME.tar.xz\$" SHASUMS256.txt | sha256sum -c - \
+  && tar -xJf "$LATEST_VERSION_FILENAME.tar.xz" -C /usr/local --strip-components=1 --no-same-owner \
+  && rm "$LATEST_VERSION_FILENAME.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
+  && ln -s /usr/local/bin/node /usr/local/bin/nodejs \
+  # upgrade npm to the latest version
+  && npm upgrade -g npm \
+  # smoke tests
+  && node --version \
+  && npm --version \
+  && test ! $(which python3.9)
+
+SHELL [ "/bin/bash", "-c" ]
+ENV LANG=C.UTF-8
+
+# set workdir
+RUN mkdir -p /opt/code/localstack
+RUN mkdir /opt/code/localstack/localstack-core
+WORKDIR /opt/code/localstack/
+
+# create localstack user and filesystem hierarchy, perform some permission fixes
+RUN chmod 777 . && \
+    useradd -ms /bin/bash localstack && \
+    mkdir -p /var/lib/localstack && \
+    chmod -R 777 /var/lib/localstack && \
+    mkdir -p /usr/lib/localstack && \
+    mkdir /tmp/localstack && \
+    chmod -R 777 /tmp/localstack && \
+    touch /tmp/localstack/.marker && \
+    mkdir -p /.npm && \
+    chmod 755 /root && \
+    chmod -R 777 /.npm
+
+# install the entrypoint script
+ADD bin/docker-entrypoint.sh /usr/local/bin/
+# add the shipped hosts file to prevent performance degredation in windows container mode on windows
+# (where hosts file is not mounted) See https://github.com/localstack/localstack/issues/5178
+ADD bin/hosts /etc/hosts
+
+# expose default environment
+# Set edge bind host so localstack can be reached by other containers
+# set library path and default LocalStack hostname
+ENV USER=localstack
+ENV PYTHONUNBUFFERED=1
+
+# Install the latest version of awslocal globally
+RUN --mount=type=cache,target=/root/.cache \
+    pip3 install --upgrade awscli awscli-local requests
+
+
+#
+# builder: Stage which installs the dependencies of LocalStack Community
+#
+FROM base AS builder
+ARG TARGETARCH
+
+# Install build dependencies to base
+RUN --mount=type=cache,target=/var/cache/apt \
+    apt-get update && \
+        # Install dependencies to add additional repos
+        # g++ is a workaround to fix the JPype1 compile error on ARM Linux "gcc: fatal error: cannot execute ‘cc1plus’"
+        apt-get install -y gcc g++
+
+# upgrade python build tools
+RUN --mount=type=cache,target=/root/.cache \
+    (python -m venv .venv && . .venv/bin/activate && pip3 install --upgrade pip wheel setuptools)
+
+# add files necessary to install runtime dependencies
+ADD Makefile pyproject.toml requirements-runtime.txt ./
+# add the localstack start scripts (necessary for the installation of the runtime dependencies, i.e. `pip install -e .`)
+ADD bin/localstack bin/localstack.bat bin/localstack-supervisor bin/
+
+# Install dependencies for running the LocalStack runtime
+RUN --mount=type=cache,target=/root/.cache\
+    . .venv/bin/activate && pip3 install -r requirements-runtime.txt
+
+
+#
+# final stage: Builds upon base stage and copies resources from builder stages
+#
+FROM base
+COPY --from=builder /opt/code/localstack/.venv /opt/code/localstack/.venv
+# The build version is set in the docker-helper.sh script to be the output of setuptools_scm
+ARG LOCALSTACK_BUILD_VERSION
+
+# add project files necessary to install all dependencies
+ADD Makefile pyproject.toml ./
+# add the localstack start scripts (necessary for the installation of the runtime dependencies, i.e. `pip install -e .`)
+ADD bin/localstack bin/localstack.bat bin/localstack-supervisor bin/
+
+# add the code as late as possible
+ADD localstack-core/ /opt/code/localstack/localstack-core
+
+# Install LocalStack Community and generate the version file while doing so
+RUN --mount=type=cache,target=/root/.cache \
+    . .venv/bin/activate && \
+    SETUPTOOLS_SCM_PRETEND_VERSION_FOR_LOCALSTACK_CORE=${LOCALSTACK_BUILD_VERSION} \
+    pip install -e .[runtime]
+
+# Generate the plugin entrypoints
+RUN SETUPTOOLS_SCM_PRETEND_VERSION_FOR_LOCALSTACK_CORE=${LOCALSTACK_BUILD_VERSION} \
+    make entrypoints
+
+# Generate service catalog cache in static libs dir
+RUN . .venv/bin/activate && python3 -m localstack.aws.spec
+
+# Install packages which should be shipped by default
+RUN --mount=type=cache,target=/root/.cache \
+    --mount=type=cache,target=/var/lib/localstack/cache \
+    source .venv/bin/activate && \
+    python -m localstack.cli.lpm install \
+      lambda-runtime \
+      jpype-jsonata \
+      dynamodb-local && \
+    chown -R localstack:localstack /usr/lib/localstack && \
+    chmod -R 777 /usr/lib/localstack
+
+# link the python package installer virtual environments into the localstack venv
+RUN echo /var/lib/localstack/lib/python-packages/lib/python3.13/site-packages > localstack-var-python-packages-venv.pth && \
+    mv localstack-var-python-packages-venv.pth .venv/lib/python*/site-packages/
+RUN echo /usr/lib/localstack/python-packages/lib/python3.13/site-packages > localstack-static-python-packages-venv.pth && \
+    mv localstack-static-python-packages-venv.pth .venv/lib/python*/site-packages/
+
+# expose edge service, external service ports, and debugpy
+EXPOSE 4566 4510-4559 5678
+
+HEALTHCHECK --interval=10s --start-period=15s --retries=5 --timeout=10s CMD /opt/code/localstack/.venv/bin/localstack status services --format=json
+
+# default volume directory
+VOLUME /var/lib/localstack
+
+# mark the image version
+RUN touch /usr/lib/localstack/.community-version
+
+LABEL authors="LocalStack Contributors"
+LABEL maintainer="LocalStack Team (info@localstack.cloud)"
+LABEL description="LocalStack Docker image"
+
+# Add the build date and git hash at last (changes everytime)
+ARG LOCALSTACK_BUILD_DATE
+ARG LOCALSTACK_BUILD_GIT_HASH
+ENV LOCALSTACK_BUILD_DATE=${LOCALSTACK_BUILD_DATE}
+ENV LOCALSTACK_BUILD_GIT_HASH=${LOCALSTACK_BUILD_GIT_HASH}
+ENV LOCALSTACK_BUILD_VERSION=${LOCALSTACK_BUILD_VERSION}
+
+# define command at startup
+ENTRYPOINT ["docker-entrypoint.sh"]