Dockerfile

@@ -13,7 +13,6 @@ ENV ARCH=${TARGETARCH:-amd64}
 ENV DEBIAN_FRONTEND=noninteractive
 ENV KUBECTL_VERSION=1.33.0
 ENV KUBECTL_DATE=2025-05-01
-ENV TFLINT_VERSION=0.58.1
 
 # User config
 ENV DOCKER_USER=coder \
@@ -44,7 +43,6 @@ RUN apt-get update -y && apt-get upgrade -y && apt-get install --no-install-reco
     nodejs \
     npm \
     passwd \
-    pipx \
     python3 \
     python3-pip \
     python3-venv \
@@ -66,11 +64,10 @@ RUN apt-get update -y && apt-get upgrade -y && apt-get install --no-install-reco
 # Docker
 RUN curl -fsSL https://get.docker.com | sh && dockerd --version
 
-# pre-commit and checkov
-RUN pipx install pre-commit && \
-    pipx install "checkov>=3.1.0,<3.3.0" && \
-    ln -s /root/.local/pipx/venvs/pre-commit/bin/pre-commit /usr/local/bin/pre-commit && \
-    ln -s /root/.local/pipx/venvs/checkov/bin/checkov /usr/local/bin/checkov
+# pre-commit
+RUN pip3 install --break-system-packages --no-cache-dir pipx && \
+    pipx install pre-commit && \
+    ln -s /root/.local/pipx/venvs/pre-commit/bin/pre-commit /usr/local/bin/pre-commit
 
 # AWS CLI (handle arch manually)
 RUN set -e; \
@@ -93,12 +90,6 @@ RUN curl -sLO "https://github.com/eksctl-io/eksctl/releases/latest/download/eksc
     tar -xzf eksctl_Linux_${ARCH}.tar.gz -C /tmp && \
     mv /tmp/eksctl /usr/local/bin && rm eksctl_Linux_${ARCH}.tar.gz
 
-# TFlint
-RUN curl -sLO "https://github.com/terraform-linters/tflint/releases/download/v${TFLINT_VERSION}/tflint_linux_${ARCH}.zip" && \
-    unzip -q tflint_linux_${ARCH}.zip && \
-    mv tflint /usr/local/bin/ && \
-    rm tflint_linux_${ARCH}.zip
-
 # code-server (auto-detects arch)
 RUN curl -fsSL https://code-server.dev/install.sh | sh