(command.CommandList
  children: [
    (C {<Id.KW_Set set>} {<-e>})
    (command.If
      arms: [
        (if_arm
          cond: [
            (command.Sentence
              child: 
                (C {<Id.Lit_LBracket '['>} 
                  {(DQ (command_sub left_token:<Id.Left_DollarParen '$('> child:(C {<id>} {<-u>})))} {<Id.KW_Bang '!'> <Id.Lit_Equals '='>} {(DQ <0>)} {<Id.Lit_RBracket ']'>}
                )
              terminator: <Id.Op_Semi _>
            )
          ]
          action: [
            (command.Simple
              words: [{<echo>} {(DQ ($ Id.VSub_Number '$0') <': requires root'>)}]
              redirects: [(redir op:<Id.Redir_GreatAnd '>&'> loc:(redir_loc.Fd fd:1) arg:{<2>})]
              do_fork: T
            )
            (command.ControlFlow token:<Id.ControlFlow_Exit exit> arg_word:{<1>})
          ]
          spids: [20 42]
        )
      ]
    )
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:image_name)
          op: assign_op.Equal
          rhs: {<pld>}
          spids: [63]
        )
      ]
    )
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:tmpdir)
          op: assign_op.Equal
          rhs: 
            {
              (command_sub
                left_token: <Id.Left_DollarParen '$('>
                child: 
                  (C {<mktemp>} {<-d>} 
                    {
                      (braced_var_sub
                        token: <Id.VSub_Name TMPDIR>
                        suffix_op: 
                          (suffix_op.Unary
                            op_id: Id.VTest_ColonHyphen
                            arg_word: {<Id.Lit_Slash '/'> <var> <Id.Lit_Slash '/'> <tmp>}
                          )
                      ) <'/pld-docker-XXXXXX'>
                    }
                  )
              )
            }
          spids: [67]
        )
      ]
    )
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:root)
          op: assign_op.Equal
          rhs: {($ Id.VSub_DollarName '$tmpdir') <'/rootfs'>}
          spids: [84]
        )
      ]
    )
    (C {<install>} {<-d>} {<-m>} {<755>} {($ Id.VSub_DollarName '$root')})
    (command.AndOr
      ops: [Id.Op_DPipe]
      children: [(C {<docker>} {<rmi>} {($ Id.VSub_DollarName '$image_name')}) (C {<Id.Lit_Colon ':'>})]
    )
    (C {<rpm>} {<-r>} {($ Id.VSub_DollarName '$root')} {<--initdb>})
    (C {<Id.KW_Set set>} {<Id.Lit_Other '+'> <e>})
    (C {<install>} {<-d>} {($ Id.VSub_DollarName '$root') <'/dev/pts'>})
    (C {<mknod>} {($ Id.VSub_DollarName '$root') <'/dev/random'>} {<c>} {<1>} {<8>} {<-m>} {<644>})
    (C {<mknod>} {($ Id.VSub_DollarName '$root') <'/dev/urandom'>} {<c>} {<1>} {<9>} {<-m>} {<644>})
    (C {<mknod>} {($ Id.VSub_DollarName '$root') <'/dev/full'>} {<c>} {<1>} {<7>} {<-m>} {<666>})
    (C {<mknod>} {($ Id.VSub_DollarName '$root') <'/dev/null'>} {<c>} {<1>} {<3>} {<-m>} {<666>})
    (C {<mknod>} {($ Id.VSub_DollarName '$root') <'/dev/zero'>} {<c>} {<1>} {<5>} {<-m>} {<666>})
    (C {<mknod>} {($ Id.VSub_DollarName '$root') <'/dev/console'>} {<c>} {<5>} {<1>} {<-m>} {<660>})
    (C {<Id.KW_Set set>} {<-e>})
    (C {<poldek>} {<-r>} {($ Id.VSub_DollarName '$root')} {<--up>} {<--noask>} {<-u>} {<--noignore>} {<-O>} 
      {(SQ <'rpmdef=_install_langs C'>)} {<-O>} {(SQ <'rpmdef=_excludedocs 1'>)} {<vserver-packages>} {<bash>} {<iproute2>} {<coreutils>} {<grep>} 
      {<poldek>}
    )
    (C {<sed>} {<-i>} {<-e>} 
      {(SQ <'s;^#%_netsharedpath.*;%_netsharedpath /dev/shm:/sys:/proc:/dev:/etc/hostname;'>)} {($ Id.VSub_DollarName '$root') <'/etc/rpm/macros'>}
    )
    (C {<poldek-config>} {<-c>} {($ Id.VSub_DollarName '$root') <'/etc/poldek/poldek.conf'>} {<ignore>} 
      {<systemd-init>}
    )
    (C {<touch>} {($ Id.VSub_DollarName '$root') <'/var/lock/subsys/network'>})
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:remove_packages)
          op: assign_op.Equal
          rhs: {(DQ <ca-certificates>)}
          spids: [325]
        )
      ]
    )
    (command.ForEach
      iter_name: pkg
      iter_words: [{($ Id.VSub_DollarName '$remove_packages')}]
      do_arg_iter: F
      body: 
        (command.DoGroup
          children: [
            (command.AndOr
              ops: [Id.Op_DAmp]
              children: [
                (C {<rpm>} {<-r>} {($ Id.VSub_DollarName '$root')} {<-q>} {($ Id.VSub_DollarName '$pkg')})
                (C {<rpm>} {<-r>} {($ Id.VSub_DollarName '$root')} {<-e>} {($ Id.VSub_DollarName '$pkg')} 
                  {<--nodeps>}
                )
              ]
            )
          ]
        )
    )
    (C {<rm>} {<-v>} {($ Id.VSub_DollarName '$root') <'/etc/ld.so.cache'>})
    (C {<rm>} {<-rfv>} {($ Id.VSub_DollarName '$root') <'/var/cache/hrmib/'> <Id.Lit_Star '*'>})
    (C {<rm>} {<-rfv>} 
      {($ Id.VSub_DollarName '$root') <'/usr/share/man/man'> <Id.Lit_QMark '?'> <'/'> <Id.Lit_Star '*'>}
    )
    (C {<rm>} {<-rfv>} {($ Id.VSub_DollarName '$root') <'/usr/share/locale/'> <Id.Lit_Star '*'> <'/'>})
    (C {<rm>} {<-rfv>} {($ Id.VSub_DollarName '$root') <'/usr/share/help/'> <Id.Lit_Star '*'> <'/'>})
    (C {<rm>} {<-rfv>} {($ Id.VSub_DollarName '$root') <'/usr/share/doc/'> <Id.Lit_Star '*'>})
    (C {<rm>} {<-rfv>} {($ Id.VSub_DollarName '$root') <'/usr/src/examples/'> <Id.Lit_Star '*'>})
    (C {<rm>} {<-rfv>} {($ Id.VSub_DollarName '$root') <'/usr/share/pixmaps/'> <Id.Lit_Star '*'>})
    (command.Pipeline
      children: [
        (C {<tar>} {<--numeric-owner>} {<--xattrs>} {<--acls>} {<-C>} {($ Id.VSub_DollarName '$root')} 
          {<-c>} {<.>}
        )
        (C {<docker>} {<import>} {<->} {($ Id.VSub_DollarName '$image_name')})
      ]
      negated: F
    )
    (C {<docker>} {<run>} {<-i>} {<-u>} {<root>} {($ Id.VSub_DollarName '$image_name')} {<'/bin/echo'>} 
      {<Success.>}
    )
    (C {<rm>} {<-r>} {($ Id.VSub_DollarName '$tmpdir')})
  ]
)