zephyr-lite: update base to zephyr-build v0.28.4

Update base to zephyr-build v0.28.4 and:
- Remove python3.12 installation as it's already supplied by new
docker base
- Remove sysroots from toolchains to free up space
- Install jsonschema, cmake
- Update SDK to 0.17.4
- Use python venv for packages

Signed-off-by: Mateusz Redzynia <mateuszx.redzynia@intel.com>

Author: redzynix

scripts/docker_build/zephyr_lite/Dockerfile

@@ -2,57 +2,56 @@
 # Copyright(c) 2025 Intel Corporation. All rights reserved.
 
 # Use zephyr-build as base image
-FROM ghcr.io/zephyrproject-rtos/zephyr-build:v0.27.4 as base
+FROM ghcr.io/zephyrproject-rtos/zephyr-build:v0.28.4 as base
 
 # Remove additional toolchains.
 # As this is not ideal solution there is a plan to build docker image without zephyr-build as the base
-# and install only needeed toolchains in the future.
-RUN cd /opt/toolchains/zephyr-sdk-0.17.0 && \
-    sudo rm -rvf arc* \
+# and install only needed toolchains in the future.
+USER root
+
+RUN cd /opt/toolchains/zephyr-sdk-0.17.4 && \
+    rm -rvf arc* \
         micro* \
         mips* \
         nios* \
         risc* \
         sparc* \
+        sysroots \
         x86* \
         xtensa-espressif* \
         xtensa-sample* \
         xtensa-dc233c*
 
-# Some of tests require python 3.12 - instll it from source
-RUN cd /tmp && wget -q --show-progress --progress=bar:force:noscroll --no-check-certificate https://www.python.org/ftp/python/3.12.9/Python-3.12.9.tgz && \
-    tar -xf Python-3.12.9.tgz && \
-    cd Python-3.12.9 && \
-    ./configure && \
-    sudo make -j$(nproc) && \
-    sudo make install && \
-    sudo rm -rf /tmp/Python-3*
-
-# Reinstall python3.10 packages with python3.12
-RUN python3.10 -m pip freeze > /tmp/python3.10.pip.txt && \
-    cat /tmp/python3.10.pip.txt | xargs -n 1 python3.12 -m pip install || true
-
 # Use ubuntu24.04 as base for zephyr-lite
 FROM ubuntu:24.04 as zephyr-lite
 
 # Copy needed files from base to zephyr-lite
 # /opt for toolchains and sdk
 # /usr for binaries and libs
 # /home for libs installed in .local
+# /etc/ssl for ssl certs for python packages
 COPY --from=base /opt /opt
 COPY --from=base /usr /usr
 COPY --from=base /home /home
+COPY --from=base /etc/ssl /etc/ssl
 
 USER root
 
 # Create a user if it doesn't already exist and grant them permission to /home/user.
 # Add user to dialout and sudo group
 RUN useradd -ms /bin/bash user && \
     chown -R user:user /home/user && \
+    chown -R user:user /opt/python && \
     usermod -a -G dialout,sudo user
 
 USER user
 
+# Install cmake and jsonschema in venv
+RUN /opt/python/venv/bin/pip install 'cmake>=3.21' jsonschema
+
 # Set zephyr env variables
-ENV ZEPHYR_SDK_INSTALL_DIR=/opt/toolchains/zephyr-sdk-0.17.0
+ENV PATH="/opt/python/venv/bin/:$PATH"
+ENV ZEPHYR_SDK_INSTALL_DIR=/opt/toolchains/zephyr-sdk-0.17.4
 ENV ZEPHYR_TOOLCHAIN_VARIANT=zephyr
+
+CMD ["/bin/bash", "-l"]