| FROM ubuntu:22.04 | |
| # Note: The warning "NVIDIA Driver was not detected" is normal when running in certain environments | |
| # GPU functionality will be available when the container is run with proper NVIDIA Container Toolkit support | |
| ENV DEBIAN_FRONTEND=noninteractive \ | |
| TZ=Asia/Shanghai | |
| RUN apt-get update \ | |
| && apt-get install -y --no-install-recommends tzdata \ | |
| && ln -snf /usr/share/zoneinfo/$TZ /etc/localtime \ | |
| && echo $TZ > /etc/timezone \ | |
| && dpkg-reconfigure -f noninteractive tzdata \ | |
| && rm -rf /var/lib/apt/lists/* | |
| # Remove any third-party apt sources to avoid issues with expiring keys. | |
| # Install some basic utilities | |
| RUN rm -f /etc/apt/sources.list.d/*.list && \ | |
| apt-get update && apt-get install -y --no-install-recommends \ | |
| curl \ | |
| ca-certificates \ | |
| sudo \ | |
| git \ | |
| wget \ | |
| procps \ | |
| git-lfs \ | |
| zip \ | |
| unzip \ | |
| htop \ | |
| vim \ | |
| nano \ | |
| bzip2 \ | |
| libx11-6 \ | |
| build-essential \ | |
| libsndfile-dev \ | |
| software-properties-common \ | |
| gnupg \ | |
| && rm -rf /var/lib/apt/lists/* | |
| #RUN add-apt-repository ppa:flexiondotorg/nvtop && \ | |
| # apt-get upgrade -y && \ | |
| # apt-get install -y --no-install-recommends nvtop | |
| RUN curl -sL https://deb.nodesource.com/setup_22.x | bash - && \ | |
| apt-get install -y nodejs | |
| # Install VSCode Server | |
| RUN curl -fsSL https://code-server.dev/install.sh | sh | |
| # Create a working directory | |
| WORKDIR /app | |
| # Create a non-root user and switch to it | |
| RUN adduser --disabled-password --gecos '' --shell /bin/bash user \ | |
| && chown -R user:user /app | |
| RUN echo "user ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/90-user | |
| USER user | |
| # All users can use /home/user as their home directory | |
| ENV HOME=/home/user | |
| RUN mkdir $HOME/.cache $HOME/.config \ | |
| && chmod -R 777 $HOME | |
| # Set up the Conda environment | |
| #ENV CONDA_AUTO_UPDATE_CONDA=false \ | |
| # PATH=$HOME/miniconda/bin:$PATH | |
| #RUN curl -sLo ~/miniconda.sh https://repo.continuum.io/miniconda/Miniconda3-py39_4.10.3-Linux-x86_64.sh \ | |
| # && chmod +x ~/miniconda.sh \ | |
| # && ~/miniconda.sh -b -p ~/miniconda \ | |
| # && rm ~/miniconda.sh \ | |
| # && conda clean -ya | |
| WORKDIR $HOME/app | |
| ####################################### | |
| # Start root user section | |
| ####################################### | |
| USER root | |
| # User Debian packages | |
| ## Security warning : Potential user code executed as root (build time) | |
| #RUN --mount=target=/root/packages.txt,source=packages.txt \ | |
| # apt-get update && \ | |
| # xargs -r -a /root/packages.txt apt-get install -y --no-install-recommends \ | |
| # && rm -rf /var/lib/apt/lists/* | |
| #RUN --mount=target=/root/on_startup.sh,source=on_startup.sh,readwrite \ | |
| # bash /root/on_startup.sh | |
| RUN apt install -y python3-pip && pip install --no-cache-dir mitmproxy | |
| RUN mkdir -p /root/.mitmproxy && \ | |
| mitmproxy --set confdir=/root/.mitmproxy --options > /dev/null 2>&1 || true | |
| RUN cp /root/.mitmproxy/mitmproxy-ca-cert.pem /usr/local/share/ca-certificates/mitmproxy-ca.crt && \ | |
| update-ca-certificates | |
| RUN mkdir /data && chown user:user /data | |
| ####################################### | |
| # End root user section | |
| ####################################### | |
| USER user | |
| # Python packages | |
| #RUN --mount=target=requirements.txt,source=requirements.txt \ | |
| # pip install --no-cache-dir --upgrade -r requirements.txt | |
| # Copy the current directory contents into the container at $HOME/app setting the owner to the user | |
| COPY --chown=user . $HOME/app | |
| RUN chmod +x start_server.sh | |
| ENV PYTHONUNBUFFERED=1 \ | |
| GRADIO_ALLOW_FLAGGING=never \ | |
| GRADIO_NUM_PORTS=1 \ | |
| GRADIO_SERVER_NAME=0.0.0 \ | |
| GRADIO_THEME=huggingface \ | |
| SYSTEM=spaces \ | |
| SHELL=/bin/bash | |
| CMD ["./start_server.sh"] |