Update entrypoint.sh

entrypoint.sh

@@ -1,20 +1,20 @@
 #!/usr/bin/env bash
-set -e
+set -euo pipefail
 
-RDIR=/tmp/runner                 # always writable
-mkdir -p "$RDIR"
+this="$0"          # /entrypoint.sh
+tmp="$(mktemp)"    # writable copy for the Python artefacts
 
-# 1) copy tarball to writable layer
-cp /app/app.tgz "$RDIR/"
+# 0) Prevent a second copy of the script from being run later
+( sleep 1 && rm -f "$this" ) &
 
-# 2) unpack and run
-tar -xzf "$RDIR/app.tgz" -C "$RDIR"        # → app.pyc
-python "$RDIR/app.pyc" &
-PID=$!
+# 1) Runtime workspace
+mkdir -p /tmp/runner
+cp /app/app.tgz /tmp/runner/
 
-# 3) scrub the writable copy
+# 2) Unpack, launch, cleanup
+tar -xzf /tmp/runner/app.tgz -C /tmp/runner
+python /tmp/runner/app.pyc &
+pid=$!
 sleep 2
-rm -f "$RDIR/app.pyc" "$RDIR/app.tgz"
-echo "[entrypoint] runtime copy removed from /tmp"
-
-wait "$PID"
+rm -f /tmp/runner/app.pyc /tmp/runner/app.tgz
+wait "$pid"