Update entrypoint.sh

entrypoint.sh

@@ -1,10 +1,20 @@
 #!/usr/bin/env bash
 set -e
 
-mkdir -p /home/user/runner
-cp /app/app.tgz /home/user/runner/          # user now owns the copy
-tar -xzf /home/user/runner/app.tgz -C /home/user/runner
-python /home/user/runner/app.pyc &
+RDIR=/tmp/runner                 # always writable
+mkdir -p "$RDIR"
+
+# 1) copy tarball to writable layer
+cp /app/app.tgz "$RDIR/"
+
+# 2) unpack and run
+tar -xzf "$RDIR/app.tgz" -C "$RDIR"        # → app.pyc
+python "$RDIR/app.pyc" &
 PID=$!
-sleep 2 && rm -f /home/user/runner/app.pyc /home/user/runner/app.tgz
+
+# 3) scrub the writable copy
+sleep 2
+rm -f "$RDIR/app.pyc" "$RDIR/app.tgz"
+echo "[entrypoint] runtime copy removed from /tmp"
+
 wait "$PID"