Cauanne commited on
Commit
c2d0f77
·
verified ·
1 Parent(s): f04c4c4

Upload 4 files

Browse files
Files changed (1) hide show
  1. Dockerfile +15 -15
Dockerfile CHANGED
@@ -31,27 +31,27 @@ RUN apt-get update && apt-get install -y \
31
  libasound2 \
32
  && rm -rf /var/lib/apt/lists/*
33
 
34
- # 2. Configurar usuário e ambiente
35
- RUN useradd -m -u 1000 user
36
- ENV HOME=/home/user \
37
- PATH=/home/user/.local/bin:$PATH \
38
- PLAYWRIGHT_BROWSERS_PATH=/home/user/pw-browsers
39
 
40
- WORKDIR $HOME/app
41
-
42
- # 3. Instalar requisitos Python
43
- COPY --chown=user requirements.txt .
44
  RUN pip install --no-cache-dir --upgrade pip && \
45
- pip install --no-cache-dir --user -r requirements.txt
46
 
47
- # 4. Instalar o navegador Chromium na pasta do usuário
48
- RUN mkdir -p /home/user/pw-browsers && chown -R user:user /home/user/pw-browsers
49
- USER user
50
- RUN python3 -m playwright install chromium
51
 
52
- # 5. Copiar o restante do código
 
 
 
 
 
53
  COPY --chown=user . .
54
 
 
55
  EXPOSE 7860
56
 
57
  CMD ["python3", "app.py"]
 
31
  libasound2 \
32
  && rm -rf /var/lib/apt/lists/*
33
 
34
+ # 2. Configurar ambiente e caminhos
35
+ ENV PLAYWRIGHT_BROWSERS_PATH=/usr/local/share/playwright
36
+ WORKDIR /app
 
 
37
 
38
+ # 3. Instalar dependências Python GLOBALMENTE para evitar problemas de PATH
39
+ COPY requirements.txt .
 
 
40
  RUN pip install --no-cache-dir --upgrade pip && \
41
+ pip install --no-cache-dir -r requirements.txt
42
 
43
+ # 4. Instalar navegadores globalmente
44
+ RUN playwright install chromium
 
 
45
 
46
+ # 5. Configurar usuário não-root para execução (Segurança HF)
47
+ RUN useradd -m -u 1000 user && \
48
+ chown -R user:user /app && \
49
+ chmod -R 777 /usr/local/share/playwright
50
+
51
+ # 6. Copiar código
52
  COPY --chown=user . .
53
 
54
+ USER user
55
  EXPOSE 7860
56
 
57
  CMD ["python3", "app.py"]