Upload Dockerfile with huggingface_hub

Dockerfile

@@ -1,11 +1,32 @@
-# Use Node 22 Alpine as the base to satisfy n8n's engine requirements (Node >= 22.16)
-FROM node:22-alpine
+# ==============================================================================
+# Dockerfile – n8n on Hugging Face Spaces
+#
+# Solves:
+#   1. "Command not found" → uses node:22-alpine base (has /bin/sh + bash)
+#   2. "Permissions too wide" → start.sh fixes perms before dropping to uid 1000
+#   3. Port 7860            → HF Spaces requirement
+#   4. Persistence          → /data/.n8n backed by HF persistent storage
+#   5. Node >= 22.16        → required by n8n >= 2.15 and isolated-vm >= 6.1
+# ==============================================================================
+
+# --------------- Stage 1: Build (includes native compilation toolchain) -------
+FROM node:22-alpine AS build
 
-# Install essential build tools for native modules (node-gyp, isolated-vm)
+# Install native build dependencies for isolated-vm and other C++ addons
 RUN apk add --no-cache \
     python3 \
     make \
-    g++ \
+    g++
+
+# Install n8n globally
+RUN npm install -g n8n@latest && \
+    npm cache clean --force
+
+# --------------- Stage 2: Runtime (lean, no build toolchain) ------------------
+FROM node:22-alpine
+
+# Runtime-only dependencies
+RUN apk add --no-cache \
     su-exec \
     tini \
     bash \
@@ -15,32 +36,31 @@ RUN apk add --no-cache \
     ca-certificates \
     tzdata
 
-# Install n8n globally
-RUN npm install -g n8n@latest && npm cache clean --force
+# Copy the globally-installed n8n from the build stage
+COPY --from=build /usr/local/lib/node_modules /usr/local/lib/node_modules
+COPY --from=build /usr/local/bin/n8n /usr/local/bin/n8n
 
-# HF Spaces requirements
-ENV N8N_PORT=7860 \
-    N8N_PROTOCOL=https \
-    N8N_USER_FOLDER=/data/.n8n \
-    NODE_ENV=production
-
-# Setup permissions for the persistent bucket
-USER root
-RUN mkdir -p /data/.n8n && chown -R 1000:1000 /data/.n8n
-
-# Create the n8n user (uid 1000)
+# Create the non-root user that n8n will run as (uid/gid 1000)
 RUN addgroup -g 1000 n8n && \
     adduser -u 1000 -G n8n -s /bin/bash -D n8n
 
-USER 1000
+# ---------- Environment -------------------------------------------------------
+ENV N8N_PORT=7860 \
+    N8N_PROTOCOL=https \
+    N8N_USER_FOLDER=/data/.n8n \
+    N8N_DIAGNOSTICS_ENABLED=false \
+    N8N_HIRING_BANNER_ENABLED=false \
+    N8N_PERSONALIZATION_ENABLED=false \
+    NODE_ENV=production \
+    GENERIC_TIMEZONE=UTC
 
-# Expose HF port
+# Expose the HF-required port
 EXPOSE 7860
 
-# Copy and prep the startup script
-COPY --chown=1000:1000 start.sh /start.sh
+# ---------- Entrypoint --------------------------------------------------------
+COPY start.sh /start.sh
 RUN chmod +x /start.sh
 
-# Use tini as PID 1 to handle signals correctly
+# Use tini as PID 1 to reap zombies and forward signals
 ENTRYPOINT ["/sbin/tini", "--"]
 CMD ["/start.sh"]