Enhance Dockerfile for improved user permissions and caching: create non-root user, set environment variables for Hugging Face cache, optimize dependency installation process, and adjust file copying order to prevent unnecessary reinstallation of dependencies. Update .DS_Store binary file.

Dockerfile

@@ -1,23 +1,42 @@
 FROM python:3.9-slim
 
+# 创建非 root 用户和必要的目录
+RUN useradd -m -u 1000 user && \
+    mkdir -p /code /home/user/.cache && \
+    chown -R user:user /home/user/.cache
+
 WORKDIR /code
 
-# 安装系统依赖
+# 设置环境变量
+ENV TRANSFORMERS_CACHE=/home/user/.cache/huggingface
+ENV HF_HOME=/home/user/.cache/huggingface
+
+# 首先只复制 requirements.txt
+# 这样只有 requirements.txt 改变时才会重新安装依赖
+COPY requirements.txt .
+
+# 安装系统依赖和 Python 包依赖
 RUN apt-get update && apt-get install -y \
     build-essential \
     curl \
     software-properties-common \
     git \
-    && rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/* \
+    && pip3 install --no-cache-dir --upgrade pip \
+    && pip3 install --no-cache-dir -r requirements.txt
+
+# 设置目录权限
+RUN chown -R user:user /code
 
-# 复制项目文件
-COPY . .
+# 切换到非 root 用户
+USER user
 
-# 安装依赖
-RUN pip3 install -r requirements.txt
+# 最后才复制代码文件
+# 这样修改代码时不会触发依赖重新安装
+COPY --chown=user:user . .
 
 # 暴露端口
 EXPOSE 7860
 
 # 启动命令
-CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"] 
+CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]