new dockerfile

Dockerfile

@@ -1,47 +1,40 @@
 FROM python:3.10-slim
-WORKDIR /app
+# 1) Variables HF
+ENV HF_HOME="/home/user/.cache/huggingface" \
+    HF_HUB_CACHE="/home/user/.cache/huggingface/hub" \
+    TRANSFORMERS_CACHE="/home/user/.cache/huggingface/transformers"
 
-# 1) Variables pour rediriger tous les caches HF
-ENV PYTHONUNBUFFERED=1 \
-    PORT=8000 \
-    HF_HOME=/home/user/huggingface           
-ENV HF_HUB_CACHE="/app/model_cache/hf_cache/hub"   
-ENV TRANSFORMERS_CACHE="/app/model_cache/hf_cache/transformers"
-
-COPY requirements.txt .
+# 2) Créer l’utilisateur dès le départ
+RUN useradd -m -u 1000 user
 
+# 3) Installer dépendances système
 RUN apt-get update && apt-get install -y \
-      build-essential \
-      git \
-      libpoppler-cpp-dev \
-      poppler-utils \
-      libmagic-dev \
-      python3-dev \
+      build-essential git libpoppler-cpp-dev poppler-utils libmagic-dev python3-dev \
     && rm -rf /var/lib/apt/lists/*
 
-# 2) Installer huggingface_hub + dépendances
-RUN pip install \
-      --no-cache-dir \
-      torch torchvision \
-      --extra-index-url https://download.pytorch.org/whl/cpu
-RUN pip install --no-cache-dir -r requirements.txt
+# 4) Copier et installer Python libs
+WORKDIR /home/user/app
+COPY --chown=user requirements.txt .
+RUN pip install --no-cache-dir torch torchvision --extra-index-url https://download.pytorch.org/whl/cpu
 RUN pip install --no-cache-dir huggingface_hub
+RUN pip install --no-cache-dir -r requirements.txt
 
-# 3) Précharger le modèle au build-time
+# 5) Pré-créer et donner droits sur model_cache
+RUN mkdir -p /home/user/app/model_cache \
+    && mkdir -p $HF_HUB_CACHE \
+    && chown -R user:user /home/user/app/model_cache $HF_HOME
+
+# 6) Télécharger le modèle (build-time)
+USER user
 RUN python - <<EOF
 from huggingface_hub import snapshot_download
 snapshot_download(
   repo_id="numind/NuExtract-1.5-tiny",
-  local_dir="/app/model_cache",            # snapshot final
-  cache_dir="/app/model_cache/hf_cache"    # cache HF
+  local_dir="/home/user/app/model_cache",
+  cache_dir="$HF_HUB_CACHE"
 )
 EOF
 
-# 4) Rendre le dossier accessible à l’utilisateur
-RUN chmod -R a+rX /app/model_cache \
-    && chown -R $(id -u):$(id -g) /app/model_cache
-
-# 5) Copier le code et démarrer
-COPY . .
-
+# 7) Copier le code et démarrer
+COPY --chown=user . .
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]