Update Dockerfile

Dockerfile

@@ -6,98 +6,175 @@ ENV DEBIAN_FRONTEND=noninteractive \
     LC_ALL=C.UTF-8 \
     PYTHONUNBUFFERED=1
 
-# ========================
-# Base deps
-# ========================
-RUN apt-get update && apt-get install -y \
-    curl git git-lfs wget unzip zip \
-    build-essential sudo nginx vim \
-    jq net-tools ca-certificates \
-    python3 python3-pip \
+# =====================================================
+# Base system dependencies
+# =====================================================
+RUN rm -f /etc/apt/sources.list.d/*.list && \
+    apt-get update && apt-get install -y \
+    curl \
+    ca-certificates \
+    sudo \
+    git \
+    git-lfs \
+    zip \
+    unzip \
+    wget \
+    nginx \
+    vim \
+    jq \
+    net-tools \
+    lsof \
+    telnet \
+    htop \
+    bzip2 \
+    build-essential \
+    software-properties-common \
+    python3 \
+    python3-pip \
+    libx11-6 \
+    libsndfile-dev \
  && rm -rf /var/lib/apt/lists/*
 
-# ========================
-# OpenVSCode (stable pinned)
-# ========================
-ARG VSCODE_VERSION=1.99.0
-
-RUN mkdir -p /app/openvscode-server && \
-    curl -L -o /tmp/openvscode.tar.gz \
-    https://github.com/gitpod-io/openvscode-server/releases/download/openvscode-server-v${VSCODE_VERSION}/openvscode-server-v${VSCODE_VERSION}-linux-x64.tar.gz && \
-    tar -xzf /tmp/openvscode.tar.gz -C /app/openvscode-server --strip-components=1 && \
-    rm -f /tmp/openvscode.tar.gz
-
-# ========================
-# Node.js tools
-# ========================
-RUN curl -fsSL https://deb.nodesource.com/setup_18.x | bash - && \
+# =====================================================
+# OpenVSCode Server
+# =====================================================
+ARG BUILD_DATE
+ARG VERSION
+ARG CODE_RELEASE
+
+RUN \
+  echo "**** install openvscode-server runtime dependencies ****" && \
+  apt-get update && \
+  apt-get install -y \
+    libatomic1 \
+    nano \
+    netcat && \
+  echo "**** install openvscode-server ****" && \
+  if [ -z ${CODE_RELEASE+x} ]; then \
+    CODE_RELEASE=$(curl -sX GET "https://api.github.com/repos/gitpod-io/openvscode-server/releases/latest" \
+      | awk '/tag_name/{print $4;exit}' FS='[""]' \
+      | sed 's|^openvscode-server-v||'); \
+  fi && \
+  mkdir -p /app/openvscode-server && \
+  curl -o /tmp/openvscode-server.tar.gz -L \
+    "https://github.com/gitpod-io/openvscode-server/releases/download/openvscode-server-v${CODE_RELEASE}/openvscode-server-v${CODE_RELEASE}-linux-x64.tar.gz" && \
+  tar xf /tmp/openvscode-server.tar.gz \
+    -C /app/openvscode-server/ \
+    --strip-components=1 && \
+  apt-get clean && \
+  rm -rf /tmp/* /var/lib/apt/lists/* /var/tmp/*
+
+# =====================================================
+# Optional nvtop
+# =====================================================
+RUN add-apt-repository ppa:flexiondotorg/nvtop && \
+    apt-get update && \
+    apt-get install -y --no-install-recommends nvtop
+
+# =====================================================
+# Node.js + tools
+# =====================================================
+RUN curl -sL https://deb.nodesource.com/setup_18.x | bash - && \
     apt-get install -y nodejs && \
-    npm install -g configurable-http-proxy tsx tslab http-server miniflare@2
+    npm install -g \
+      configurable-http-proxy \
+      tsx \
+      tslab \
+      http-server \
+      miniflare@2
 
-# ========================
-# User
-# ========================
-RUN useradd -m user && \
-    mkdir -p /home/user/app && \
-    chown -R user:user /home/user
+# =====================================================
+# User setup
+# =====================================================
+WORKDIR /app
+
+RUN adduser --disabled-password --gecos '' --shell /bin/bash user && \
+    chown -R user:user /app
+
+RUN echo "user ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/90-user
+
+USER user
 
 ENV HOME=/home/user
-ENV PATH=$HOME/miniconda/bin:$PATH
-ENV PYTHONPATH=/home/user/app
 
-WORKDIR /home/user/app
+RUN mkdir -p $HOME/.cache $HOME/.config && \
+    chmod -R 777 $HOME
 
-# ========================
+# =====================================================
 # Miniconda
-# ========================
-RUN curl -sLo ~/miniconda.sh https://repo.anaconda.com/miniconda/Miniconda3-py310_23.5.2-0-Linux-x86_64.sh && \
+# =====================================================
+ENV CONDA_AUTO_UPDATE_CONDA=false \
+    PATH=$HOME/miniconda/bin:$PATH \
+    PYTHONPATH=$HOME/app
+
+RUN curl -sLo ~/miniconda.sh \
+    https://repo.anaconda.com/miniconda/Miniconda3-py310_23.5.2-0-Linux-x86_64.sh && \
     chmod +x ~/miniconda.sh && \
     ~/miniconda.sh -b -p ~/miniconda && \
-    rm ~/miniconda.sh
+    rm ~/miniconda.sh && \
+    conda clean -ya
 
-# ========================
-# Copy ALL config files FIRST (IMPORTANT FIX)
-# ========================
-COPY packages.txt /root/packages.txt
-COPY on_startup.sh /root/on_startup.sh
+WORKDIR $HOME/app
 
+# =====================================================
+# ROOT SECTION
+# =====================================================
 USER root
 
-RUN apt-get update && \
-    if [ -f /root/packages.txt ]; then \
-        xargs -r -a /root/packages.txt apt-get install -y; \
-    fi && \
-    if [ -f /root/on_startup.sh ]; then \
-        bash /root/on_startup.sh || true; \
-    fi
-
-# ========================
-# Python deps
-# ========================
-USER user
+COPY packages.txt /root/packages.txt
 
-COPY requirements.txt /home/user/app/
-RUN pip install --no-cache-dir -r requirements.txt
+RUN apt-get update && \
+    xargs -r -a /root/packages.txt apt-get install -y --no-install-recommends && \
+    rm -rf /var/lib/apt/lists/*
 
-# ========================
-# App source (CRITICAL FIX)
-# ========================
-COPY --chown=user . /home/user/app
+COPY on_startup.sh /root/on_startup.sh
 
-# ========================
-# Agent layer safety check
-# ========================
-RUN test -d /home/user/app/agent || mkdir -p /home/user/app/agent
+RUN bash /root/on_startup.sh || true
 
-# ========================
-# Playwright (optional)
-# ========================
-RUN pip install playwright && playwright install --with-deps || true
+# =====================================================
+# USER SECTION
+# =====================================================
+USER user
 
-# ========================
-# Permissions (FIXED ORDER)
-# ========================
-RUN chmod +x /home/user/app/start_server.sh || true
+# =====================================================
+# Python dependencies
+# =====================================================
+COPY requirements.txt $HOME/app/
+
+RUN pip install --no-cache-dir --upgrade -r requirements.txt
+
+# =====================================================
+# AI AGENT LAYER
+# =====================================================
+COPY --chown=user app/agent $HOME/app/agent
+
+# =====================================================
+# FULL APPLICATION SOURCE
+# =====================================================
+COPY --chown=user . $HOME/app
+
+WORKDIR $HOME/app
+
+# =====================================================
+# Playwright
+# =====================================================
+RUN pip install playwright && \
+    playwright install --with-deps || true
+
+# =====================================================
+# Permissions
+# =====================================================
+RUN chmod +x start_server.sh || true
+
+# =====================================================
+# Runtime ENV
+# =====================================================
+ENV GRADIO_ALLOW_FLAGGING=never \
+    GRADIO_NUM_PORTS=1 \
+    GRADIO_SERVER_NAME=0.0.0.0 \
+    GRADIO_THEME=huggingface \
+    SYSTEM=spaces \
+    SHELL=/bin/bash
 
 EXPOSE 7860 3000