Dockerfile

# Use the official Python 3.10 image as a base
FROM python:3.10-slim

# Install necessary system dependencies for OpenCV and other heavy ML tools
# DeepFace and OpenCV require libgl1 and libglib2.0
RUN apt-get update && apt-get install -y \
    libgl1 \
    libglib2.0-0 \
    && rm -rf /var/lib/apt/lists/*

# Set the working directory to /app
WORKDIR /app

# Copy requirement files first to cache dependencies correctly
COPY requirements.txt .

# Install dependencies using pip
RUN pip install --no-cache-dir -r requirements.txt

# Create a non-root user required by Hugging Face Spaces environment
# Since HF Spaces run on port 7860 by default under non-root
RUN useradd -m -u 1000 user
USER user
ENV HOME=/home/user \
    PATH=/home/user/.local/bin:$PATH

WORKDIR $HOME/app

# Bake the FaceNet weights into the image so runtime requests do not depend on
# DeepFace's broken GitHub release URL during container startup.
RUN python - <<'PY'
import os
import tempfile
import urllib.request

weights_dir = os.path.join(os.environ["HOME"], ".deepface", "weights")
weights_path = os.path.join(weights_dir, "facenet_weights.h5")
weights_url = "https://huggingface.co/junjiang/GestureFace/resolve/main/facenet_weights.h5"
min_bytes = 80 * 1024 * 1024

os.makedirs(weights_dir, exist_ok=True)

with tempfile.NamedTemporaryFile(delete=False, dir=weights_dir, suffix=".tmp") as temp_file:
    temp_path = temp_file.name

try:
    with urllib.request.urlopen(weights_url, timeout=120) as response, open(temp_path, "wb") as output_file:
        while True:
            chunk = response.read(1024 * 1024)
            if not chunk:
                break
            output_file.write(chunk)

    if os.path.getsize(temp_path) < min_bytes:
        raise RuntimeError("Downloaded FaceNet weights file is incomplete.")

    os.replace(temp_path, weights_path)
finally:
    if os.path.exists(temp_path):
        os.remove(temp_path)
PY

RUN python -c "from deepface import DeepFace; DeepFace.build_model('Facenet')"

# Copy the rest of the application files in the directory
COPY --chown=user . $HOME/app

# Hugging Face Spaces expose port 7860 by default
EXPOSE 7860

# Run uvicorn on port 7860, bound to 0.0.0.0
CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]