# ── Stage 1: builder ──────────────────────────────────────────────────────── # Installs all Python dependencies into an isolated prefix. # This stage is only used at build time and is discarded from the final image. FROM python:3.12-slim AS builder WORKDIR /install # System libraries required by OpenCV and MediaPipe at install time RUN apt-get update && apt-get install -y --no-install-recommends \ libgl1 \ libgles2 \ libegl1 \ libglib2.0-0 \ libgomp1 \ && rm -rf /var/lib/apt/lists/* # Copy requirements FIRST so this expensive layer is cached. # Re-running `pip install` only happens when requirements.txt changes. COPY requirements.txt . RUN pip install --no-cache-dir --prefix=/install/deps -r requirements.txt # ── Stage 2: final ────────────────────────────────────────────────────────── # Lean runtime image — no build tools, no pip cache, just what's needed to run. FROM python:3.12-slim AS final WORKDIR /app # Same runtime libs in the final stage (needed by OpenCV/MediaPipe at runtime) RUN apt-get update && apt-get install -y --no-install-recommends \ libgl1 \ libgles2 \ libegl1 \ libglib2.0-0 \ libgomp1 \ curl \ && rm -rf /var/lib/apt/lists/* # Copy installed Python packages from the builder stage COPY --from=builder /install/deps /usr/local # Copy application source COPY app/ ./app/ # Document the port the app listens on. # Hugging Face Spaces sets PORT=7860 automatically; docker run -p can remap it. EXPOSE 7860 # Default environment variables — all overridable via -e or docker-compose ENV LOG_FORMAT=json \ LOG_LEVEL=INFO \ CV_THREAD_POOL_SIZE=2 \ TF_CPP_MIN_LOG_LEVEL=3 \ TF_ENABLE_ONEDNN_OPTS=0 \ PORT=7860 # Use $PORT so the same image works locally (8000) and on HF Spaces (7860) CMD ["sh", "-c", "uvicorn app.main:app --host 0.0.0.0 --port $PORT"]