Update Dockerfile

Dockerfile

@@ -1,5 +1,5 @@
 # ----------------------------------------------------------
-# 1. Base image
+# 1. Base Image
 # ----------------------------------------------------------
 FROM ubuntu:22.04
 
@@ -7,7 +7,7 @@ FROM ubuntu:22.04
 ENV DEBIAN_FRONTEND=noninteractive
 
 # ----------------------------------------------------------
-# 2. Install dependencies
+# 2. Install System Dependencies
 # ----------------------------------------------------------
 RUN apt-get update && apt-get install -y --no-install-recommends \
     wget \
@@ -20,42 +20,71 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     && rm -rf /var/lib/apt/lists/*
 
 # ----------------------------------------------------------
-# 3. Install Ollama
+# 3. Create a Non-Root User
+# ----------------------------------------------------------
+RUN useradd -m appuser
+
+# ----------------------------------------------------------
+# 4. Set Environment Variables for Ollama
+# ----------------------------------------------------------
+ENV HOME=/home/appuser
+ENV OLLAMA_HOME=/home/appuser/.ollama
+
+# ----------------------------------------------------------
+# 5. Set Permissions for Ollama Directory
+# ----------------------------------------------------------
+RUN mkdir -p $OLLAMA_HOME && chmod 700 $OLLAMA_HOME
+
+# ----------------------------------------------------------
+# 6. Switch to Non-Root User to Install Ollama
+# ----------------------------------------------------------
+USER appuser
+
+# ----------------------------------------------------------
+# 7. Install Ollama
 # ----------------------------------------------------------
 RUN curl -fsSL https://ollama.com/install.sh | bash
 
 # ----------------------------------------------------------
-# 4. Create directory for Ollama data + set OLLAMA_HOME
+# 8. Switch Back to Root to Install Python Dependencies
 # ----------------------------------------------------------
-ENV OLLAMA_HOME=/ollama-data
-RUN mkdir -p /ollama-data && chmod 777 /ollama-data
+USER root
 
 # ----------------------------------------------------------
-# 5. Copy Python requirements and install
+# 9. Set Working Directory for the Application
 # ----------------------------------------------------------
 WORKDIR /app
+
+# ----------------------------------------------------------
+# 10. Copy and Install Python Requirements
+# ----------------------------------------------------------
 COPY requirements.txt .
 RUN pip3 install --no-cache-dir -r requirements.txt
 
 # ----------------------------------------------------------
-# 6. Copy application files
+# 11. Copy Application Files
 # ----------------------------------------------------------
 COPY app.py /app/app.py
+COPY entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
 
 # ----------------------------------------------------------
-# 7. Environment variables & expose port
+# 12. Set Environment Variables and Expose Port
 # ----------------------------------------------------------
 ENV OLLAMA_API_KEY=change_me
 EXPOSE 7860
 
 # ----------------------------------------------------------
-# 8. Copy and set entrypoint
+# 13. Adjust Ownership of Application Directory
 # ----------------------------------------------------------
-COPY entrypoint.sh /entrypoint.sh
-RUN chmod +x /entrypoint.sh
+RUN chown -R appuser:appuser /app
 
 # ----------------------------------------------------------
-# 9. Use entrypoint for final startup
+# 14. Switch to Non-Root User for Running the Application
 # ----------------------------------------------------------
-CMD ["/entrypoint.sh"]
+USER appuser
 
+# ----------------------------------------------------------
+# 15. Define Entrypoint
+# ----------------------------------------------------------
+CMD ["/entrypoint.sh"]