Grant user with right write permissions to entire project directory

Dockerfile

@@ -1,25 +1,24 @@
 FROM python:3.11-slim
 
-# system dependencies
+# system packages
 RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*
 
-# create the non-root user expected by Spaces (UID 1000)
+# create the non-root Space user (UID 1000)
 RUN useradd -m -u 1000 user
 
-# copy project code and give ownership to that user
+# copy project before dropping privileges
 WORKDIR /home/user/app
 COPY --chown=user . .
 
-# install Python requirements while still root
+# install Python requirements as root
 RUN pip install --no-cache-dir -r requirements.txt
 
-# prepare writable cache and persistent volume
+# persistent storage and HF caches
 RUN mkdir -p /data && chown 1000:1000 /data
 ENV HF_HOME=/home/user/.cache/huggingface \
-    TRANSFORMERS_CACHE=/data/.cache                 
+    TRANSFORMERS_CACHE=/data/.cache
 
-# drop privileges
+# switch to un-privileged user
 USER 1000
 
-# run the fine-tuning script
-CMD ["python", "finetune_distractor_model.py"]
+CMD ["python", "finetune_distractor_model.py"]