alphg commited on
Commit
50ba304
·
verified ·
1 Parent(s): 1124ca7

Update Dockerfile

Browse files
Files changed (1) hide show
  1. Dockerfile +11 -3
Dockerfile CHANGED
@@ -1,7 +1,15 @@
1
  FROM python:3.12-slim
2
 
3
- RUN useradd user
 
4
 
 
 
 
 
 
 
 
5
  USER user
6
 
7
  ENV HOME=/home/user \
@@ -10,8 +18,8 @@ ENV HOME=/home/user \
10
  WORKDIR $HOME/app
11
  COPY --chown=user ./ $HOME/app
12
 
 
13
  RUN pip install --trusted-host pypi.python.org -r requirements.txt
14
- RUN apt-get update && apt-get install -y libreoffice && apt-get install -y ffmpeg
15
 
16
  EXPOSE 7860
17
 
@@ -19,4 +27,4 @@ ENV NAME World
19
  ENV NUMBA_CACHE_DIR=/tmp/numba_cache
20
  ENV NUMBA_DISABLE_JIT=0
21
 
22
- CMD ["python", "app.py"]
 
1
  FROM python:3.12-slim
2
 
3
+ # Create non-root user
4
+ RUN useradd -m -s /bin/bash user
5
 
6
+ # Install system dependencies as root
7
+ RUN apt-get update && \
8
+ apt-get install -y libreoffice ffmpeg && \
9
+ apt-get clean && \
10
+ rm -rf /var/lib/apt/lists/*
11
+
12
+ # Switch to non-root user AFTER installing system packages
13
  USER user
14
 
15
  ENV HOME=/home/user \
 
18
  WORKDIR $HOME/app
19
  COPY --chown=user ./ $HOME/app
20
 
21
+ # Install Python dependencies as non-root
22
  RUN pip install --trusted-host pypi.python.org -r requirements.txt
 
23
 
24
  EXPOSE 7860
25
 
 
27
  ENV NUMBA_CACHE_DIR=/tmp/numba_cache
28
  ENV NUMBA_DISABLE_JIT=0
29
 
30
+ CMD ["python", "app.py"]