Update Dockerfile

Dockerfile

@@ -1,20 +1,48 @@
 FROM ubuntu:22.04
 ENV DEBIAN_FRONTEND=noninteractive
 
-# Redpanda
+# ── 1. System deps ──────────────────────────────────────────────────────────
+RUN apt-get update && apt-get install -y \
+    curl wget nginx supervisor ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+# ── 2. Redpanda (broker + rpk + pandaproxy + schema-registry) ───────────────
 RUN curl -1sLf 'https://dl.redpanda.com/nzc4ZYQK3WRGd9sy/redpanda/cfg/setup/bash.deb.sh' \
-    | bash && apt-get install -y redpanda redpanda-console
+    | bash \
+    && apt-get install -y redpanda \
+    && rm -rf /var/lib/apt/lists/*
+
+# ── 3. Redpanda Console binary (direct download — no apt needed) ─────────────
+RUN CONSOLE_VER=2.7.2 && \
+    wget -qO /tmp/console.tar.gz \
+    "https://github.com/redpanda-data/console/releases/download/v${CONSOLE_VER}/redpanda-console_${CONSOLE_VER}_linux_amd64.tar.gz" \
+    && tar -xzf /tmp/console.tar.gz -C /usr/local/bin redpanda-console \
+    && chmod +x /usr/local/bin/redpanda-console \
+    && rm /tmp/console.tar.gz
+
+# ── 4. Create user 1000 (matches HF Spaces runtime UID) ─────────────────────
+RUN useradd -m -u 1000 -s /bin/bash rpuser
 
-# nginx + supervisor
-RUN apt-get install -y nginx supervisor gettext-base \
-    && rm /etc/nginx/sites-enabled/default
+# ── 5. Directories — owned by uid 1000 ──────────────────────────────────────
+RUN mkdir -p \
+    /home/rpuser/data \
+    /home/rpuser/logs \
+    /var/log/supervisor \
+    /run/nginx \
+    && chown -R 1000:1000 /home/rpuser \
+    && chmod -R 777 /var/log/supervisor /run/nginx
 
-COPY nginx.conf /etc/nginx/nginx.conf
-COPY redpanda.yaml /etc/redpanda/redpanda.yaml
-COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
+# ── 6. nginx — allow non-root ────────────────────────────────────────────────
+RUN mkdir -p /var/lib/nginx/body /var/lib/nginx/proxy \
+    && chown -R 1000:1000 /var/lib/nginx /var/log/nginx \
+    && touch /run/nginx.pid && chown 1000:1000 /run/nginx.pid
 
-RUN mkdir -p /var/lib/redpanda/data /var/log/supervisor \
-    && chown -R redpanda:redpanda /var/lib/redpanda
+# ── 7. Copy configs ──────────────────────────────────────────────────────────
+COPY --chown=1000:1000 redpanda.yaml        /home/rpuser/redpanda.yaml
+COPY --chown=1000:1000 console.yaml         /home/rpuser/console.yaml
+COPY --chown=1000:1000 nginx.conf           /etc/nginx/nginx.conf
+COPY --chown=1000:1000 supervisord.conf     /etc/supervisor/conf.d/supervisord.conf
 
+USER 1000
 EXPOSE 7860
 CMD ["/usr/bin/supervisord", "-n", "-c", "/etc/supervisor/conf.d/supervisord.conf"]