Update Dockerfile

Dockerfile

@@ -1,5 +1,5 @@
 # =====================================================================
-# 1. CORE OPERATING SYSTEM ENGINE
+# 1. LINUX ENGINE & ENVIRONMENT CONFIGURATION
 # =====================================================================
 FROM python:3.10-slim
 
@@ -7,27 +7,39 @@ ENV PYTHONDONTWRITEBYTECODE=1
 ENV PYTHONUNBUFFERED=1
 ENV HOME=/home/user
 ENV PYTHONPATH=/home/user/app
-# Forces Playwright to store browser engines in the accessible user workspace
+# Locks Playwright browser binaries completely inside the application scope
 ENV PLAYWRIGHT_BROWSERS_PATH=/home/user/app/.cache/ms-playwright
 
-# Configure Hugging Face standard non-root user context
+# Pre-render Hugging Face user context
 RUN useradd -m -u 1000 user
 WORKDIR /home/user/app
 
 # =====================================================================
-# 2. SYSTEM DEPENDENCIES & PLAYWRIGHT SUB-SYSTEMS (Root Clearance)
+# 2. MANUAL CHROMIUM SYSTEM DEPENDENCIES (Bypasses Playwright Sudo Script)
 # =====================================================================
-# 🔥 THE FIX: apt-get update must run right alongside playwright install 
-# so the Linux package manager can find the required browser libraries.
 RUN apt-get update && apt-get install -y --no-install-recommends \
     curl \
     git \
-    && pip install --no-cache-dir playwright \
-    && playwright install --with-deps chromium \
+    libglib2.0-0 \
+    libnss3 \
+    libatk1.0-0 \
+    libatk-bridge2.0-0 \
+    libcups2 \
+    libdrm2 \
+    libxkbcommon0 \
+    libxcomposite1 \
+    libxdamage1 \
+    libxext6 \
+    libxfixes3 \
+    libxrandr2 \
+    libgbm1 \
+    libpango-1.0-0 \
+    libcairo2 \
+    libasound2 \
     && rm -rf /var/lib/apt/lists/*
 
 # =====================================================================
-# 3. PYTHON PACKAGES PIPELINE
+# 3. PYTHON PACKAGES & PLAYWRIGHT BROWSER PIPELINE
 # =====================================================================
 COPY --chown=user:user Server/requirements.txt* ./Server/
 COPY --chown=user:user requirements.txt* ./
@@ -36,19 +48,23 @@ RUN pip install --no-cache-dir --upgrade pip && \
     if [ -f "Server/requirements.txt" ]; then pip install --no-cache-dir -r Server/requirements.txt; \
     else pip install --no-cache-dir -r requirements.txt; fi
 
+# Clean installation of the browser package without script overrides
+RUN pip install --no-cache-dir playwright && \
+    playwright install chromium
+
 # =====================================================================
-# 4. CODE DEPLOYMENT & PERMISSION ALIGNMENT
+# 4. CODE INGESTION & ISOLATED PERMISSION FIX
 # =====================================================================
 COPY --chown=user:user . .
 
-# Grant full permission control to the execution user profile
-RUN chown -R user:user /home/user
+# 🔥 THE CRITICAL ONE-SHOT FIX: Apply permissions ONLY to /app. 
+# Do not touch the global /home/user path to avoid sandbox blocks.
+RUN chown -R user:user /home/user/app
 
-# Securely drop down to Hugging Face sandbox privileges
 USER user
 EXPOSE 7860
 
 # =====================================================================
-# 5. CONTAINER BOOT GATEWAY
+# 5. CORE SERVICE RUNTIME BOOT
 # =====================================================================
 CMD ["uvicorn", "Server.main:app", "--host", "0.0.0.0", "--port", "7860"]