Permissionless user

.gitignore

@@ -2,4 +2,7 @@
 polygons_processing/output.geojson
 detectree2/data/
 detectree2/models/
-detectree2/predictions/train_outputs
+detectree2/predictions/train_outputs
+
+.env/
+__pycache__/

Dockerfile

@@ -17,6 +17,15 @@ RUN apt-get install -t unstable -y  gdal-bin libgdal-dev
 
 RUN conda install -y python=3.10
 
+RUN useradd -m -u 1000 user
+
+USER user
+
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH
+
+WORKDIR $HOME/app
+
 RUN python -m pip install torchvision torch
 RUN python -m pip install git+https://github.com/facebookresearch/detectron2.git
 RUN python -m pip install torchvision torch rasterio
@@ -26,10 +35,15 @@ RUN python -m pip install requests
 
 RUN python -m pip install gradio
 
-COPY . .
+COPY --chown=user . $HOME/app
 
 ENV TORCH_HOME /tmp/torch
 ENV MPLCONFIGDIR /tmp/matplotlib
 
+RUN mkdir -m 700 -p /home/user/app/cache
+
+RUN mkdir -p /data
+
+RUN chmod 777 /data
 
 CMD ["python", "main.py"]