Run as user 1000

Dockerfile

@@ -2,12 +2,19 @@ FROM python:3.12-slim
 
 COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
-WORKDIR /app
-COPY uv.lock pyproject.toml ./
+RUN useradd -m -u 1000 user
+USER user
+
+ENV HOME=/home/user \
+	PATH=/home/user/.local/bin:$PATH
+
+WORKDIR $HOME/app
+
+COPY --chown=user uv.lock pyproject.toml ./
 RUN uv sync --locked
 
-COPY ./fngradio_various_api_mcp ./fngradio_various_api_mcp
+COPY --chown=user ./fngradio_various_api_mcp ./fngradio_various_api_mcp
 
 ENV PATH="/app/.venv/bin:$PATH"
 
-CMD ["python3", "-m", "fngradio_various_api_mcp"]
+CMD [".venv/bin/python3", "-m", "fngradio_various_api_mcp"]