Update Dockerfile

Dockerfile

@@ -1,14 +1,38 @@
-# read the doc: https://huggingface.co/docs/hub/spaces-sdks-docker
-# you will also find guides on how best to write your Dockerfile
+# Stage 1: Building Environment
+FROM python:3.9-alpine AS builder
 
-FROM python:3.9
+ARG BUILD_USERNAME=builder
+ARG BUILD_UID=1000
+ARG BUILD_GID=1000
 
-WORKDIR /code
+RUN apk add --no-cache --update --virtual .build-deps \
+        gcc musl-dev openssl-dev cargo \
+    && pip install --no-cache-dir --upgrade pip \
+    && pip install --no-cache-dir --disable-pip-version-check wheel \
+    && mkdir -p /runner \
+    && chown -R "${BUILD_UID}:${BUILD_GID}" /runner \
+    && echo "Flask==2.1.1\ntransformers==4.23.0" > /runner/requirements.builder.txt \
+    && pip install --no-cache-dir --exists-action i --target /runner --disable-pip-version-check -r /runner/requirements.builder.txt \
+    && apk del .build-deps
 
-COPY ./requirements.txt /code/requirements.txt
+# Stage 2: Production Environment
+FROM python:3.9-alpine
 
-RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt
+ENV HOME=/app
 
-COPY . .
+RUN addgroup --system --gid 1000 app && adduser --system --uid 1000 --gid 1000 --gecos '' app
+WORKDIR ${HOME}
 
-CMD ["python", "main.py", "--host", "0.0.0.0", "--port", "7860"]
+COPY --chown=${BUILD_UID}:${BUILD_GID} --from=builder /runner /app
+
+COPY --chown=app:app . .
+
+RUN pip install --no-cache-dir --user --upgrade pip \
+    && pip install --no-cache-dir --user -r /app/requirements.txt \
+    && apk del --purge gcc musl-dev openssl-dev cargo
+
+USER app
+
+EXPOSE 7860
+
+CMD ["python", "main.py", "--host", "0.0.0.0", "--port", "7860"]