Ordering command in dokerfile

Dockerfile

@@ -1,10 +1,10 @@
 FROM python:3.10.9
 
-
+# Set working directory early for clean pathing
 WORKDIR /code
 
+# Copy requirements and install them as root (good practice)
 COPY ./requirements.txt /code/requirements.txt
-
 RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt
 
 # Hugging Face 캐시 디렉토리 설정 및 생성 (HF_HOME 고려)
@@ -16,19 +16,23 @@ RUN mkdir -p /tmp/huggingface_cache /tmp/huggingface_home
 ENV MPLCONFIGDIR=/tmp/matplotlib_cache
 RUN mkdir -p /tmp/matplotlib_cache
 
-# 사용자 생성 및 소유자 변경
-RUN adduser --uid 1000 user
+# OpenGL 라이브러리 설치 (opencv-python 설치 전에)
+RUN apt-get update && apt-get install -y libgl1
 
-USER user
+# 사용자 생성 (UID 1000은 일반적인 비-root 사용자 ID)
+RUN adduser --uid 1000 user
 
+# !!! IMPORTANT: Change ownership of cache directories as root BEFORE switching user !!!
 RUN chown -R user:user /tmp/huggingface_cache /tmp/huggingface_home /tmp/matplotlib_cache
 
-# OpenGL 라이브러리 설치 (opencv-python 설치 전에)
-RUN apt-get update && apt-get install -y libgl1
-
-WORKDIR $HOME/app
+# Switch to the non-root user for subsequent commands and application runtime
+USER user
 
-COPY --chown=user . $HOME/app
+# Copy application code after switching user if you want it owned by 'user'
+# Or copy it before and then chown it. This approach is usually cleaner.
+# $HOME will now resolve to /home/user inside the container
+COPY --chown=user . /home/user/app
+WORKDIR /home/user/app
 
 
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]