add user

Dockerfile

@@ -15,10 +15,26 @@ RUN apt update && apt install -y \
     # We will install Node.js and npm using nvm or a direct method, not apt's potentially older versions
     && rm -rf /var/lib/apt/lists/*
 
+# Create a new group (optional, but good practice)
+RUN groupadd --system appuser
+
+# Create a new user and add them to the 'appuser' group
+# -m: Create the user's home directory
+# -s /bin/bash: Set the default shell for the user
+# -g appuser: Set the primary group for the user
+RUN useradd --system -m -s /bin/bash -g appuser appuser
+
+# Switch to the new user
+USER appuser
+
+# Set environment variables for the user (optional)
+ENV HOME=/home/appuser
+
+
 # Install nvm (Node Version Manager) and then use it to install Node.js and npm
 # This ensures a clean and controlled Node.js/npm environment
-RUN mkdir -p /nvm
 ENV NVM_DIR /nvm
+RUN mkdir -p $NVM_DIR
 ENV NODE_VERSION 20.17.0
 # Specify a compatible Node.js version, matching the earlier error message's requirement
 
@@ -36,10 +52,6 @@ RUN curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.7/install.sh | b
 # Verify Node.js and npm versions
 RUN . "$NVM_DIR/nvm.sh" &&  node -v && npm -v
 
-# Install Python packages
-RUN pip install --no-cache-dir \
-    huggingface_hub \
-    datasets
 
 # Set all cache directories to /tmp (writable)
 ENV HF_HOME=/tmp/hf_cache

start_with_sync.sh

@@ -22,6 +22,15 @@ echo "Data directory: $DATA_DIR"
 echo "HF Repository: $HF_STORAGE_REPO"
 echo "HF Cache: $HF_HOME"
 
+curl -LsSf https://astral.sh/uv/install.sh | sh
+source $HOME/.local/bin/env
+
+uv venv /tmp/.venv
+source /tmp/.venv/bin/activate
+uv pip install --no-cache-dir \
+    huggingface_hub \
+    datasets
+
 # Create all necessary directories
 mkdir -p "$DATA_DIR" "$HF_HOME" "$STATIC_DIR" "$UPLOAD_DIR"
 
@@ -117,11 +126,7 @@ git clone https://github.com/waxz/gemini-cli-openai /tmp/gemini-cli-openai
 
 git clone https://github.com/snailyp/gemini-balance.git /tmp/gemini-balance
 
-curl -LsSf https://astral.sh/uv/install.sh | sh
-source $HOME/.local/bin/env
 
-uv venv /tmp/.venv
-source /tmp/.venv/bin/activate
 uv pip install -r /tmp/gemini-balance/requirements.txt