Upload Dockerfile.txt

Dockerfile.txt

@@ -0,0 +1,97 @@
+# ============================================================
+# Pro Linux Workspace — Dockerfile
+# Optimised for Hugging Face Spaces (port 7860)
+# ============================================================
+FROM ubuntu:22.04
+
+ENV DEBIAN_FRONTEND=noninteractive \
+    LANG=en_US.UTF-8 \
+    LANGUAGE=en_US:en \
+    LC_ALL=en_US.UTF-8 \
+    HOME=/home/user \
+    PATH="/home/user/.local/bin:/usr/local/bin:/usr/bin:/bin" \
+    PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1
+
+# ── Layer 1: Base system packages ────────────────────────────
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    # Locale
+    locales tzdata \
+    # Network & TLS
+    ca-certificates curl wget gnupg2 \
+    # Shell & Terminal
+    zsh tmux \
+    # Editors
+    nano \
+    # VCS
+    git \
+    # Monitoring
+    htop \
+    # Python
+    python3 python3-pip python3-dev \
+    # Privilege escalation
+    sudo \
+    # Archive tools
+    unzip zip \
+    && locale-gen en_US.UTF-8 \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+
+# ── Layer 2: Caddy (reverse proxy) ───────────────────────────
+RUN curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' \
+        | gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg \
+    && curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' \
+        | tee /etc/apt/sources.list.d/caddy-stable.list \
+    && apt-get update \
+    && apt-get install -y --no-install-recommends caddy \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+# ── Layer 3: Filebrowser ─────────────────────────────────────
+RUN curl -fsSL https://raw.githubusercontent.com/filebrowser/get/master/get.sh | bash \
+    && filebrowser version
+
+# ── Layer 4: Code-server (VS Code) ───────────────────────────
+RUN curl -fsSL https://code-server.dev/install.sh \
+        | sh -s -- --method=standalone --prefix=/usr/local \
+    && code-server --version
+
+# ── Layer 5: ttyd (prebuilt binary — no build deps needed) ───
+RUN TTYD_VERSION=$(curl -fsSL https://api.github.com/repos/tsl0922/ttyd/releases/latest \
+        | grep '"tag_name"' | sed 's/.*"tag_name": "\(.*\)".*/\1/') \
+    && echo "Installing ttyd ${TTYD_VERSION}" \
+    && curl -fsSL \
+        "https://github.com/tsl0922/ttyd/releases/download/${TTYD_VERSION}/ttyd.x86_64" \
+        -o /usr/local/bin/ttyd \
+    && chmod +x /usr/local/bin/ttyd \
+    && ttyd --version
+
+# ── Layer 6: Non-root user ───────────────────────────────────
+RUN useradd -m -s /bin/zsh -u 1000 user \
+    && echo "user ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers \
+    && mkdir -p \
+        /home/user/Drive \
+        /home/user/app \
+        /home/user/.config \
+        /home/user/.local/bin \
+    && chown -R user:user /home/user
+
+USER user
+WORKDIR /home/user/app
+
+# ── Layer 7: Python packages (as user) ───────────────────────
+COPY --chown=user:user requirements.txt /home/user/app/requirements.txt
+
+RUN python3 -m pip install --no-cache-dir --upgrade pip \
+    && python3 -m pip install --no-cache-dir -r /home/user/app/requirements.txt
+
+# ── Layer 8: Application files ───────────────────────────────
+COPY --chown=user:user . /home/user/app/
+
+# ── Healthcheck ──────────────────────────────────────────────
+HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
+    CMD curl -f http://127.0.0.1:7860/ || exit 1
+
+EXPOSE 7860
+
+CMD ["python3", "-u", "app.py"]