Update Dockerfile

Dockerfile

@@ -2,11 +2,12 @@ FROM python:3.9-slim
 
 WORKDIR /app
 
-# Set HOME to a writable location
+# Set up environment variables for writable directories
 ENV HOME=/app
-ENV MPLCONFIGDIR=/app/.config/matplotlib
-ENV TORCH_HOME=/app/.torch
-ENV STREAMLIT_HOME=/app/.streamlit
+ENV MPLCONFIGDIR=/tmp/.matplotlib
+ENV TORCH_HOME=/tmp/.torch
+ENV STREAMLIT_HOME=/tmp/.streamlit
+ENV PYTHONPATH=$PYTHONPATH:/app
 
 # Install system dependencies
 RUN apt-get update && apt-get install -y \
@@ -25,8 +26,9 @@ RUN apt-get update && apt-get install -y \
     zlib1g-dev \
     && rm -rf /var/lib/apt/lists/*
 
-# Create required writable folders
-RUN mkdir -p /app/.torch /app/.streamlit /app/.config/matplotlib
+# Create temporary directories with proper permissions
+RUN mkdir -p /tmp/.torch /tmp/.streamlit /tmp/.matplotlib \
+    && chmod 777 /tmp/.torch /tmp/.streamlit /tmp/.matplotlib
 
 # Copy project files
 COPY requirements.txt ./
@@ -39,8 +41,23 @@ RUN pip install --upgrade pip && \
     pip install torchvision==0.15.2 && \
     pip install 'git+https://github.com/facebookresearch/detectron2.git'
 
+# Set proper ownership for application files
+RUN chown -R 1000:1000 /app
+
+# Expose Streamlit port
 EXPOSE 8501
 
+# Add a healthcheck
 HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health || exit 1
 
-ENTRYPOINT ["streamlit", "run", "src/streamlit_app.py", "--server.port=8501", "--server.address=0.0.0.0"]
+# Run as non-root user for better security
+USER 1000
+
+# Set up Streamlit configuration
+RUN mkdir -p /tmp/.streamlit && echo '\
+[general]\n\
+email = ""\n\
+' > /tmp/.streamlit/credentials.toml
+
+# Command to run the app
+ENTRYPOINT ["streamlit", "run", "src/streamlit_app.py", "--server.port=8501", "--server.address=0.0.0.0"]