Update Dockerfile

Dockerfile

@@ -1,23 +1,48 @@
-# Use a minimal base image with Python 3.9 installed
-FROM python:3.9
+# Use minimal Python 3.9 base (keeps with your requirement)
+FROM python:3.9-slim
+
+# set a consistent locale (optional but sometimes avoids warnings)
+ENV DEBIAN_FRONTEND=noninteractive
 
-# Set the working directory inside the container to /app
 WORKDIR /app
 
-# Copy all files from the current directory on the host to the container's /app directory
-COPY . .
+# Install minimal system deps needed for building some packages (xgboost sometimes needs libgomp)
+# If you know you don't need build tools, you can remove build-essential.
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+      build-essential \
+      libgomp1 \
+      ca-certificates \
+      && rm -rf /var/lib/apt/lists/*
+
+# Copy project files first to leverage Docker cache for pip installs when requirements don't change
+COPY . /app
+
+# Upgrade pip & setuptools first (important for picking up newer wheels)
+RUN python -m pip install --upgrade pip setuptools wheel
 
-# Install Python dependencies listed in requirements.txt
-RUN pip3 install -r requirements.txt
+# Install Python deps (use the Python 3.9 compatible requirements file)
+# Use --no-cache-dir to keep image small
+RUN pip install --no-cache-dir -r requirements-py39.txt
+
+# Create an unprivileged user and move app into their home with ownership
+RUN useradd -m -u 1000 user \
+ && mkdir -p /home/user/app \
+ && chown -R user:user /home/user/app /app
 
-RUN useradd -m -u 1000 user
 USER user
 ENV HOME=/home/user \
-	PATH=/home/user/.local/bin:$PATH
+    PATH=/home/user/.local/bin:$PATH
 
+# Use the home app directory for runtime; copy project into it using appropriate ownership already set
 WORKDIR $HOME/app
 
-COPY --chown=user . $HOME/app
+# Ensure the app files are available in the user's app dir (you may already have them in /app)
+# If your COPY above already put files into /app and you want them in /home/user/app:
+RUN cp -r /app/* $HOME/app/ || true
+
+# Expose Streamlit port (optional metadata)
+EXPOSE 8501
 
-# Define the command to run the Streamlit app on port "8501" and make it accessible externally
+# Run streamlit (disable XSRF if you intentionally want that; be cautious in production)
 CMD ["streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0", "--server.enableXsrfProtection=false"]