Dockerfile

FROM python:3.8

WORKDIR /code

# install poetry
RUN curl -sSL https://install.python-poetry.org | POETRY_VERSION=1.4.2 python3 -
ENV PATH="${PATH}:/root/.local/bin"
# copy poetry configs and lock file
COPY pyproject.toml poetry.lock ./

# Install dependencies
RUN poetry config virtualenvs.create false && poetry install --no-root --no-interaction

# Set up a new user named "user" with user ID 1000
RUN useradd -m -u 1000 user
# Switch to the "user" user
USER user
# Set home to the user's home directory
ENV HOME=/home/user \
    PATH=/home/user/.local/bin:$PATH

# Set the working directory to the user's home directory
WORKDIR $HOME/app

# Copy the current directory contents into the container at $HOME/app setting the owner to the user
COPY --chown=user . $HOME/app

# Get secret EXAMPLE and output it to /test at buildtime
RUN --mount=type=secret,id=PINECONE_API_ENV,mode=0444,required=true
RUN --mount=type=secret,id=INDEX_NAME,mode=0444,required=true
RUN --mount=type=secret,id=PINECONE_API_KEY,mode=0444,required=true

EXPOSE 7860

CMD ["python", "./movies-search-demo/app.py"]