FROM ccr-2vdh3abv-pub.cnc.bj.baidubce.com/paddlepaddle/paddleocr-genai-vllm-server:latest-offline

# Switch to root to have permissions for directory setup
USER root

# Use existing user 'paddleocr' with UID 1000 
ENV USER=paddleocr \
    HOME=/home/paddleocr \
    PATH="/home/paddleocr/.local/bin:$PATH" \
    PYTHONUNBUFFERED=1

WORKDIR /app

# Ensure the paddleocr user owns the application directory
RUN chown paddleocr:paddleocr /app

# Switch to the non-root user for runtime security
USER paddleocr

EXPOSE 7860

CMD ["paddleocr", "genai_server", \
     "--model_name", "PaddleOCR-VL-0.9B", \
     "--host", "0.0.0.0", \
     "--port", "7860", \
     "--backend", "vllm"]