Update Dockerfile

Dockerfile

@@ -1,30 +1,51 @@
 FROM ubuntu:25.04
 
-RUN apt-get update && apt-get install -y \
+# Set DEBIAN_FRONTEND to avoid interactive prompts during package installation
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
     python3 \
     python3-pip \
     ca-certificates \
+    curl \
     && apt-get clean \
     && rm -rf /var/lib/apt/lists/*
 
 RUN pip3 install --no-cache-dir --break-system-packages huggingface_hub huggingface_hub[cli]
 
-WORKDIR /app
+RUN addgroup --gid 1001 appgroup && \
+    adduser --uid 1001 --gid 1001 --disabled-password --gecos '' appuser
 
-RUN apt-get update && apt-get install -y curl && apt-get clean && rm -rf /var/lib/apt/lists/*
+RUN mkdir /app && chown appuser:appgroup /app
 
-EXPOSE 7860
+USER appuser
+
+ENV PATH=/home/appuser/.local/bin:$PATH \
+    HOME=/home/appuser
+
+WORKDIR /app
+
+COPY --chown=appuser:appgroup . .
 
 RUN echo '#!/bin/bash\n\
+set -e\n\
+\n\
 if [ -z "$BINARY_URL" ]; then\n\
   echo "Error: BINARY_URL environment variable is required"\n\
   exit 1\n\
 fi\n\
 \n\
-echo "Downloading binary from: $BINARY_URL"\n\
-curl -L -o /app/bin "$BINARY_URL" || { echo "Failed to download binary"; exit 1; }\n\
-chmod +x /app/bin\n\
+echo "Downloading binary from: $BINARY_URL to ./bin"\n\
+# Use relative path for output file within WORKDIR
+curl -fL -o ./bin "$BINARY_URL" || { echo "Failed to download binary"; exit 1; }\n\
+\n\
+echo "Making binary executable: ./bin"\n\
+chmod +x ./bin\n\
 \n\
-exec /app/bin\n' > /app/startup.sh && chmod +x /app/startup.sh
+echo "Executing binary: ./bin"\n\
+# Execute using relative path
+exec ./bin\n' > ./startup.sh && chmod +x ./startup.sh
+
+EXPOSE 7860
 
-ENTRYPOINT ["/app/startup.sh"]
+ENTRYPOINT ["./startup.sh"]