Fix Hugging Face runtime directory permissions

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.11-slim
 
 RUN useradd -m -u 1000 user
 
@@ -18,18 +18,23 @@ RUN pip install --no-cache-dir -r requirements.txt
 
 COPY --chown=user . $HOME/app
 
+RUN mkdir -p /tmp/graphrag/uploads /tmp/graphrag/processed /tmp/graphrag/qdrant /tmp/graphrag/evaluation
+RUN chown -R user:user /tmp/graphrag
+RUN chown -R user:user $HOME/app
+
 USER user
 
 ENV PORT=7860
+
 ENV LLM_PROVIDER=huggingface
 ENV ENABLE_LOCAL_LLM=false
 ENV HF_INFERENCE_MODEL=google/flan-t5-base
 ENV HF_TIMEOUT_SECONDS=60
 
-ENV UPLOAD_DIR=data/uploads
-ENV PROCESSED_DIR=data/processed
-ENV QDRANT_LOCAL_PATH=data/qdrant
-ENV EVALUATION_DIR=data/evaluation
+ENV UPLOAD_DIR=/tmp/graphrag/uploads
+ENV PROCESSED_DIR=/tmp/graphrag/processed
+ENV QDRANT_LOCAL_PATH=/tmp/graphrag/qdrant
+ENV EVALUATION_DIR=/tmp/graphrag/evaluation
 
 EXPOSE 7860
 

app/core/config.py

@@ -128,7 +128,28 @@ class Settings:
     ENABLE_STATIC_ASSETS: bool = get_bool_env("ENABLE_STATIC_ASSETS", True)
 
     def ensure_directories(self) -> None:
-        self.UPLOAD_DIR.mkdir(parents=True, exist_ok=True)
+        directories = [
+            self.UPLOAD_DIR,
+            self.PROCESSED_DIR,
+            self.QDRANT_LOCAL_PATH,
+            self.EVALUATION_DIR
+        ]
+
+        try:
+            for directory in directories:
+                directory.mkdir(parents=True, exist_ok=True)
+
+        except PermissionError:
+            fallback_base = Path("/tmp/graphrag")
+            fallback_dirs = [
+                fallback_base / "uploads",
+                fallback_base / "processed",
+                fallback_base / "qdrant",
+                fallback_base / "evaluation"
+            ]
+
+            for directory in fallback_dirs:
+                directory.mkdir(parents=True, exist_ok=True)
         self.PROCESSED_DIR.mkdir(parents=True, exist_ok=True)
         self.QDRANT_LOCAL_PATH.mkdir(parents=True, exist_ok=True)
         self.EVALUATION_DIR.mkdir(parents=True, exist_ok=True)

scripts/patch_config_permission.py

@@ -0,0 +1,42 @@
+from pathlib import Path
+import re
+
+path = Path("app/core/config.py")
+text = path.read_text(encoding="utf-8")
+
+pattern = r'''    def ensure_directories\(self\) -> None:
+(?:        .+\n)+?'''
+
+new_block = '''    def ensure_directories(self) -> None:
+        directories = [
+            self.UPLOAD_DIR,
+            self.PROCESSED_DIR,
+            self.QDRANT_LOCAL_PATH,
+            self.EVALUATION_DIR
+        ]
+
+        try:
+            for directory in directories:
+                directory.mkdir(parents=True, exist_ok=True)
+
+        except PermissionError:
+            fallback_base = Path("/tmp/graphrag")
+            fallback_dirs = [
+                fallback_base / "uploads",
+                fallback_base / "processed",
+                fallback_base / "qdrant",
+                fallback_base / "evaluation"
+            ]
+
+            for directory in fallback_dirs:
+                directory.mkdir(parents=True, exist_ok=True)
+'''
+
+match = re.search(pattern, text)
+
+if not match:
+    print("Could not auto-patch ensure_directories. Please send config.py if this happens.")
+else:
+    text = text[:match.start()] + new_block + text[match.end():]
+    path.write_text(text, encoding="utf-8")
+    print("config.py permission fallback patched successfully.")