FROM ghcr.io/astral-sh/uv:python3.12-bookworm-slim # Copy requirements file COPY ./requirements.txt /code/requirements.txt # Install dependencies using uv (while still root) RUN uv pip install --system --no-cache-dir -r /code/requirements.txt # Set up a new user named "user" with user ID 1000 RUN useradd -m -u 1000 user # Create data directory with proper permissions RUN mkdir -p /data && chown -R user:user /data RUN chown -R user:user /code # Switch to the "user" user USER user # Set home to the user's home directory ENV HOME=/home/user \ PATH=/home/user/.local/bin:$PATH # Set the working directory WORKDIR /code # Copy the rest of the application COPY --chown=user:user . . CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860", "--log-config=log_conf.yaml"]