Update Dockerfile

Dockerfile

@@ -1,8 +1,9 @@
 # Use a Python 3.10 base image with Debian Bookworm
 FROM python:3.10-bookworm
 
-# Set working directory
-WORKDIR /app
+# Set environment variables to avoid Python buffering and ensure non-interactive installs
+ENV PYTHONUNBUFFERED=1 \
+    DEBIAN_FRONTEND=noninteractive
 
 # Install system dependencies, including OpenBLAS, Git, and build tools
 RUN apt-get update && apt-get install -y \
@@ -12,8 +13,22 @@ RUN apt-get update && apt-get install -y \
     libopenblas-dev \
     && rm -rf /var/lib/apt/lists/*
 
+# Create a non-root user with configurable UID/GID
+ARG USER_ID=1000
+ARG GROUP_ID=1000
+RUN groupadd -g ${GROUP_ID} appuser && \
+    useradd -m -u ${USER_ID} -g ${GROUP_ID} -s /bin/bash appuser
+
+# Set up Hugging Face cache directory with proper permissions
+RUN mkdir -p /home/appuser/.cache/huggingface && \
+    chown -R appuser:appuser /home/appuser/.cache
+
+# Set working directory
+WORKDIR /app
+
 # Clone llama-cpp-python repository with submodules
-RUN git clone --recursive https://github.com/abetlen/llama-cpp-python.git /app/llama-cpp-python
+RUN git clone --recursive https://github.com/abetlen/llama-cpp-python.git /app/llama-cpp-python && \
+    chown -R appuser:appuser /app/llama-cpp-python
 
 # Set working directory to llama-cpp-python
 WORKDIR /app/llama-cpp-python
@@ -25,20 +40,21 @@ RUN git submodule update --remote vendor/llama.cpp
 ENV FORCE_CMAKE=1
 ENV CMAKE_ARGS="-DGGML_BLAS=ON -DGGML_BLAS_VENDOR=OpenBLAS -DLLAMA_CURL=OFF"
 
-# Install llama-cpp-python from source
-RUN pip install . --upgrade --force-reinstall --no-cache-dir
+# Install llama-cpp-python from source as appuser
+USER appuser
+RUN pip install . --user --upgrade --force-reinstall --no-cache-dir
 
 # Copy your application code
-COPY app.py /app/
+COPY --chown=appuser:appuser app.py /app/
 
-# Install additional Python dependencies for your app
-RUN pip install gradio huggingface_hub
+# Install additional Python dependencies for your app as appuser
+RUN pip install --user gradio huggingface_hub
 
 # Set working directory for the application
 WORKDIR /app
 
-# Expose port for Gradio (default is 7860)
+# Expose port for Gradio
 EXPOSE 7860
 
-# Command to run your application
+# Run the application as appuser
 CMD ["python", "app.py"]