refactor dockerfile 3

Dockerfile

@@ -1,59 +1,41 @@
-# ────────────────────────────────
-# 🔨 Stage 1: Build dependencies
-# ────────────────────────────────
 FROM python:3.11.11-slim AS build
 
-# ⏱️ Set environment variables for pip optimization during build
 ENV PIP_DEFAULT_TIMEOUT=100 \
     PYTHONUNBUFFERED=1 \
     PIP_DISABLE_PIP_VERSION_CHECK=1 \
-    PIP_NO_CACHE_DIR=1 \
-    PATH="/home/user/.local/bin:$PATH"
-
-# 🔧 Install system dependencies needed to build Python packages
-RUN apt-get update && apt-get install -y \
-    build-essential \
-    libjpeg-dev \
-    zlib1g-dev \
-    && rm -rf /var/lib/apt/lists/*
-
-# 👤 Create non-root user
-RUN useradd -m -u 1000 user
-USER user
+    PIP_NO_CACHE_DIR=1
 
-# 📂 Set working directory
 WORKDIR /app
 
-# 📦 Install Python dependencies to user space
-COPY --chown=user requirements.txt .
-RUN pip install --no-cache-dir --user -r requirements.txt
+COPY requirements.txt .
 
-# ────────────────────────────────
-# 🏁 Stage 2: Final image (runtime only)
-# ────────────────────────────────
-FROM python:3.11.11-slim
+RUN pip install --upgrade pip && pip wheel --no-cache-dir --wheel-dir /wheels -r requirements.txt
 
-# 🔧 Install runtime libraries (build tools tidak dibutuhkan)
-RUN apt-get update && apt-get install -y \
-    libjpeg-dev \
-    zlib1g-dev \
-    && rm -rf /var/lib/apt/lists/*
+FROM python:3.11.11-slim AS final
 
-# 👤 Create same user again in runtime
-RUN useradd -m -u 1000 user
-USER user
+ENV PATH="/home/appuser/.local/bin:$PATH"
 
-# 📂 Set runtime env
-ENV PATH="/home/user/.local/bin:$PATH"
+RUN set -ex \
+    && addgroup --system --gid 1001 appgroup \
+    && adduser --system --uid 1001 --gid 1001 --home /home/appuser appuser \
+    && apt-get update \
+    && apt-get upgrade -y \
+    && apt-get install -y libjpeg-dev zlib1g-dev \
+    && apt-get autoremove -y \
+    && apt-get clean -y \
+    && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app
 
-# 🚚 Copy only installed packages from build stage
-COPY --from=build /home/user/.local /home/user/.local
+COPY --from=build /wheels /wheels
+COPY requirements.txt .
 
-# 📦 Copy app code
-COPY --chown=user . .
+RUN pip install --no-cache-dir --no-warn-script-location --no-index --find-links=/wheels -r requirements.txt
+
+COPY . .
+
+USER appuser
 
-# 🌐 Expose port and launch
 EXPOSE 7860
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]
+