Dockerfile

# Use the base Docker image with necessary dependencies
FROM circulartextapp/spaceread as base

# Set the working directory to /app
WORKDIR /app

# Copy the current directory contents into the container at /app
COPY . /app

# Define the user ID in the environment variable USER_ID with a default value
ARG USER_ID=1000
ENV USER_ID=$USER_ID

# Check if the user already exists
RUN if id "$USER_ID" >/dev/null 2>&1; then \
      echo "User with ID $USER_ID already exists."; \
    else \
      useradd -m -u "$USER_ID" user; \
    fi

# Set appropriate permissions for the application directory
RUN chown -R user:user /app && chmod -R 755 /app

# Switch to the user for improved security
USER user

# Intermediate image with additional packages
FROM debian:bullseye-slim as packages

# Install su-exec using apt-get
RUN apt-get update && apt-get install -y su-exec && rm -rf /var/lib/apt/lists/*

# Final image
FROM base

# Copy su-exec from the packages image
COPY --from=packages /usr/sbin/su-exec /usr/sbin/su-exec

# Copy entrypoint.sh to /app
COPY entrypoint.sh /app/entrypoint.sh

# Change permissions using su-exec
RUN su-exec user chmod +x /app/entrypoint.sh

# Set the entrypoint script as executable
ENTRYPOINT ["/app/entrypoint.sh"]

# Default command to run if the user doesn't provide a command
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "7860", "--reload"]