Update Dockerfile

Dockerfile

@@ -9,6 +9,13 @@ ENV POETRY_VERSION=1.8.4 \
     POETRY_CACHE_DIR=/tmp/poetry_cache \
     PYTHONDONTWRITEBYTECODE=1
 
+# Create non-root user first
+RUN useradd -m -u 1000 user && \
+    apt-get update && \
+    apt-get install -y sudo && \
+    usermod -aG sudo user && \
+    echo "user ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
+
 # Install system dependencies
 RUN apt-get update && apt-get install -y \
     curl \
@@ -22,7 +29,6 @@ RUN apt-get update && apt-get install -y \
     npm \
     postgresql \
     postgresql-contrib \
-    sudo \
     && rm -rf /var/lib/apt/lists/* \
     && pip install --no-cache-dir "poetry==${POETRY_VERSION}" \
     && mkdir -p /var/lib/postgresql/data \
@@ -34,6 +40,9 @@ RUN /usr/lib/postgresql/15/bin/initdb -D /var/lib/postgresql/data && \
     echo "host all  all    0.0.0.0/0  md5" >> /var/lib/postgresql/data/pg_hba.conf && \
     echo "listen_addresses='*'" >> /var/lib/postgresql/data/postgresql.conf
 
+# Switch back to user for remaining operations
+USER user
+
 # Pull official images
 FROM langgenius/dify-web:latest AS web
 FROM langgenius/dify-api:latest AS api
@@ -41,11 +50,6 @@ FROM langgenius/dify-api:latest AS api
 # Final stage (continuing from line 32)
 FROM base
 
-# Create non-root user and add to sudo group
-RUN useradd -m -u 1000 user && \
-    usermod -aG sudo user && \
-    echo "user ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
-
 # Set up directory structure
 WORKDIR /app
 RUN mkdir -p api web /data/storage && \
@@ -93,7 +97,6 @@ ENV FLASK_APP=app.py \
     PYTHONPATH=/app/api \
     STORAGE_PATH=/data/storage
 
-USER user
 EXPOSE 7860 3000
 
 # Create startup script with connection retries