Update Dockerfile

Dockerfile

@@ -1,35 +1,43 @@
-# Use the official Python image 
+# Use the official Python image
 FROM python:3.9-slim
 
 # Set the working directory
 WORKDIR /app
 
-# Create a writable cache directory for Hugging Face
-RUN mkdir -p /workspace/huggingface_cache && \
-    chmod -R 777 /workspace/huggingface_cache
+# Create a non-root user
+RUN useradd -m appuser
 
-# Set environment variable for Hugging Face cache
-ENV HF_HOME=/workspace/huggingface_cache
+# Create writable directories for Hugging Face and Triton cache
+RUN mkdir -p /workspace/huggingface_cache /home/appuser/.triton && \
+    chmod -R 777 /workspace/huggingface_cache /home/appuser/.triton
 
-# Create and set permissions for the /.triton directory to avoid permission issues
-RUN mkdir -p /root/.triton && chmod -R 777 /root/.triton
-ENV TRITON_CACHE_DIR=/root/.triton
+# Set environment variables
+ENV HF_HOME=/workspace/huggingface_cache
+ENV TRITON_CACHE_DIR=/home/appuser/.triton
 
 # Install system dependencies
-RUN apt-get update && apt-get install -y git
+RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*
+
+# Set umask to ensure proper file permissions
+RUN umask 002
 
 # Copy the requirements file into the image
 COPY requirements.txt requirements.txt
 
-# Install any needed packages specified in requirements.txt
+# Install required packages
 RUN pip install --no-cache-dir -r requirements.txt
 
-# Copy the rest of your application code into the image
+# Copy the rest of the application code
 COPY . .
 
+# Change ownership to non-root user
+RUN chown -R appuser:appuser /app /workspace/huggingface_cache /home/appuser/.triton
+
+# Switch to non-root user
+USER appuser
+
 # Expose the port your application will run on
 EXPOSE 7860
 
-# Command to run your application
+# Run the application
 CMD ["python", "app.py"]
-