install on user

Dockerfile

@@ -1,38 +1,39 @@
 FROM python:3.10
 
-# Install system dependencies
+# Install system deps
 RUN apt-get update && apt-get install -y libgl1-mesa-glx libglib2.0-0
 
-# Install Poetry
-RUN curl -sSL https://install.python-poetry.org | python3 -
+# Set an env so Poetry installs into /usr/local
+ENV POETRY_HOME="/usr/local/poetry"
 
-# Set Poetry path (ensures it's available in future RUN commands)
-ENV PATH="/root/.local/bin:$PATH"
+RUN curl -sSL https://install.python-poetry.org | python3 - --yes
 
-# Create a symlink so Poetry is accessible system-wide
-RUN ln -s /root/.local/bin/poetry /usr/local/bin/poetry
+# Add Poetry to the PATH
+ENV PATH="/usr/local/poetry/bin:$PATH"
 
-## (Optional) If you want to keep 'USER' for final container usage,
-# just do all installations as root FIRST, then switch user at the end.
-# But for a simpler approach in Docker, you can remain root entirely.
-
-FROM python:3.10
-
-# Install Poetry
-RUN curl -sSL https://install.python-poetry.org | python3 -
-
-# Set Poetry in PATH
-ENV PATH="/root/.local/bin:$PATH"
-
-# Make sure script is executable (usually it already is, but just to be safe):
-RUN chmod +x /root/.local/bin/poetry
+# Create a non-root user
+RUN useradd -m -u 1000 user
 
+# Use /code as working directory
 WORKDIR /code
 
+# Copy dependency files
 COPY pyproject.toml poetry.lock /code/
+
+# Install dependencies as root first
 RUN poetry install --no-root --no-interaction --no-ansi
 
+# Now copy the rest of the project
 COPY . /code
 
+# (Optional) Adjust ownership
+RUN chown -R user:user /code
+
+# Switch to the non-root user
+USER user
+
+# Expose port
 EXPOSE 7860
+
+# Run
 CMD ["poetry", "run", "uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "7860"]