Dockerfile

# Use an official Python runtime as a parent image
FROM python:3.10-slim-bullseye

# Set the working directory in the container to /app
WORKDIR /app

# Copy the current directory contents into the container at /app
COPY . /app

# Install system dependencies required for building sqlite3 and other operations
RUN apt-get update && \
    apt-get install -y --no-install-recommends git wget build-essential libsqlite3-dev && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

# Upgrade to a more recent SQLite version
RUN wget https://www.sqlite.org/2021/sqlite-autoconf-3360000.tar.gz && \
    tar xvfz sqlite-autoconf-3360000.tar.gz && \
    cd sqlite-autoconf-3360000 && \
    ./configure --prefix=/usr --disable-static CFLAGS="-DSQLITE_ENABLE_FTS3=1 -DSQLITE_ENABLE_COLUMN_METADATA=1 -DSQLITE_ENABLE_UNLOCK_NOTIFY=1 -DSQLITE_SECURE_DELETE=1 -DSQLITE_ENABLE_DBSTAT_VTAB=1 -DSQLITE_ENABLE_FTS3_TOKENIZER=1 -DSQLITE_ENABLE_FTS4=1 -DSQLITE_ENABLE_FTS5=1 -DSQLITE_ENABLE_JSON1=1 -DSQLITE_ENABLE_RTREE=1" && \
    make && \
    make install && \
    cd .. && \
    rm sqlite-autoconf-3360000.tar.gz && \
    rm -rf sqlite-autoconf-3360000

# Verify sqlite3 version system-wide
RUN sqlite3 --version

# Install Python dependencies
RUN pip install poetry gradio

# Create a non-root user and change ownership of the /app directory
RUN adduser --disabled-password --gecos '' myuser

# Change ownership and permissions before switching to myuser
RUN chown -R myuser:myuser /app && chmod -R 755 /app && \
    mkdir -p /app/.cache && chown myuser:myuser /app/.cache && \
    chmod 777 /tmp

# Switch to the non-root user
USER myuser

# Expose the port Gradio runs on
EXPOSE 7860

RUN chmod +x /app/start.sh

# Run the start script when the container launches
CMD ["/app/start.sh"]