Fix: Set user permissions in Dockerfile for HF Spaces

Dockerfile

@@ -29,22 +29,40 @@ RUN apt-get update && \
 
 RUN update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.10 1
 
-WORKDIR /app
+# Set up a new user named "user" with user ID 1000
+RUN useradd -m -u 1000 user
 
-COPY requirements.txt .
+# Set home to the user's home directory
+ENV HOME=/home/user \
+	PATH=/home/user/.local/bin:$PATH
+
+# Set the working directory to the user's home directory
+WORKDIR $HOME/app
+
+# Try and run pip command after setting the user to avoid permission issues with Python
+# Copy requirements first and install dependencies as root, then switch user
+COPY --chown=user requirements.txt .
 
 RUN python3 -m venv /opt/mineru_venv && \
     . /opt/mineru_venv/bin/activate && \
     pip install --upgrade pip && \
     pip install -r requirements.txt
 
-# Download model + setup config
-RUN wget https://github.com/opendatalab/MinerU/raw/master/scripts/download_models_hf.py -O download_models.py && \
-    . /opt/mineru_venv/bin/activate && \
+# Download model + setup config (run as user)
+USER user
+RUN . /opt/mineru_venv/bin/activate && \
+    wget https://github.com/opendatalab/MinerU/raw/master/scripts/download_models_hf.py -O download_models.py && \
     python3 download_models.py && \
-    wget https://github.com/opendatalab/MinerU/raw/master/magic-pdf.template.json -O /root/magic-pdf.json && \
-    sed -i 's|"device": "cpu"|"device": "cpu"|g' /root/magic-pdf.json
+    wget https://github.com/opendatalab/MinerU/raw/master/magic-pdf.template.json -O $HOME/magic-pdf.json && \
+    sed -i 's|"device": "cpu"|"device": "cpu"|g' $HOME/magic-pdf.json
+
+# Copy the rest of the application code as the user
+COPY --chown=user . $HOME/app
+
+# Create output directories and set permissions (ensure this happens after WORKDIR and USER)
+RUN mkdir -p $HOME/app/output/images && chmod -R 755 $HOME/app/output
 
-COPY app.py .
+# Switch back to user before running the app
+USER user
 
 CMD ["/opt/mineru_venv/bin/uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]