server: update docker perms

Dockerfile

@@ -1,9 +1,22 @@
 FROM ghcr.io/astral-sh/uv:python3.12-bookworm-slim
 
+WORKDIR /app
+
+# Create a non-root user
+RUN useradd -m appuser
+
+# Copy application files
 COPY _server/main.py _server/main.py
 COPY polars/ polars/
 COPY duckdb/ duckdb/
 
+# Set proper ownership
+RUN chown -R appuser:appuser /app
+
+# Switch to non-root user
+USER appuser
+
+# Create virtual environment and install dependencies
 RUN uv venv
 RUN uv export --script _server/main.py | uv pip install -r -
 

_server/README.md

@@ -5,11 +5,14 @@ This folder contains server code for hosting marimo apps.
 ## Running the server
 
 ```bash
+cd _server
 uv run --no-project main.py
 ```
 
 ## Building a Docker image
 
+From the root directory, run:
+
 ```bash
 docker build -t marimo-learn .
 ```