Update Dockerfile

Dockerfile

@@ -6,8 +6,13 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     gnupg \
     curl \
     ca-certificates \
+    sudo \
     && rm -rf /var/lib/apt/lists/*
 
+# Create a non-root user
+RUN useradd -ms /bin/bash mlflowuser && \
+    echo "mlflowuser ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/mlflowuser
+
 # Install MinIO server and client
 RUN wget https://dl.min.io/server/minio/release/linux-amd64/minio \
     && chmod +x minio \
@@ -33,26 +38,36 @@ ENV AWS_SECRET_ACCESS_KEY=minioadmin
 ENV MLFLOW_S3_ENDPOINT_URL=http://localhost:9000
 ENV BUCKET_NAME=mlflow
 
-# Create directories
-RUN mkdir -p /tmp/minio-data /tmp/mlflow-data
+# Create directories and set permissions
+RUN mkdir -p /tmp/minio /tmp/mlflow && \
+    chown -R mlflowuser:mlflowuser /tmp && \
+    chmod -R 777 /tmp
+
+# Create a home directory for mc config
+RUN mkdir -p /home/mlflowuser/.mc && \
+    chown -R mlflowuser:mlflowuser /home/mlflowuser
+
+# Switch to non-root user
+USER mlflowuser
+WORKDIR /home/mlflowuser
 
 # Create a setup script
 RUN echo '#!/bin/bash \n\
-minio server /tmp/minio-data --console-address ":9001" & \n\
+minio server /tmp/minio --console-address ":9001" & \n\
 sleep 5 \n\
 # Configure MinIO client and create bucket \n\
 mc alias set myminio http://localhost:9000 ${MINIO_ROOT_USER} ${MINIO_ROOT_PASSWORD} \n\
 mc mb myminio/${BUCKET_NAME} --ignore-existing \n\
 # Start MLflow server with MinIO as artifact store \n\
 mlflow server \
---backend-store-uri /tmp/mlflow-data \
+--backend-store-uri /tmp/mlflow \
 --default-artifact-root s3://${BUCKET_NAME}/ \
 --host 0.0.0.0 \
 --port 7860 \
-' > /start.sh && chmod +x /start.sh
+' > /home/mlflowuser/start.sh && chmod +x /home/mlflowuser/start.sh
 
 # Expose ports
 EXPOSE 7860 9000 9001
 
 # Start services
-CMD ["/start.sh"]
+CMD ["/home/mlflowuser/start.sh"]