Update Dockerfile

Dockerfile

@@ -1,16 +1,12 @@
-# Read the doc: https://huggingface.co/docs/hub/spaces-sdks-docker
-# you will also find guides on how best to write your Dockerfile
-
+# Use an official Python runtime as a parent image
 FROM python:3.9
 
-RUN useradd -m -u 1000 user
-USER user
-ENV PATH="/home/user/.local/bin:$PATH"
+# Set environment variables that don't depend on the user
+ENV PYTHONUNBUFFERED 1
+ENV PIP_NO_CACHE_DIR=1 
 
-WORKDIR /app
 # Install system dependencies required by OpenCV and other libraries
-# libgl1-mesa-glx and libglib2.0-0 are common for OpenCV headless
-# Added more libraries to ensure libGL.so.1 and other dependencies are present
+# These commands need to run as root
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
     libgl1-mesa-glx \
@@ -21,16 +17,37 @@ RUN apt-get update && \
     libsm6 \
     libxext6 \
     libxrender-dev \
-    # ffmpeg is useful for video processing if cv2 needs it for certain codecs,
-    # though cv2 often comes with its own ffmpeg bindings.
+    # ffmpeg is useful for video processing if cv2 needs it for certain codecs.
     # Add it if you encounter video format issues.
     # ffmpeg \ 
     && \
     apt-get clean && \
     rm -rf /var/lib/apt/lists/*
 
-COPY --chown=user ./requirements.txt requirements.txt
-RUN pip install --no-cache-dir --upgrade -r requirements.txt
+# Now, create and switch to the non-root user
+RUN useradd -m -u 1000 user
+USER user
+ENV PATH="/home/user/.local/bin:$PATH" # Set PATH for the non-root user
+
+# Set the working directory in the container (as the non-root user)
+WORKDIR /app
+
+# Copy the requirements file into the container at /app
+# Ensure the user owns this file after copying
+COPY --chown=user:user ./requirements.txt requirements.txt
+
+# Install any needed packages specified in requirements.txt
+# This will run as the non-root user, installing packages into the user's site-packages
+RUN pip install --no-cache-dir --upgrade pip && \
+    pip install --no-cache-dir -r requirements.txt
+
+# Copy the rest of the application code into the container at /app
+# Ensure the user owns these files
+COPY --chown=user:user . /app
+
+# Expose port (Hugging Face Spaces typically use 7860 for web apps)
+EXPOSE 7860
 
-COPY --chown=user . /app
+# Command to run the application using uvicorn
+# It will listen on all available network interfaces (0.0.0.0)
 CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]