Update Dockerfile

Dockerfile

@@ -3,52 +3,57 @@
 # 1. Base image
 FROM python:3.9-slim
 
-# 2. Create non-root user for security
+# 2. Install curl for HEALTHCHECK
+RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/*
+
+# 3. Create non-root user for security
 RUN useradd -m -u 1000 appuser
 
-# 3. Set working directory
+# 4. Set working directory
 WORKDIR /app
 
-# 4. Set HOME to /app to avoid writing to root
+# 5. Set HOME to /app to avoid writing to root
 ENV HOME=/app
 
-# 5. Environment variables for writable cache/config dirs
+# 6. Environment variables for writable cache/config dirs and PATH
 ENV STREAMLIT_CONFIG_DIR=/app/.streamlit \
     TRANSFORMERS_CACHE=/app/.cache/huggingface/hub \
     HF_HOME=/app/.cache/huggingface \
     XDG_CACHE_HOME=/app/.cache \
-    STREAMLIT_HOME=/app/.cache/streamlit
+    STREAMLIT_HOME=/app/.cache/streamlit \
+    PATH=/app/.local/bin:$PATH
 
-# 6. Create cache directories with correct permissions
+# 7. Create cache directories with correct permissions
 RUN mkdir -p /app/.streamlit \
     && mkdir -p /app/.cache/huggingface/hub \
     && mkdir -p /app/.cache/streamlit \
     && chmod -R 755 /app/.cache /app/.streamlit \
     && chown -R appuser:appuser /app
 
-# 7. Switch to non-root user
-USER appuser
-
-# 8. Copy in dependency file and install
+# 8. Copy requirements as root to ensure permissions
 COPY requirements.txt .
+
+# 9. Install dependencies as appuser
+USER appuser
 RUN pip install --no-cache-dir -r requirements.txt
 
-# 9. Copy your source app code and Streamlit config
-COPY src/ ./src
+# 10. Copy source code as appuser
+COPY --chown=appuser:appuser src/ ./src
 
-# 10. Move .streamlit/config.toml to the correct location
+# 11. Move .streamlit/config.toml to the correct location with proper permissions
 RUN if [ -f /app/src/.streamlit/config.toml ]; then \
-        mv /app/src/.streamlit/config.toml /app/.streamlit/config.toml; \
+        mv /app/src/.streamlit/config.toml /app/.streamlit/config.toml && \
+        chmod 644 /app/.streamlit/config.toml; \
     fi
 
-# 11. Expose Streamlit default port
+# 12. Expose Streamlit default port
 EXPOSE 8501
 
-# 12. Healthcheck to verify app is running
+# 13. Healthcheck to verify app is running
 HEALTHCHECK --interval=30s --timeout=3s \
     CMD curl -f http://localhost:8501/healthz || exit 1
 
-# 13. Launch Streamlit pointing to src/app.py
+# 14. Launch Streamlit pointing to src/app.py
 CMD ["streamlit", "run", "src/app.py", \
      "--server.port=8501", \
      "--server.address=0.0.0.0"]