File size: 1,790 Bytes
10b70a9
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
111ba62
a0a228b
5e1192b
 
 
e6ba6db
0f0f717
a0a228b
ed52b73
264ac69
a0a228b
 
0f0f717
10b70a9
ed52b73
 
264ac69
a0a228b
 
5e1192b
10b70a9
 
a0a228b
 
 
 
 
10b70a9
 
a0a228b
 
5afbe18
a0a228b
 
e6ba6db
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
FROM python:3.10-slim

# Set environment variables
ENV PYTHONUNBUFFERED=1
ENV DEBIAN_FRONTEND=noninteractive

# Install system dependencies
RUN apt-get update && \
    apt-get install -y --no-install-recommends \
        ffmpeg \
        libsm6 \
        libxext6 \
        fontconfig \
        imagemagick && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

# Create directory for custom fonts and copy your font file(s)
RUN mkdir -p /usr/local/share/fonts/truetype/mycustomfonts
COPY assets/fonts/arial.ttf /usr/local/share/fonts/truetype/mycustomfonts/arial.ttf 

# Rebuild font cache AFTER copying fonts
RUN fc-cache -f -s -v

# Create a non-root user and group
ARG APP_USER_UID=1000
ARG APP_USER_GID=1000
RUN groupadd --gid $APP_USER_GID appgroup && \
    useradd --uid $APP_USER_UID --gid appgroup --shell /bin/bash --create-home appuser

# Set the working directory
WORKDIR /home/appuser/app

# Copy requirements.txt first
COPY requirements.txt ./ 

# Pip install as root (or default user before USER appuser)
RUN python -m pip install --no-cache-dir --upgrade pip
RUN python -m pip install --no-cache-dir -r requirements.txt

# Now copy the rest of the application code
COPY . .

# Ensure the entire app directory and its contents are owned by appuser
# and explicitly create the output directory as root and then chown it.
RUN mkdir -p /home/appuser/app/temp_cinegen_media && \
    chown -R appuser:appgroup /home/appuser/app

# Switch to the non-root user
USER appuser
# Ensure user's local bin is in PATH for pip-installed executables
ENV PATH="/home/appuser/.local/bin:${PATH}" 

# Expose Streamlit's default port
EXPOSE 8501

# Command to run Streamlit
CMD ["streamlit", "run", "app.py", "--server.headless=true", "--server.port=8501", "--server.fileWatcherType=none"]