File size: 1,790 Bytes
10b70a9 111ba62 a0a228b 5e1192b e6ba6db 0f0f717 a0a228b ed52b73 264ac69 a0a228b 0f0f717 10b70a9 ed52b73 264ac69 a0a228b 5e1192b 10b70a9 a0a228b 10b70a9 a0a228b 5afbe18 a0a228b e6ba6db |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 |
FROM python:3.10-slim
# Set environment variables
ENV PYTHONUNBUFFERED=1
ENV DEBIAN_FRONTEND=noninteractive
# Install system dependencies
RUN apt-get update && \
apt-get install -y --no-install-recommends \
ffmpeg \
libsm6 \
libxext6 \
fontconfig \
imagemagick && \
apt-get clean && \
rm -rf /var/lib/apt/lists/*
# Create directory for custom fonts and copy your font file(s)
RUN mkdir -p /usr/local/share/fonts/truetype/mycustomfonts
COPY assets/fonts/arial.ttf /usr/local/share/fonts/truetype/mycustomfonts/arial.ttf
# Rebuild font cache AFTER copying fonts
RUN fc-cache -f -s -v
# Create a non-root user and group
ARG APP_USER_UID=1000
ARG APP_USER_GID=1000
RUN groupadd --gid $APP_USER_GID appgroup && \
useradd --uid $APP_USER_UID --gid appgroup --shell /bin/bash --create-home appuser
# Set the working directory
WORKDIR /home/appuser/app
# Copy requirements.txt first
COPY requirements.txt ./
# Pip install as root (or default user before USER appuser)
RUN python -m pip install --no-cache-dir --upgrade pip
RUN python -m pip install --no-cache-dir -r requirements.txt
# Now copy the rest of the application code
COPY . .
# Ensure the entire app directory and its contents are owned by appuser
# and explicitly create the output directory as root and then chown it.
RUN mkdir -p /home/appuser/app/temp_cinegen_media && \
chown -R appuser:appgroup /home/appuser/app
# Switch to the non-root user
USER appuser
# Ensure user's local bin is in PATH for pip-installed executables
ENV PATH="/home/appuser/.local/bin:${PATH}"
# Expose Streamlit's default port
EXPOSE 8501
# Command to run Streamlit
CMD ["streamlit", "run", "app.py", "--server.headless=true", "--server.port=8501", "--server.fileWatcherType=none"] |