Update Dockerfile

Dockerfile

@@ -1,39 +1,38 @@
+# 1. Base Image
 FROM python:3.11-slim
 
-# Environment
-ENV PYTHONDONTWRITEBYTECODE=1
-ENV PYTHONUNBUFFERED=1
+# 2. Set environment variables
+ENV PYTHONDONTWRITEBYTECODE 1
+ENV PYTHONUNBUFFERED 1
 ENV STREAMLIT_SERVER_HEADLESS=true
+# --- THE DEFINITIVE FIX IS HERE ---
+# Tell Hugging Face to use a cache directory INSIDE the user's home folder
+ENV HF_HOME=/home/user/.cache/huggingface
+# --- END FIX ---
 
-# Redirect Hugging Face / Streamlit / Matplotlib caches to writable dirs
-ENV HF_HOME=/app/hf_cache
-ENV TRANSFORMERS_CACHE=/app/hf_cache
-ENV STREAMLIT_CACHE_DIR=/app/.streamlit_cache
-ENV MPLCONFIGDIR=/app/matplotlib
-
-# System dependencies (needed for OpenCV, etc.)
+# 3. Install System Dependencies
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    libgl1 curl \
+    git git-lfs libgl1 \
     && rm -rf /var/lib/apt/lists/*
 
-# Workdir
-WORKDIR /app
+# 4. Create and switch to a non-root user
+RUN useradd -m -u 1000 user
+USER user
+WORKDIR /home/user/app
 
-# Install dependencies
-COPY requirements.txt .
+# 5. Copy and install Python requirements
+COPY --chown=user:user requirements.txt packages.txt ./
 RUN pip install --no-cache-dir -r requirements.txt
 
-# Copy source
-COPY . .
-
-# Create cache dirs so we don’t get permission denied at runtime
-RUN mkdir -p /app/hf_cache /app/.streamlit_cache /app/matplotlib /app/logs
-
-# Hugging Face expects port 7860
-EXPOSE 7860
+# 6. Pre-download the model's configuration files (as the correct user)
+#    This is a small download and ensures the cache directory is created.
+RUN python -c "from transformers import AutoImageProcessor; AutoImageProcessor.from_pretrained('google/efficientnet-b2')"
 
-# Healthcheck (use the right port!)
-HEALTHCHECK CMD curl --fail http://localhost:7860/_stcore/health || exit 1
+# 7. Copy application code and model artifacts
+COPY --chown=user:user . .
+RUN git lfs pull
 
-# Launch Streamlit on 7860
-ENTRYPOINT ["python", "-m", "streamlit", "run", "app.py", "--server.port=7860", "--server.address=0.0.0.0"]
+# 8. Expose port and run the app
+EXPOSE 8501
+HEALTHCHECK CMD curl --fail http://localhost:8501/_stcore/health
+ENTRYPOINT ["python", "-m", "streamlit", "run", "app.py", "--server.port=8501", "--server.address=0.0.0.0"]