Update Dockerfile

Dockerfile

@@ -9,18 +9,12 @@ ARG INSTALL_CHANNEL=pytorch
 # Automatically set by buildx
 ARG TARGETPLATFORM
 
-
-#ENV HOME=/home/user \
-#	PATH=/home/user/.local/bin:/opt/conda/bin:$PATH
+RUN useradd -m -u 1000 user
+USER user
+WORKDIR /app
 
 ENV PATH=/opt/conda/bin:$PATH
 
-RUN mkdir -p .cache
-#RUN mkdir -p data
-# I'm not sure how to allow later python files used here to write to .cache without making it world-writeable.
-RUN chmod 777 -R .cache
-#RUN chmod 777 -R data
-
 RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
         build-essential \
         ca-certificates \
@@ -51,29 +45,14 @@ RUN case ${TARGETPLATFORM} in \
     esac && \
     /opt/conda/bin/conda clean -ya
 
-COPY ./requirements.txt requirements.txt
 RUN pip install -r requirements.txt
-
 RUN git clone -b energy_star_dev https://github.com/huggingface/optimum-benchmark.git /optimum-benchmark && cd optimum-benchmark && pip install -e .
 
-COPY ./*.txt /
-COPY ./.cache /.cache
-COPY ./entrypoint.sh /entrypoint.sh
-COPY ./pause_space.py /pause_space.py
-COPY ./parse_requests.py /parse_requests.py
-COPY ./process_runs.py /process_runs.py
-COPY ./app/runs /app/runs
-
-RUN chmod 777 *.py
-RUN chmod 777 -R /app/runs
-RUN chmod 777 -R /.cache
-RUN chmod 777 /attempts.txt
-RUN chmod 777 /failed_attempts.txt
-RUN chmod +x /entrypoint.sh
-
 # Expose the secret token at buildtime and use its value as git remote URL
 RUN --mount=type=secret,id=BULK_ENERGY_TOKEN,mode=0444,required=true \
  git init && \
  git remote add origin $(cat /run/secrets/BULK_ENERGY_TOKEN)
 
-CMD ["uvicorn", "app", "--host", "0.0.0.0", "--port", "7860"]
+
+COPY --chown=user . /app
+CMD ["uvicorn", "app:app", "--host", "0.0.0.0", "--port", "7860"]