Update Dockerfile

Dockerfile

@@ -1,41 +1,59 @@
-FROM python:3.13.5-slim
-
-# Avoid interactive prompts during build
-ENV DEBIAN_FRONTEND=noninteractive
+FROM python:3.13.5-slim AS builder
 
-# Create non-root user for better security
-ARG APP_USER=appuser
-ARG APP_HOME=/home/${APP_USER}
+ENV DEBIAN_FRONTEND=noninteractive \
+    PYTHONUNBUFFERED=1
 
-RUN apt-get update && apt-get install -y \
-    build-essential \
-    curl \
-    git \
-    ca-certificates \
+# Install build dependencies in one RUN to keep image layers small
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        build-essential \
+        python3-dev \
+        gcc \
+        curl \
+        git \
+        ca-certificates \
     && rm -rf /var/lib/apt/lists/*
 
-# Create app user and working dir early so we can chown files later
-RUN useradd --create-home --home-dir ${APP_HOME} --shell /usr/sbin/nologin ${APP_USER}
+WORKDIR /wheels
 
-WORKDIR /app
+# Copy requirements and build wheels to /wheels
+COPY requirements.txt .
+RUN pip3 wheel --no-cache-dir -r requirements.txt -w /wheels
 
-# Copy project files
-COPY requirements.txt ./
-COPY src/ ./src/
+# ---------------- final image ----------------
+FROM python:3.13.5-slim
 
-# Configure Hugging Face / transformers cache inside container to avoid permission issues
-ENV HF_HOME=/app/.cache/huggingface/transformers \
-    HUGGINGFACE_HUB_CACHE=/app/.cache/huggingface/hub \
+ENV DEBIAN_FRONTEND=noninteractive \
+    PYTHONUNBUFFERED=1 \
+    APP_USER=appuser \
+    APP_HOME=/home/appuser \
+    APP_DIR=/app \
+    # Hugging Face cache dirs inside container (avoid /root/.cache permissions issues)
     HF_HOME=/app/.cache/huggingface \
-    XDG_CACHE_HOME=/app/.cache \
-    HOME=${APP_HOME}
+    HUGGINGFACE_HUB_CACHE=/app/.cache/huggingface/hub \
+    TRANSFORMERS_CACHE=/app/.cache/huggingface/transformers \
+    XDG_CACHE_HOME=/app/.cache
 
-# Create cache + logs directories and ensure the app user owns them
-RUN mkdir -p /app/.cache/huggingface/transformers /app/.cache/huggingface/hub /app/src/logs && \
-    chown -R ${APP_USER}:${APP_USER} /app/.cache /app/src/logs /app/src
+# Install minimal runtime deps and cleanup in one RUN
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        curl \
+        ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create non-root user and app dirs
+RUN useradd --create-home --home-dir ${APP_HOME} --shell /usr/sbin/nologin ${APP_USER} \
+    && mkdir -p ${APP_DIR} ${APP_HOME} /app/.cache/huggingface/transformers /app/.cache/huggingface/hub /app/src/logs \
+    && chown -R ${APP_USER}:${APP_USER} ${APP_DIR} ${APP_HOME} /app/.cache /app/src/logs
+
+WORKDIR ${APP_DIR}
+
+# Copy project source and wheels from builder
+COPY --chown=${APP_USER}:${APP_USER} src/ ./src/
+COPY requirements.txt ./
+COPY --from=builder /wheels /wheels
 
-# Install Python deps
-RUN pip3 install --no-cache-dir -r requirements.txt
+# Install Python dependencies from built wheels (faster, reproducible)
+RUN pip3 install --no-cache-dir --no-index --find-links=/wheels -r requirements.txt \
+    && rm -rf /wheels
 
 EXPOSE 8501
 
@@ -45,4 +63,7 @@ HEALTHCHECK --interval=30s --timeout=5s --start-period=5s --retries=3 \
 # Run as non-root user
 USER ${APP_USER}
 
+# NOTE:
+# - The entrypoint expects your Streamlit app at src/streamlit_app.py.
+# - If your file is named src/streamlitapp.py (no underscore), update the ENTRYPOINT accordingly.
 ENTRYPOINT ["streamlit", "run", "src/streamlit_app.py", "--server.port=8501", "--server.address=0.0.0.0"]