Spaces:
Running
Running
| # syntax=docker/dockerfile:1 | |
| # -------------------------------------------------------- | |
| # Stage 1: Build Python dependencies in an isolated venv | |
| # -------------------------------------------------------- | |
| FROM python:3.11-slim AS python-builder | |
| ENV VIRTUAL_ENV=/opt/venv | |
| ENV PATH="$VIRTUAL_ENV/bin:$PATH" | |
| RUN apt-get update && apt-get install -y --no-install-recommends \ | |
| build-essential \ | |
| libmagic1 \ | |
| libxml2-dev \ | |
| libxslt1-dev \ | |
| pkg-config \ | |
| --no-install-recommends && \ | |
| rm -rf /var/lib/apt/lists/* | |
| RUN python -m venv "$VIRTUAL_ENV" | |
| COPY backend/requirements.txt ./requirements.txt | |
| RUN pip install --no-cache-dir --upgrade pip setuptools wheel && \ | |
| pip install --no-cache-dir -r requirements.txt && \ | |
| python -m spacy download en_core_web_sm && \ | |
| pip cache purge && \ | |
| find /opt/venv -type d -name "__pycache__" -exec rm -rf {} + && \ | |
| find /opt/venv -type f -name "*.pyc" -delete | |
| # -------------------------------------------------------- | |
| # Stage 2: Runtime image with only backend code and dependencies | |
| # -------------------------------------------------------- | |
| FROM python:3.11-slim | |
| ENV VIRTUAL_ENV=/opt/venv | |
| ENV PATH="$VIRTUAL_ENV/bin:$PATH" | |
| ENV PYTHONUNBUFFERED=1 | |
| ENV HF_HOME=/app/data/huggingface | |
| ENV TRANSFORMERS_CACHE=/app/data/huggingface | |
| # HuggingFace Spaces runs as user 1000 | |
| RUN useradd -m -u 1000 appuser | |
| WORKDIR /app | |
| # Runtime-only system packages | |
| RUN apt-get update && apt-get install -y --no-install-recommends \ | |
| curl \ | |
| libmagic1 \ | |
| libxml2 \ | |
| libxslt1.1 \ | |
| --no-install-recommends && \ | |
| rm -rf /var/lib/apt/lists/* | |
| COPY --from=python-builder /opt/venv /opt/venv | |
| # Copy backend code | |
| COPY backend/app ./app | |
| COPY backend/__init__.py ./backend/__init__.py | |
| # Create data directories with proper permissions | |
| RUN mkdir -p /app/data/uploads /app/data/chroma_db /app/data/graphs /app/data/huggingface && \ | |
| chown -R appuser:appuser /app | |
| # Switch to non-root user | |
| USER appuser | |
| # HuggingFace Spaces requires port 7860 | |
| EXPOSE 7860 | |
| CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "7860"] | |