Update Dockerfile

Dockerfile

@@ -1,6 +1,7 @@
 FROM python:3.10-slim
 
-# 1. Install System Dependencies (DITAMBAH CAIRO & PKG-CONFIG)
+# 1. Install System Dependencies & Build Tools
+USER root
 RUN apt-get update && apt-get install -y \
     git \
     curl \
@@ -11,55 +12,50 @@ RUN apt-get update && apt-get install -y \
     libcairo2-dev \
     pkg-config \
     python3-dev \
+    gcc \
     && rm -rf /var/lib/apt/lists/*
 
+# 2. Setup User & Environment
 RUN useradd -m -u 1000 user
-USER user
 ENV PATH="/home/user/.local/bin:$PATH"
-WORKDIR /app
+WORKDIR /home/user/app
 
-# --- CORE ARSENAL ---
+# --- INSTALL ARSENAL (USER SCOPE) ---
+USER user
 
 # [1] SHERLOCK
-RUN git clone https://github.com/sherlock-project/sherlock.git /home/user/sherlock
-RUN cd /home/user/sherlock && pip install .
+RUN git clone https://github.com/sherlock-project/sherlock.git /home/user/sherlock && \
+    cd /home/user/sherlock && pip install --user .
 
-# [2] MAIGRET (Sekarang bakal aman karena cairo sudah ada)
-RUN pip install maigret
+# [2] MAIGRET
+RUN pip install --user maigret
 
-# [3] HOLEHE
-RUN git clone https://github.com/megadose/holehe.git /home/user/holehe
-RUN cd /home/user/holehe && python3 setup.py install
+# [3] HOLEHE (FIXED PERMISSION)
+RUN git clone https://github.com/megadose/holehe.git /home/user/holehe && \
+    cd /home/user/holehe && pip install --user .
 
 # [4] PHONEINFOGA
-WORKDIR /home/user/phoneinfoga
-RUN curl -sSL https://raw.githubusercontent.com/sundowndev/phoneinfoga/master/support/install | bash
-ENV PATH="/home/user/phoneinfoga:$PATH"
+RUN mkdir -p /home/user/.local/bin && \
+    curl -sSL https://raw.githubusercontent.com/sundowndev/phoneinfoga/master/support/install | bash -s -- -b /home/user/.local/bin
 
 # [5] GHUNT
-RUN pip install ghunt
+RUN pip install --user ghunt
 
 # [6] THEHARVESTER
-RUN git clone https://github.com/laramies/theHarvester.git /home/user/theHarvester
-RUN cd /home/user/theHarvester && pip install -r requirements/base.txt
-
-# [7] RECON-NG
-RUN pip install recon-ng
-
-# [8] EXIFREAD
-RUN pip install ExifRead
+RUN git clone https://github.com/laramies/theHarvester.git /home/user/theHarvester && \
+    cd /home/user/theHarvester && pip install --user -r requirements/base.txt
 
-# [9] CLOUD-ENUMERATOR
-RUN git clone https://github.com/initstring/cloud_enum.git /home/user/cloud_enum
-RUN cd /home/user/cloud_enum && pip install -r requirements.txt
+# [7] RECON-NG, EXIFREAD, SOCIALSCAN
+RUN pip install --user recon-ng ExifRead socialscan
 
-# [10] SOCIALSCAN
-RUN pip install socialscan
+# [8] CLOUD-ENUMERATOR
+RUN git clone https://github.com/initstring/cloud_enum.git /home/user/cloud_enum && \
+    cd /home/user/cloud_enum && pip install --user -r requirements.txt
 
-# --- SYSTEM SETUP ---
+# --- APP SETUP ---
 WORKDIR /app
 COPY --chown=user . /app
-RUN pip install flask gunicorn requests aiohttp
+RUN pip install --user flask gunicorn requests aiohttp
 
 EXPOSE 7860
 CMD ["gunicorn", "--bind", "0.0.0.0:7860", "app:app"]