back to user

Dockerfile

@@ -10,30 +10,43 @@ RUN apt-get update && apt-get install -y \
 # Set up uv
 COPY --from=ghcr.io/astral-sh/uv:0.4.20 /uv /bin/uv
 
-# Set up directories
-RUN mkdir -p /app/.marimo /app/.config /mnt/workspace
-
-ENV PATH="/root/.local/bin:$PATH"
+# Create user first
+RUN useradd -m -u 1000 user
+
+# Create directories with proper permissions
+RUN mkdir -p /home/user/.marimo && \
+    mkdir -p /home/user/.config && \
+    mkdir -p /mnt/workspace && \
+    chown -R user:user /home/user/.marimo && \
+    chown -R user:user /home/user/.config && \
+    chown -R user:user /mnt/workspace
+
+ENV PATH="/home/user/.local/bin:$PATH"
 ENV UV_SYSTEM_PYTHON=1
-ENV HOME=/app
-ENV XDG_CONFIG_HOME=/app/.config
-ENV MARIMO_CONFIG_DIR=/app/.marimo
+ENV HOME=/home/user
+ENV XDG_CONFIG_HOME=/home/user/.config
+ENV MARIMO_CONFIG_DIR=/home/user/.marimo
 
-# Clone trieve
+# Clone trieve as user
+USER user
 RUN git clone https://github.com/devflowinc/trieve /mnt/workspace && \
     cd /mnt/workspace && \
     git checkout e65889a13715e8833e7cccfe0168b57c1fc966cc
 
+# Switch back to root for remaining setup
+USER root
+
 # Set up marimo
 WORKDIR /app
-COPY requirements.txt .
+COPY --chown=user ./requirements.txt requirements.txt
 RUN pip install --break-system-packages -r requirements.txt
-COPY . .
+COPY --chown=user . /app
 
-# Copy start script
-COPY start.sh /start.sh
+# Copy and set up start script
+COPY --chown=user start.sh /start.sh
 RUN chmod +x /start.sh
 
 EXPOSE 7860
 
+# Start both processes using the script
 CMD ["/start.sh"]