Permissions

Dockerfile

@@ -1,53 +1,30 @@
 FROM agenticlabs/lsproxy:0.1.1
 
-# Install Python, pip, and git
+# Combine all apt operations and user/directory setup in one layer
 RUN apt-get update && apt-get install -y \
-    procps \
     python3 \
     python3-pip \
-    python3-venv \
     git \
-    && rm -rf /var/lib/apt/lists/*
+    && rm -rf /var/lib/apt/lists/* \
+    && useradd -m -u 1000 appuser \
+    && mkdir -p /mnt/workspace /usr/local/cargo \
+    && chown -R appuser:appuser /mnt/workspace /usr/local/cargo
 
-# Create user and all necessary directories
-RUN useradd -u 1000 -m appuser && \
-    mkdir -p /app /mnt/workspace && \
-    # Create rust-analyzer directories
-    mkdir -p /home/appuser/.cache/rust-analyzer && \
-    mkdir -p /home/appuser/.config/rust-analyzer && \
-    # Create marimo directories
-    mkdir -p /home/appuser/.cache/marimo && \
-    mkdir -p /home/appuser/.config/marimo && \
-    mkdir -p /home/appuser/.local/share/marimo
-
-# Set up Python environment
-RUN python3 -m venv /opt/venv
-ENV PATH="/opt/venv/bin:$PATH"
-
-ENV RUST_LOG=trace
-
-# Set up marimo
 WORKDIR /app
-COPY requirements.txt requirements.txt
-COPY tutorial.py tutorial.py
+COPY requirements.txt tutorial.py ./
 RUN pip install --break-system-packages -r requirements.txt
 
-# Clone workspace
+EXPOSE 7860
+
+# Combine git operations and file ownership changes in one layer
+USER appuser
 RUN git clone https://github.com/devflowinc/trieve /mnt/workspace && \
     cd /mnt/workspace && \
     git checkout e65889a13715e8833e7cccfe0168b57c1fc966cc
 
-# Copy start script
+USER root
 COPY start.sh /start.sh
+RUN chmod +x /start.sh && chown -R appuser:appuser /mnt/workspace /start.sh /app
 
-# Set permissions for user 1000
-RUN chown -R appuser:appuser /app /home/appuser && \
-    chown -R appuser:appuser /mnt/workspace && \
-    chown -R appuser:appuser /usr/local/rustup
-
-# Set home directory for XDG base directories
-ENV HOME=/home/appuser
-
-EXPOSE 7860
-
-CMD ["/start.sh"]
+USER appuser
+CMD ["/start.sh"]