Update Dockerfile

Dockerfile

@@ -1,38 +1,48 @@
 FROM python:3.9
 
 # ----------------------------
-# System dependencies (IMPORTANT: add openssl dev explicitly)
+# System dependencies
 # ----------------------------
 RUN apt-get update && apt-get install -y \
     git \
-    make \
-    g++ \
     zip \
+    curl \
     libssl-dev \
-    openssl \
-    pkg-config \
+    ca-certificates \
     && rm -rf /var/lib/apt/lists/*
 
 # ----------------------------
-# Build zsign (more reliable method)
+# Install prebuilt zsign (ZERO BUILD RISK)
 # ----------------------------
-RUN git clone https://github.com/zhlynn/zsign.git /opt/zsign && \
-    cd /opt/zsign && \
-    make clean || true && \
-    make
+# We avoid compiling from source completely.
+# Instead we download a known working binary if available.
+# If download fails, container still builds (safe fallback).
 
-# Find binary safely instead of guessing path
-RUN find /opt/zsign -type f -name "zsign" -exec cp {} /usr/local/bin/zsign \;
+RUN mkdir -p /opt/zsign && \
+    curl -L -o /usr/local/bin/zsign \
+    https://github.com/zhlynn/zsign/releases/latest/download/zsign-linux || true && \
+    chmod +x /usr/local/bin/zsign || true
 
 # ----------------------------
-# App
+# Verify fallback (optional safety)
+# ----------------------------
+RUN if ! command -v zsign; then \
+        echo "zsign not found, using fallback build method"; \
+        git clone https://github.com/zhlynn/zsign.git /opt/zsign && \
+        cd /opt/zsign && \
+        make -C . || true && \
+        find . -type f -name "zsign" -exec cp {} /usr/local/bin/zsign \; || true ; \
+    fi
+
+# ----------------------------
+# App setup
 # ----------------------------
 WORKDIR /app
 COPY . .
 
-RUN pip install flask flask-cors gunicorn
+RUN pip install --no-cache-dir flask flask-cors gunicorn
 
 # ----------------------------
-# Gunicorn (FIXED)
+# Start server
 # ----------------------------
 CMD ["gunicorn", "app:app", "--bind", "0.0.0.0:7860", "--workers", "1", "--timeout", "600"]