Update Dockerfile

Dockerfile

@@ -1,22 +1,22 @@
 FROM python:3.11-slim
 
-# libgomp1 is needed by faiss-cpu on slim images
 RUN apt-get update && apt-get install -y --no-install-recommends libgomp1 \
     && rm -rf /var/lib/apt/lists/*
 
-WORKDIR /app
-
-COPY requirements.txt .
-RUN pip install --no-cache-dir -r requirements.txt
-
-COPY app.py .
-
-ENV HF_HOME=/tmp/hf \
+RUN useradd -m -u 1000 user
+USER user
+ENV HOME=/home/user \
+    PATH=/home/user/.local/bin:$PATH \
+    HF_HOME=/tmp/hf \
     STREAMLIT_BROWSER_GATHER_USAGE_STATS=false
+WORKDIR $HOME/app
 
-EXPOSE 7860
+RUN pip install --no-cache-dir --user torch --index-url https://download.pytorch.org/whl/cpu
+COPY --chown=user requirements.txt .
+RUN pip install --no-cache-dir --user -r requirements.txt
+COPY --chown=user app.py .
 
-# XSRF/CORS are disabled because file uploads fail inside the Hugging Face Spaces iframe otherwise
+EXPOSE 7860
 CMD ["streamlit", "run", "app.py", \
      "--server.port=7860", \
      "--server.address=0.0.0.0", \