Dockerfile

# Builder stage
FROM python:3.10.0 as builder

RUN useradd -ms /bin/bash admin

WORKDIR /srv
RUN chown -R admin:admin /srv
RUN chmod 755 /srv



RUN apt-get update && \
    apt-get install -y --no-install-recommends \
    aria2 ffmpeg     libgl1-mesa-dev \
    libgles2-mesa-dev \
    libglu1-mesa-dev \
    build-essential \
    cmake \
    freeglut3-dev \
    libglfw3-dev \
    libglew-dev \
    libsdl2-dev \
    libjpeg-dev \
    libpng-dev \
    libfreetype6-dev \
    && rm -rf /var/lib/apt/lists/*

#copy requirements    
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt




# Create necessary directories and set permissions
RUN mkdir -p /home/admin/.local/share/BrokenSource/Broken \
    && mkdir -p /home/admin/.local/share/BrokenSource/DepthFlow/Config \
    && mkdir -p /tmp/Video \
    && chmod -R 777 /home/admin/.local /tmp/Video

# Create a startup script
RUN echo '#!/bin/bash\n\
    rm -rf /usr/local/lib/python3.10/site-packages/Workspace\n\
    mkdir -p /usr/local/lib/python3.10/site-packages/Workspace\n\
    ln -sf /home/admin/.local/share/BrokenSource/Broken /usr/local/lib/python3.10/site-packages/Workspace/Broken\n\
    ln -sf /home/admin/.local/share/BrokenSource/DepthFlow /usr/local/lib/python3.10/site-packages/Workspace/DepthFlow\n\
    uvicorn app:app --host 0.0.0.0 --port 7860\n'\
    > /app/start.sh && chmod +x ./start.sh



# Create a non-root user and give it sudo privileges
RUN useradd -m appuser \
    && mkdir -p /etc/sudoers.d \
    && echo "appuser ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/appuser \
    && chmod 0440 /etc/sudoers.d/appuser

# Switch to the non-root user
USER appuser



COPY --chown=appuser . /srv

# Command to run the application
CMD ["/app/start.sh"]
# Expose the server port
EXPOSE 7860