Dockerfile

# Use an official Python runtime as a parent image
FROM python:3.9

# Install system dependencies required by OpenCV
RUN apt-get update && apt-get install -y \
    libgl1-mesa-glx \
 && rm -rf /var/lib/apt/lists/*

# Create a non-root user with a specified user ID
RUN useradd -m -u 1000 user

# Set environment variables for the non-root user
ENV HOME=/home/user \
    PATH=/home/user/.local/bin:$PATH \
    NAME=EduConnect \
    EC_ADMIN_PWD='$2b$12$zybxm7XMoGCVV3ovNDcXt.r2QJUhtj7miYfEfuBw9UGqViTIRFg72'

# Set the non-root user's home directory as the working directory
WORKDIR $HOME

# Copy the application files into the non-root user's home directory, ensuring the user owns the copied files
COPY --chown=user:user . ./app

# Change to the non-root user
USER user

# Set the working directory to where the application files are
WORKDIR $HOME/app

# Install any needed packages specified in requirements.txt
# As the non-root user, ensure packages are installed to the user's home directory
RUN pip install --no-cache-dir --user -r requirements.txt

# Make port 7860 available to the world outside this container
EXPOSE 7860

# Indicate that a volume is expected at /home/user/data
# This directory is intended for persistent storage
VOLUME /home/user/data

# Run the FastAPI application using Uvicorn, binding to port 7860
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "7860"]