Update Dockerfile

Dockerfile

@@ -1,16 +1,14 @@
 # Use Python base image
 FROM python:3.12.2
 
+# Add a new user but do not switch yet
 RUN useradd -m -u 1000 user
-USER user
-ENV PATH="/home/user/.local/bin:$PATH"
-COPY --chown=user . /app/
 
-# Prevent timezone prompt during package installation
+# Set non-interactive mode for package installation
 ENV DEBIAN_FRONTEND=noninteractive
 ENV TZ=UTC
 
-# Install system dependencies
+# Install system dependencies (RUN as root)
 RUN apt-get update && apt-get install -y \
     ffmpeg \
     git \
@@ -21,15 +19,19 @@ RUN apt-get update && apt-get install -y \
     libssl-dev \
     && rm -rf /var/lib/apt/lists/*
 
-# Install Rust for setuptools-rust
-RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
-ENV PATH="/root/.cargo/bin:${PATH}"
+# Switch to non-root user AFTER installing system dependencies
+USER user
+ENV PATH="/home/user/.local/bin:$PATH"
 
 # Set working directory
 WORKDIR /app
 
-# Copy application code
-COPY . /app
+# Copy application code with correct ownership
+COPY --chown=user . /app/
+
+# Install Rust for setuptools-rust
+RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
+ENV PATH="/home/user/.cargo/bin:${PATH}"
 
 # Install Python dependencies
 RUN pip install --no-cache-dir -U pip setuptools wheel
@@ -37,7 +39,6 @@ RUN pip install --no-cache-dir setuptools-rust
 RUN pip install torch torchvision torchaudio --index-url https://download.pytorch.org/whl/cpu
 RUN pip install --no-cache-dir -r requirements.txt
 
-
 # Environment variables for PyTorch and Whisper
 ENV TORCH_DEVICE="cuda"
 ENV FORCE_FP32="false"
@@ -46,4 +47,4 @@ ENV FORCE_FP32="false"
 EXPOSE 7860
 
 # Start the FastAPI application
-CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860", "--workers", "5"]
+CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860", "--workers", "5"]