node updated to v18LTS, gitignore added, rclone fix

Dockerfile

@@ -1,14 +1,16 @@
 # Versión 1.1
 # dockerfile-v1.1
 # Changelog:
-# - Añadido usuario 'user' con permisos de sudo.
+# - Añadido usuario 'user' con permisos de sudo sin contraseña.
 # - Ajustados permisos para start_server.sh.
-# - Añadido chmod 4755 para sudo.
 
 FROM nvidia/cuda:11.3.1-base-ubuntu20.04
 
-ENV DEBIAN_FRONTEND=noninteractive TZ=Europe/Paris
+ENV DEBIAN_FRONTEND=noninteractive \
+    TZ=Europe/Paris
 
+# Remove any third-party apt sources to avoid issues with expiring keys.
+# Install some basic utilities
 RUN rm -f /etc/apt/sources.list.d/*.list && \
     apt-get update && apt-get install -y --no-install-recommends \
     curl \
@@ -24,47 +26,75 @@ RUN rm -f /etc/apt/sources.list.d/*.list && \
     build-essential \
     libsndfile-dev \
     software-properties-common \
-    openssh-server \
-    fuse \
  && rm -rf /var/lib/apt/lists/*
 
-RUN curl https://rclone.org/install.sh | bash
-
 RUN add-apt-repository ppa:flexiondotorg/nvtop && \
     apt-get upgrade -y && \
     apt-get install -y --no-install-recommends nvtop
 
-RUN curl -sL https://deb.nodesource.com/setup_18.x | bash - && \
+RUN curl -sL https://deb.nodesource.com/setup_14.x  | bash - && \
     apt-get install -y nodejs && \
     npm install -g configurable-http-proxy
 
+# Create a working directory
+WORKDIR /app
+
+# Create a non-root user and switch to it
+RUN adduser --disabled-password --gecos '' --shell /bin/bash user \
+ && chown -R user:user /app
+RUN echo "user ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/90-user
+USER user
+
+# All users can use /home/user as their home directory
+ENV HOME=/home/user
+RUN mkdir $HOME/.cache $HOME/.config \
+ && chmod -R 777 $HOME
+
+# Set up the Conda environment
 ENV CONDA_AUTO_UPDATE_CONDA=false \
-    PATH=/root/miniconda/bin:$PATH
-RUN curl -sLo /root/miniconda.sh https://repo.continuum.io/miniconda/Miniconda3-py39_4.10.3-Linux-x86_64.sh \
- && chmod +x /root/miniconda.sh \
- && /root/miniconda.sh -b -p /root/miniconda \
- && rm /root/miniconda.sh \
+    PATH=$HOME/miniconda/bin:$PATH
+RUN curl -sLo ~/miniconda.sh https://repo.continuum.io/miniconda/Miniconda3-py39_4.10.3-Linux-x86_64.sh \
+ && chmod +x ~/miniconda.sh \
+ && ~/miniconda.sh -b -p ~/miniconda \
+ && rm ~/miniconda.sh \
  && conda clean -ya
 
-WORKDIR /root/app
+WORKDIR $HOME/app
+
+#######################################
+# Start root user section
+#######################################
 
-COPY requirements.txt .
-RUN /root/miniconda/bin/pip install --no-cache-dir --upgrade -r requirements.txt
+USER root
 
-RUN useradd -m -s /bin/bash user && echo 'user:user' | chpasswd && adduser user sudo
-RUN chmod 4755 /usr/bin/sudo
+# User Debian packages
+## Security warning : Potential user code executed as root (build time)
+RUN --mount=target=/root/packages.txt,source=packages.txt \
+    apt-get update && \
+    xargs -r -a /root/packages.txt apt-get install -y --no-install-recommends \
+    && rm -rf /var/lib/apt/lists/*
 
-COPY . /root/app
+RUN --mount=target=/root/on_startup.sh,source=on_startup.sh,readwrite \
+    bash /root/on_startup.sh
 
-COPY rclone.conf /home/user/.config/rclone/rclone.conf
-RUN chown -R user:user /home/user/.config
-RUN chmod +x /root/app/start_server.sh
+RUN mkdir /data && chown user:user /data
 
-COPY login.html /root/miniconda/lib/python3.9/site-packages/jupyter_server/templates/login.html
+#######################################
+# End root user section
+#######################################
 
 USER user
-RUN mkdir -p /home/user/.jupyter/lab/user-settings/@jupyterlab/apputils-extension/ && \
-    echo '{ "theme": "JupyterLab Dark" }' > /home/user/.jupyter/lab/user-settings/@jupyterlab/apputils-extension/themes.jupyterlab-settings
+
+# Python packages
+RUN --mount=target=requirements.txt,source=requirements.txt \
+    pip install --no-cache-dir --upgrade -r requirements.txt
+
+# Copy the current directory contents into the container at $HOME/app setting the owner to the user
+COPY --chown=user . $HOME/app
+
+RUN chmod +x /home/user/app/start_server.sh
+
+COPY --chown=user login.html /home/user/miniconda/lib/python3.9/site-packages/jupyter_server/templates/login.html
 
 ENV PYTHONUNBUFFERED=1 \
     GRADIO_ALLOW_FLAGGING=never \
@@ -74,6 +104,4 @@ ENV PYTHONUNBUFFERED=1 \
     SYSTEM=spaces \
     SHELL=/bin/bash
 
-USER root
-
-CMD ["/root/app/start_server.sh"]
+CMD ["./start_server.sh"]

Dockerfile-original

@@ -0,0 +1,101 @@
+FROM nvidia/cuda:11.3.1-base-ubuntu20.04
+
+ENV DEBIAN_FRONTEND=noninteractive \
+	TZ=Europe/Paris
+
+# Remove any third-party apt sources to avoid issues with expiring keys.
+# Install some basic utilities
+RUN rm -f /etc/apt/sources.list.d/*.list && \
+    apt-get update && apt-get install -y --no-install-recommends \
+    curl \
+    ca-certificates \
+    sudo \
+    git \
+    git-lfs \
+    zip \
+    unzip \
+    htop \
+    bzip2 \
+    libx11-6 \
+    build-essential \
+    libsndfile-dev \
+    software-properties-common \
+ && rm -rf /var/lib/apt/lists/*
+
+RUN add-apt-repository ppa:flexiondotorg/nvtop && \
+    apt-get upgrade -y && \
+    apt-get install -y --no-install-recommends nvtop
+
+RUN curl -sL https://deb.nodesource.com/setup_14.x  | bash - && \
+    apt-get install -y nodejs && \
+    npm install -g configurable-http-proxy
+
+# Create a working directory
+WORKDIR /app
+
+# Create a non-root user and switch to it
+RUN adduser --disabled-password --gecos '' --shell /bin/bash user \
+ && chown -R user:user /app
+RUN echo "user ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/90-user
+USER user
+
+# All users can use /home/user as their home directory
+ENV HOME=/home/user
+RUN mkdir $HOME/.cache $HOME/.config \
+ && chmod -R 777 $HOME
+
+# Set up the Conda environment
+ENV CONDA_AUTO_UPDATE_CONDA=false \
+    PATH=$HOME/miniconda/bin:$PATH
+RUN curl -sLo ~/miniconda.sh https://repo.continuum.io/miniconda/Miniconda3-py39_4.10.3-Linux-x86_64.sh \
+ && chmod +x ~/miniconda.sh \
+ && ~/miniconda.sh -b -p ~/miniconda \
+ && rm ~/miniconda.sh \
+ && conda clean -ya
+
+WORKDIR $HOME/app
+
+#######################################
+# Start root user section
+#######################################
+
+USER root
+
+# User Debian packages
+## Security warning : Potential user code executed as root (build time)
+RUN --mount=target=/root/packages.txt,source=packages.txt \
+    apt-get update && \
+    xargs -r -a /root/packages.txt apt-get install -y --no-install-recommends \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN --mount=target=/root/on_startup.sh,source=on_startup.sh,readwrite \
+	bash /root/on_startup.sh
+
+RUN mkdir /data && chown user:user /data
+
+#######################################
+# End root user section
+#######################################
+
+USER user
+
+# Python packages
+RUN --mount=target=requirements.txt,source=requirements.txt \
+    pip install --no-cache-dir --upgrade -r requirements.txt
+
+# Copy the current directory contents into the container at $HOME/app setting the owner to the user
+COPY --chown=user . $HOME/app
+
+RUN chmod +x start_server.sh
+
+COPY --chown=user login.html /home/user/miniconda/lib/python3.9/site-packages/jupyter_server/templates/login.html
+
+ENV PYTHONUNBUFFERED=1 \
+	GRADIO_ALLOW_FLAGGING=never \
+	GRADIO_NUM_PORTS=1 \
+	GRADIO_SERVER_NAME=0.0.0.0 \
+	GRADIO_THEME=huggingface \
+	SYSTEM=spaces \
+	SHELL=/bin/bash
+
+CMD ["./start_server.sh"]

on_startup.sh

@@ -1,5 +1,11 @@
+# Versión 1.1
+# on_startup.sh-v1.1
+# Changelog:
+# - Asegurado que el script tenga permisos ejecutables.
+# - Verificado que el script tiene el formato correcto y el shebang.
+
 #!/bin/bash
 # Write some commands here that will run on root user before startup.
 # For example, to clone transformers and install it in dev mode:
 # git clone https://github.com/huggingface/transformers.git
-# cd transformers && pip install -e ".[dev]"
+# cd transformers && pip install -e ".[dev]"

start_server-original.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+JUPYTER_TOKEN="${JUPYTER_TOKEN:=huggingface}"
+
+echo "Starting Jupyter Lab with token $JUPYTER_TOKEN"
+
+NOTEBOOK_DIR="/data"
+
+jupyter-lab \
+    --ip 0.0.0.0 \
+    --port 7860 \
+    --no-browser \
+    --allow-root \
+    --ServerApp.token="$JUPYTER_TOKEN" \
+    --ServerApp.tornado_settings="{'headers': {'Content-Security-Policy': 'frame-ancestors *'}}" \
+    --ServerApp.cookie_options="{'SameSite': 'None', 'Secure': True}" \
+    --ServerApp.disable_check_xsrf=True \
+    --LabApp.news_url=None \
+    --LabApp.check_for_updates_class="jupyterlab.NeverCheckForUpdate" \
+    --notebook-dir=$NOTEBOOK_DIR