FROM python:3.11.3 # Set up a new user named "user" with user ID 1000 RUN useradd -m -u 1000 user # Switch to the "user" user USER user # Set the working directory to the user's home directory WORKDIR $HOME/app # Set home to the user's home directory ENV HOME=/home/user \ PATH=/home/user/.local/bin:$PATH # Get secret OPENAI_API_KEY and clone it as repo at buildtime / changed required to true RUN --mount=type=secret,id=OPENAI_API_KEY,mode=0444,required=true # Copy the current directory contents into the container at $HOME/app setting the owner to the user COPY --chown=user . $HOME/app WORKDIR /code RUN git clone git@github.com:avfranco-br/https://huggingface.co/spaces/avfranco/ea4all-agent.git . COPY ./requirements.txt /code/requirements.txt RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt CMD ["python", "app.py"]