Update Dockerfile

Dockerfile

@@ -7,24 +7,22 @@ RUN apt-get update && apt-get install --no-install-recommends -y curl ffmpeg
 RUN if [ "$TARGETPLATFORM" != "linux/amd64" ]; then apt-get install --no-install-recommends -y build-essential ; fi
 RUN if [ "$TARGETPLATFORM" != "linux/amd64" ]; then curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y ; fi
 ENV PATH="/root/.cargo/bin:${PATH}"
-# for deepspeed support - doesn't seem worth it, image +7.5GB, over the 10GB ghcr.io limit, and no noticable gain in speed or VRAM usage?
-#RUN curl -O https://developer.download.nvidia.com/compute/cuda/repos/debian11/x86_64/cuda-keyring_1.1-1_all.deb
-#RUN dpkg -i cuda-keyring_1.1-1_all.deb && rm cuda-keyring_1.1-1_all.deb
-#RUN apt-get update && apt-get install --no-install-recommends -y libaio-dev build-essential cuda-toolkit
-#ENV CUDA_HOME=/usr/local/cuda
+
 RUN apt-get clean && rm -rf /var/lib/apt/lists/*
 
-WORKDIR /app
+# Add a non-root user and set permissions
+RUN useradd -ms /bin/bash appuser
+USER appuser
+WORKDIR /home/appuser/app
 RUN mkdir -p voices config
 
 ARG USE_ROCM
 ENV USE_ROCM=${USE_ROCM}
 
-COPY requirements*.txt /app/
-RUN if [ "${USE_ROCM}" = "1" ]; then mv /app/requirements-rocm.txt /app/requirements.txt; fi
-RUN --mount=type=cache,target=/root/.cache/pip pip install -r requirements.txt
+COPY requirements*.txt /home/appuser/app/
+RUN --mount=type=cache,target=/home/appuser/.cache/pip pip install -r requirements.txt
 
-COPY *.py *.sh *.default.yaml README.md LICENSE /app/
+COPY *.py *.sh *.default.yaml README.md LICENSE /home/appuser/app/
 
 ARG PRELOAD_MODEL
 ENV PRELOAD_MODEL=${PRELOAD_MODEL}