Update Dockerfile

Dockerfile

@@ -4,6 +4,9 @@ FROM python:3.10-slim
 # Set working directory
 WORKDIR /app
 
+# Create a non-root user to avoid permission issues
+RUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app
+
 # Install system dependencies required for FastSD CPU
 RUN apt-get update && apt-get install -y \
     git \
@@ -15,7 +18,7 @@ RUN apt-get update && apt-get install -y \
 # Clone the FastSD CPU repository
 RUN git clone https://github.com/rupeshs/fastsdcpu.git .
 
-# Create a virtual environment and activate it
+# Create a virtual environment
 RUN python -m venv /app/env
 ENV PATH="/app/env/bin:$PATH"
 
@@ -23,11 +26,28 @@ ENV PATH="/app/env/bin:$PATH"
 RUN pip install --no-cache-dir --upgrade pip
 RUN pip install --no-cache-dir -r requirements.txt
 
-# Install OpenVINO for performance optimization (optional)
+# Install OpenVINO for performance optimization
 RUN pip install --no-cache-dir openvino-dev
 
-# Pre-download the default model (stabilityai/sd-turbo) to avoid runtime downloads
-RUN python -c "from huggingface_hub import snapshot_download; snapshot_download(repo_id='stabilityai/sd-turbo', local_dir='/app/models/sd-turbo')"
+# Set cache directories for Hugging Face and Transformers
+ENV HF_HOME=/app/cache/huggingface
+ENV TRANSFORMERS_CACHE=/app/cache/huggingface/hub
+ENV HUGGINGFACE_HUB_CACHE=/app/cache/huggingface/hub
+
+# Create cache directory and set permissions
+RUN mkdir -p /app/cache/huggingface/hub && chown -R appuser:appuser /app/cache
+
+# Pre-download the default model (stabilityai/sd-turbo) to the cache
+RUN python -c "from huggingface_hub import snapshot_download; snapshot_download(repo_id='stabilityai/sd-turbo', local_dir='/app/cache/huggingface/hub/models--stabilityai--sd-turbo', local_dir_use_symlinks=False)"
+
+# Suppress OpenVINO telemetry by setting a writable telemetry directory
+ENV OPENVINO_TELEMETRY_DIR=/app/cache/openvino
+
+# Create OpenVINO telemetry directory and set permissions
+RUN mkdir -p /app/cache/openvino && chown -R appuser:appuser /app/cache/openvino
+
+# Switch to non-root user
+USER appuser
 
 # Expose port 8000 for the API server
 EXPOSE 8000