fix: permissions

Dockerfile

@@ -2,9 +2,26 @@ FROM ghcr.io/ten-framework/ten_agent_build:0.4.17
 
 RUN pip install -U "huggingface_hub[cli]"
 
-COPY .env .env
-COPY entrypoint.sh /entrypoint.sh
 
-WORKDIR /app
+# Set up a new user named "user" with user ID 1000
+RUN useradd -m -u 1000 user
 
-ENTRYPOINT ["/entrypoint.sh"]
+# Switch to the "user" user
+USER user
+
+# Set home to the user's home directory
+ENV HOME=/home/user \
+	PATH=/home/user/.local/bin:$PATH
+
+# Set the working directory to the user's home directory
+WORKDIR $HOME/app
+
+# Try and run pip command after setting the user with `USER user` to avoid permission issues with Python
+RUN pip install --no-cache-dir --upgrade pip
+
+# Copy the current directory contents into the container at $HOME/app setting the owner to the user
+# COPY --chown=user . $HOME/app
+COPY --chown=user .env $HOME/app/
+COPY --chown=user entrypoint.sh $HOME/app/
+
+ENTRYPOINT ["entrypoint.sh"]

entrypoint.sh

@@ -1,5 +1,5 @@
 #!/bin/bash -xe
 
-mkdir -p /app/models
+mkdir -p data
 
-HF_HUB_ENABLE_HF_TRANSFER=1 huggingface-cli download --resume-download Qwen/Qwen2.5-7B-Instruct --local-dir /app/models/Qwen2.5-7B-Instruct
+HF_HUB_ENABLE_HF_TRANSFER=1 huggingface-cli download --resume-download Qwen/Qwen2.5-7B-Instruct --local-dir ./data/Qwen2.5-7B-Instruct